Privacy & Data Protection Policy
Effective Date: March 1st, 2025
Entity: Slaneybridge LLC
Domain: slaneybridge.com
Jurisdiction: United States (including NY LLC law), with international compliance
1. Introduction
Slaneybridge LLC ("Company", "we", or "us") is committed to protecting your privacy. This Privacy & Data Protection Policy explains how we collect, use, store, and disclose personal and non-personal data when you interact with our services through slaneybridge.com (the “Site”).
We comply with applicable laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and New York SHIELD Act.
2. What Data We Collect
We may collect the following types of data:
A. Personal Information (only with user consent):
- Full name
- Email address
- Phone number
- Mailing address
- Payment details (via third-party processors)
- IP address
B. Automatically Collected Data:
- Device type, OS, browser, and geographic region
- Pages visited, duration, referral links
- Clicks, scrolls, and other behavioral analytics
- Cookie ID and session data
C. Sensitive Information: We do not intentionally collect or store sensitive personal data (e.g., health, race, religion) and will reject such data upon detection.
3. Lawful Basis for Data Collection
Under GDPR, we collect personal data based on:
- Consent (e.g., opt-ins, newsletter subscriptions)
- Contractual necessity (e.g., processing a purchase)
- Legal obligation (e.g., tax records)
- Legitimate interests (e.g., security, service optimization)
4. How We Use Your Information
- To deliver products, services, and support
- To personalize user experience
- To detect and prevent fraud, abuse, or unauthorized access
- To analyze traffic and improve site performance
- To fulfill legal and tax obligations
- To send occasional communications (with opt-out available)
5. Cookies & Tracking
We use essential and performance-based cookies.
- Cookie consent is required on first visit (GDPR-compliant)
- Users may disable cookies via their browser
- We do not use cross-site tracking or fingerprinting
6. Third-Party Data Processors
We may share data (only as necessary) with trusted providers under strict contractual obligations:
- Hosting (e.g., AWS, Cloudflare)
- Payments (e.g., Stripe, PayPal)
- Analytics (e.g., Google Analytics, Plausible – anonymized)
- Email (e.g., Mailchimp, Postmark)
We never sell or lease your data.
7. Data Storage & Security
All data is encrypted at rest and in transit. We implement:
- Role-based access controls
- MFA for internal tools
- Regular vulnerability assessments
- Data minimization principles
- Hosting in GDPR/CCPA-compliant facilities
8. Your Rights
If you are in the US, EU, UK, or other applicable regions, you have the right to:
- Access and correct your data
- Request deletion (“Right to be forgotten”)
- Restrict or object to processing
- Port your data to another service
- Withdraw consent at any time
- File a complaint with your local data protection authority
Requests can be made at: [your privacy email]. We respond within 30 days, per GDPR.
9. Data Retention
- Transactional data: kept for 7 years (legal/tax)
- User account data: until account deletion or inactivity for 24 months
- Analytics data: anonymized after 12 months
10. Children’s Privacy
This site is not intended for children under age 13. We do not knowingly collect or market to children. If we discover such data, we will delete it immediately.
11. International Transfers
If data is transferred outside your jurisdiction (e.g., to US-based servers), we ensure:
- Standard Contractual Clauses (SCCs) or equivalent legal safeguards
- Hosting with ISO 27001 and SOC 2-certified providers
12. Changes to This Policy
We reserve the right to amend this policy at any time. Updates will be posted here with an updated “Effective Date.” Material changes may be communicated directly via email or on-site notifications.
13. Contact Us
For any questions or requests about your privacy:
- Email: legal@slaneybridge.com
- Mailing Address: 600 Mamaroneck Ave, Suite 400, Harrison, NY 10528
14. Enforcement
Non-compliance or violations of this policy may result in account suspension, legal action, or disclosure to authorities.
