At BreezePod, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website at breezepod.io, use our services, or make a purchase from our online store. By accessing or using our services, you agree to the terms outlined in this policy.
3 Cookies & Tracking Technologies
BreezePod uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content. A cookie is a small data file stored on your device when you visit our website.
Types of Cookies We Use
- Essential Cookies: Required for the basic functionality of our website, such as maintaining your shopping cart, enabling secure checkout, and remembering your login session. These cannot be disabled.
- Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data. We use services such as Google Analytics to gather this information.
- Functional Cookies: Remember your preferences, such as language settings, currency selection, and display options, to provide a more personalized experience.
- Marketing Cookies: Used to track visitors across websites and display relevant advertisements. These cookies help us measure the effectiveness of our advertising campaigns.
Managing Your Cookie Preferences
You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of breezepod.io. Most browsers allow you to:
- View and delete existing cookies
- Block all or specific types of cookies
- Set preferences for certain websites
- Receive notifications when a cookie is being set
We also provide a cookie consent banner on your first visit, allowing you to accept or customize your cookie preferences.
Do Not Track Signals
Some browsers offer a "Do Not Track" (DNT) feature. BreezePod currently does not respond to DNT signals, as there is no industry-wide standard for compliance. However, you may use the cookie management options described above to control tracking.
4 Third-Party Services
BreezePod works with trusted third-party service providers to operate our business and deliver our services. These providers may have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your data.
Categories of Third-Party Providers
- Payment Processors: We use secure, PCI-DSS compliant payment processors (such as Stripe and PayPal) to handle transactions. Your payment information is transmitted directly to these processors and is not stored on BreezePod servers.
- Shipping & Logistics: We share your shipping address and contact details with carriers and fulfillment partners to deliver your orders.
- Analytics & Advertising: We use services like Google Analytics, Meta Pixel, and similar tools to analyze website traffic and measure advertising performance.
- Email & Communication: We use email service providers to send transactional emails, newsletters, and marketing communications.
- Cloud Hosting & Infrastructure: Our website and data are hosted on secure cloud infrastructure provided by reputable hosting services.
- Fraud Prevention: We use fraud detection services to protect against unauthorized transactions and account abuse.
Third-Party Links
Our website may contain links to third-party websites, plugins, or applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. BreezePod does not control these third-party websites and is not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.
Data Sharing
BreezePod does not sell your personal information to third parties. We may share your data only in the following circumstances:
- With service providers who assist in operating our business (as described above)
- When required by law, regulation, or legal process
- To protect the rights, safety, or property of BreezePod, our customers, or the public
- In connection with a merger, acquisition, or sale of all or a portion of our assets (with prior notice to affected users)
- With your explicit consent
5 Data Security
BreezePod takes the security of your personal information seriously. We implement a variety of technical, administrative, and physical safeguards to protect your data from unauthorized access, alteration, disclosure, or destruction.
Security Measures We Employ
- Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL (Transport Layer Security/Secure Sockets Layer) protocols.
- Secure Storage: Personal data is stored on encrypted servers with restricted access controls and regular security audits.
- Access Controls: Only authorized BreezePod personnel with a legitimate business need can access personal data. All access is logged and monitored.
- Payment Security: We are PCI-DSS compliant and do not store full credit card numbers on our systems. All payment processing is handled by certified third-party processors.
- Regular Audits: We conduct regular security assessments, vulnerability scans, and penetration testing to identify and address potential risks.
- Incident Response: We maintain a comprehensive incident response plan to quickly address any data breaches or security incidents. In the event of a breach that affects your personal data, we will notify you and the relevant authorities as required by applicable law.
Data Retention
BreezePod retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:
- Account data is retained for as long as your account is active or as needed to provide services
- Transaction records are retained for a minimum of 7 years for tax and legal compliance
- Marketing data is retained until you unsubscribe or request deletion
- Analytics data is retained in anonymized form and may be kept indefinitely
When your data is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies.
Your Responsibility
While we work hard to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to use strong, unique passwords for your BreezePod account, enable two-factor authentication when available, and keep your login credentials confidential. If you believe your account has been compromised, please contact us immediately at support@breezepod.io.
6 Children's Privacy
BreezePod's products and services are not directed to individuals under the age of 16 (or the applicable age of consent in your jurisdiction). We do not knowingly collect, solicit, or maintain personal information from children under 16 years of age.
If we become aware that we have inadvertently collected personal information from a child under 16, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided personal information to BreezePod without your consent, please contact us at support@breezepod.io, and we will promptly remove the data.
We comply with the Children's Online Privacy Protection Act (COPPA) and similar international regulations designed to protect the privacy of minors.
7 GDPR Compliance
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, BreezePod processes your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable local data protection laws.
Your Rights Under the GDPR
As a data subject, you have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
- Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data, subject to certain legal exceptions.
- Right to Restriction of Processing: You have the right to request that we limit the processing of your personal data under certain circumstances.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
- Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence if you believe your data protection rights have been violated.
Legal Bases for Processing
BreezePod processes your personal data under the following legal bases:
- Contractual Necessity: Processing necessary to fulfill our contract with you (e.g., processing orders, delivering products)
- Consent: Processing based on your explicit consent (e.g., marketing emails, non-essential cookies)
- Legitimate Interests: Processing necessary for our legitimate business interests, provided these do not override your fundamental rights (e.g., fraud prevention, analytics)
- Legal Obligation: Processing necessary to comply with applicable laws and regulations
International Data Transfers
Your personal data may be transferred to and processed in countries outside the EEA. When such transfers occur, BreezePod ensures appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms.
Exercising Your Rights
To exercise any of your GDPR rights, please contact our Data Protection team at support@breezepod.io. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.
8 CCPA Compliance
If you are a resident of California, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information. BreezePod is committed to honoring these rights.
Your Rights Under the CCPA/CPRA
- Right to Know: You have the right to request that BreezePod disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collection, and the categories of third parties with whom we share it.
- Right to Delete: You have the right to request the deletion of your personal information, subject to certain exceptions provided by law.
- Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
- Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. BreezePod does not sell your personal information. If this practice changes in the future, we will provide a clear "Do Not Sell or Share My Personal Information" link on our website.
- Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to purposes necessary to provide the services you request.
- Right to Non-Discrimination: BreezePod will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not receive different pricing, quality of service, or any other penalty for exercising your rights.
Categories of Information Collected
In the preceding 12 months, BreezePod may have collected the following categories of personal information:
- Identifiers (name, email address, postal address, phone number, IP address)
- Commercial information (purchase history, products viewed, shopping preferences)
- Internet or electronic network activity (browsing history on breezepod.io, search queries, interaction data)
- Geolocation data (approximate location based on IP address)
- Inferences drawn from the above to create a profile reflecting preferences and behavior
How to Submit a Request
California residents may submit a verifiable consumer request by contacting us at support@breezepod.io. You may make a request up to twice within a 12-month period. We will verify your identity before processing your request and respond within 45 days. If additional time is needed, we will notify you of the extension and the reason for it.
Authorized Agents
You may designate an authorized agent to submit a request on your behalf. We may require the authorized agent to provide proof of written permission from you and may need to verify your identity directly.
9 Changes to This Policy
BreezePod reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will:
- Update the "Effective Date" at the top of this page
- Post the revised Privacy Policy on breezepod.io
- Notify you of material changes via email (if you have an account) or through a prominent notice on our website
We encourage you to review this Privacy Policy periodically to stay informed about how BreezePod protects your information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms.
If a change materially reduces your rights or significantly changes how we process your data, we will seek your explicit consent before applying the new terms to your existing data, where required by applicable law.