Privacy Policy

Last updated:

This Privacy Policy describes how Gardenxyyouth ("we," "us," or "our") collects, uses, stores, and protects your personal information when you visit our website at gardenxyyouth.world (the "Website"). We operate in the United States and are committed to protecting your privacy in accordance with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Utah Consumer Privacy Act (UCPA), the Montana Consumer Data Privacy Act (MCDPA), and other state privacy laws where applicable. If you are located in the European Economic Area or United Kingdom, the GDPR sections below also apply to you.

1. Data Controller

The data controller responsible for your personal data is:

• Gardenxyyouth
• 1217 W Bell St, Glendive, MT 59330, United States
• Email: online@gardenxyyouth.world
• Phone: +1 406 602 2222

2. Data We Collect

2.1 Information You Provide

When you use our contact form, we collect:

• Your name
• Your email address
• Your message content
• Your consent to data processing

2.2 Automatically Collected Data

When you visit our Website, we may automatically collect:

• IP address
• Browser type and version
• Operating system
• Referring URL
• Pages visited and time spent
• Date and time of access

2.3 Cookies and Similar Technologies

We use cookies and similar technologies as described in our Cookie Policy. Cookie preferences are stored locally in your browser.

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes:

• Responding to your inquiries submitted through the contact form (legal basis: consent and legitimate interest)
• Operating and improving the Website (legal basis: legitimate interest)
• Analyzing Website usage when you consent to analytics cookies (legal basis: consent)
• Delivering marketing content when you consent to marketing cookies (legal basis: consent)
• Complying with legal obligations (legal basis: legal obligation)

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: up to 24 months from the date of submission
• Analytics data: up to 26 months
• Cookie consent records: up to 12 months
• Server log files: up to 90 days

After the retention period expires, your data is securely deleted or anonymized.

5. Data Sharing and Third Parties

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising unless you have given consent through our cookie banner for marketing cookies. We may share information with:

• Service providers who assist in Website hosting, email delivery, and operation, bound by contractual confidentiality and data protection obligations
• Analytics and advertising partners, only when you have given consent for analytics or marketing cookies
• Law enforcement or regulatory authorities when required by applicable law, court order, or legal process
• Professional advisors (such as attorneys or accountants) where necessary to protect our legal rights

6. United States Privacy Rights

Depending on your state of residence, you may have the following rights regarding your personal information:

• Right to know/access: request details about the categories and specific pieces of personal information we have collected about you
• Right to delete: request deletion of personal information we collected from you, subject to legal exceptions
• Right to correct: request correction of inaccurate personal information we maintain about you
• Right to opt out of sale or sharing: we do not sell personal information; where applicable, you may opt out of sharing for targeted advertising by declining marketing cookies in our cookie banner or by contacting us
• Right to limit use of sensitive personal information: we do not use sensitive personal information for purposes requiring an opt-out under applicable state law
• Right to non-discrimination: we will not discriminate against you for exercising your privacy rights
• Right to appeal: if we deny your request, residents of certain states may appeal our decision by contacting us with the subject line "Privacy Appeal"

To submit a privacy request, contact us using the details in Section 13. We will verify your identity before fulfilling a request. Authorized agents may submit requests on your behalf where permitted by law; we may require proof of authorization. We aim to respond within 45 days, or as required by applicable state law.

6.1 Categories of Personal Information (CCPA/CPRA)

In the preceding 12 months, we may have collected the following categories of personal information for the business purposes described in this policy:

• Identifiers: name, email address, IP address (contact form and server logs)
• Internet or other electronic network activity: browsing history on our Website, pages viewed, and interaction data (analytics cookies, with consent)
• Commercial information: records of inquiries submitted through our contact form
• Inferences: preferences derived from cookie settings stored locally in your browser

We collect personal information directly from you, automatically through your use of the Website, and from cookies or similar technologies where you have provided consent.

6.2 California Shine the Light

California Civil Code Section 1798.83 permits California residents to request information once per year about personal information disclosed to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

6.3 Nevada Residents

Nevada residents may opt out of the sale of covered personal information. We do not sell covered personal information as defined under Nevada law.

7. International Data Transfers

Your data may be processed in the United States. Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

8. Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights:

• Right of access: request a copy of your personal data
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data ("right to be forgotten")
• Right to restrict processing: request limitation of data processing
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: withdraw consent at any time without affecting prior processing
• Right to lodge a complaint: file a complaint with your local data protection authority

To exercise any of these rights, contact us at online@gardenxyyouth.world. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all data transmission
• Access controls limiting data access to authorized personnel
• Regular security assessments of our systems
• Secure storage with encryption where applicable

10. Children's Privacy

Our Website is not directed at children. We do not knowingly collect personal information from children under 13 years of age in accordance with the U.S. Children's Online Privacy Protection Act (COPPA). If you are in the European Economic Area, we do not knowingly collect personal data from individuals under 16 without parental consent. If you believe we have collected information from a child, please contact us immediately and we will take steps to delete it.

11. Email Communications

If you contact us through the contact form or by email, we may respond to your inquiry by email. We comply with the CAN-SPAM Act and applicable U.S. email laws. We do not send unsolicited commercial email without your consent. You may request that we stop contacting you by replying to our message or contacting us using the details below.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

For questions about this Privacy Policy or your personal data, contact us at:

• Gardenxyyouth
• 1217 W Bell St, Glendive, MT 59330, United States
• Email: online@gardenxyyouth.world
• Phone: +1 406 602 2222