Last Updated: February 13, 2023
- Personal Information.
- Identifiers (e.g., name, email, telephone number, address, username);
- Sensitive Personal Information (e.g., government identification number; precise geolocation; racial or ethnic origin; religious beliefs; health information; contents messages when we are not the recipient);
- Legally protected information (e.g., race, citizenship, marital status, sex);
- Employment-related information (e.g. current or past employment);
- Non-public educational information, including information protected under the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g, 34 C.F.R. Part 99);
- Biometrics (e.g., DNA, face/voice prints, health data) and audio, electronic, visual, thermal, or olfactory information;
- Inferences drawn from Personal Information to create a profile about preferences, characteristics, trends, predispositions, behavior, attitudes, intelligence, and aptitudes;
- Commercial information (e.g., products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies); and
- Internet or other similar activity (e.g., browsing history; content interactions).
- Personal Information does not include (i) publicly available information; (ii) aggregated information, meaning data about a group or category of services or users from which individual identities and other Personal Information has been removed; or (iii) deidentified information that cannot be easily linked back to the individual.
- Information About Childern
The Services are designed for adults, not children. DDK Publishing WILL NEVER KNOWINGLY COLLECT PERSONAL INFORMATION FROM A CHILD UNDER THE AGE OF 18 (“MINOR”) WITHOUT EXPRESS PARENT OR LEGAL GUARDIAN CONSENT. DDK Publishing only collects and processes Personal Information of individuals that create an account on the Site, and we do not permit Minors to create an account on the Site without express permission from a parent or legal guardian. PLEASE EMAIL email@example.com IF YOU BECOME AWARE THAT DDK Publishing HAS COLLECTED PERSONAL INFORMATION FROM A MINOR WITHOUT PARENTAL OR LEGAL GUARDIAN CONSENT, SO WE CAN TAKE APPROPRIATE ACTION.
- Personal Information We Collect
DDK Publishing collects your Personal Information (i) with your consent; (ii) if we have a legitimate interest in doing so; or (iii) as authorized or required by law. We only collect, use, retain and share your Personal Information as reasonably necessary and proportionate to achieve our purposes, or for other purposes that we disclose to you and are compatible with the context of how we collected the Personal Information. In the preceding 12 months, DDK Publishing has collected Personal Information in the categories of identifiers, commercial information, internet and similar activity, and inferences you express while using the Services. We collect this information from sources and for purposes described below:
- When you visit our Site, including ddkpublishing.com, DDK Publishing collects identifiers like your IP address and technical data like your device browser type, the webpage visited before you came to our Site, session information and your searches and content interactions on the Site. We also deposit and collect information from Cookies, as described in more detail in section 2. We use this information to maintain the quality of our Services, provide general statistics regarding use of the Site, diagnose problems with and secure our servers, to administer the proper functioning and legitimate use of our Site, and to improve the nature and marketing of the Services. Your IP address is also used to gather broad demographic information that does not personally identify you.
- When you request more information about an item, DDK Publishing collects your email address or phone number or both, so that we can respond to your request.
- When you set up an account with us, we collect your full name and email address and require you to choose a password (your “Account Information”). We use your Account Information to identify and administer your account, fulfill your orders, and communicate with you about offers, promotions, discounts, and updates. You may opt-out of promotional communications from DDK Publishing, but you cannot opt out of communications that we send you regarding your account.
- When you order from us, we collect your name, shipping address, telephone number, and email address (your “Order Information”). This Order Information is necessary for us to use to process your order, to notify you of your order status, and to fulfill your orders. DDK Publishing does not collect, process, or store any payment information. We use a third-party PCI-DSS compliant payment processor to process all payments. Your payment information will not be stored by the payment processor unless you check the box to store this information for future orders.
- When you order from any third-party marketplace of which we are a part (for example, Amazon or Ebay), the third-party marketplace will provide to us certain information, including Order Information, that we will use to process your order, to notify you of your order status, and to fulfill your orders. We are not responsible for the terms of or any breach of any agreement between you and any third-party marketplace, and your personal information is subject to their policies and ours.
- How We Use Your Personal Information
DDK Publishing uses your Personal Information to create your account, communicate with you, process your orders, and provide you with our products and services. Additionally, we may also use your Personal Information to:
- Protect your privacy and the privacy of others;
- Send you marketing and promotional communications;
- Send administrative information and notices to you regarding your account;
- Fulfill and manage orders, returns, refunds, features, and other purchases or requests made by you;
- Administer promotions, offers, or discounts;
- Request feedback and to contact you about your use of the Site;
- Protect our Site from fraud monitoring and prevention;
- Enforce our terms, conditions and policies;
- Comply with a law, regulation, legal process, or order;
- Manage user accounts;
- Respond to data privacy requests;
- If we believe it is necessary, to identify, contact or bring legal action against persons or entities who may be causing injury to you, to DDK Publishing, or to others; and
- Fulfill any other purpose to which you consent.
- We may post user testimonials and comments on our Site upon written notice to you, which may contain Personal Information. You have the right to request removal of such testimonial and/or comment(s) upon receiving our written notice.
- Controlling Your Personal Information
DDK Publishing provides you a variety of methods and options to exercise controls over your Personal Information, such as:
- Updating Your Account. You can update your Account Information at any time by logging into your account and saving your changes.
- Marketing Messages. If you create a DDK Publishing account, DDK Publishing may use your Account Information to send you emails or other communications containing information about DDK Publishing and other matters DDK Publishing believes will interest you. At any time, you may alter your communication preferences by logging into your account and choosing the email communications you want to receive via the Email Preferences menu. Also, each email DDK Publishing sends to you will tell you how to stop receiving further emails from DDK Publishing. Please note that you must receive at least some emails to be able to place orders. Also, you may not opt out of receiving emails containing important information regarding your rights and responsibilities with respect to our Services.
- Opt-Out of Disclosure of Personal Information. To the extent permitted or required by applicable law, you can opt-out of DDK Publishing disclosing your Personal Information to third parties by emailing firstname.lastname@example.org.
- Device Settings. You can control the data we collect through automated means by adjusting your device settings, such as blocking pixels and cookies or installing a third-party plugin to control how cookies interact with your device.
- Do Not Track. Do Not Track signals are signals sent through a browser informing us that you do not want to be tracked. Currently, our systems do not recognize browser “do-not-track” requests, but you may disable certain tracking via your device settings.
- Consumer Privacy Requests. If you wish to control your Personal Information beyond the methods described above, or if you want to express concerns, lodge a complaint, or request information, please send a verifiable Consumer Privacy Request to us by email. DDK Publishing will honor your Consumer Privacy Request to the extent provided under the laws that apply to you and to our business. DDK Publishing can only fulfill a Consumer Privacy Request when we have sufficient information to verify that the requester is the person or an authorized representative of the person about whom we have collected Personal Information, and to properly understand, evaluate, and respond to the request. We do not charge a fee to process or respond to a verifiable request unless we have legal grounds to do so. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We endeavor to respond to Consumer Privacy Requests in accordance with the requirements of the law applicable to your jurisdiction.
For assistance controlling your Personal Information, or to exercise your legal privacy rights, ask questions or submit a complaint, please email email@example.com or, if you are a California resident, you can email firstname.lastname@example.org.
- Retention of Personal Information
- DDK Publishing retains the Personal Information we collect when you use our Services until you request that we delete your Personal Information. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created. We securely retain data logs and records of data requests, outcomes, and response and correspondence timelines for at least 24 months in compliance with the CCPA. We reserve the right to retain your Personal Information for longer periods if necessary to meet legal or regulatory requirements, especially to comply with commercial and tax retention obligations, to resolve potential disputes or to preserve evidence within the scope of the statutory limitations.
- How We Protect Your Data
DDK Publishing uses reasonable and appropriate security measures and practices to help protect your Personal Information from unauthorized or illegal access, destruction, loss, misuse, disclosure or alteration. Access to Personal Information is limited to employees and contractors as needed to perform their job functions. Anyone with this access is subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations. We also ensure that our employees, contractors, and agents responsible for handling privacy inquiries are informed of applicable legal requirements and we restrict access to those who need that information to process it. When you place orders or access your Account Information, we use a secure server. The secure server layer (SSL) encrypts all information you input before it is sent to us. All of the customer data we collect is similarly protected against unauthorized access. That being said, no measures are guaranteed to be 100% secure. You should take steps to protect against unauthorized access to your device and account, including to (1) choose a robust password that nobody else knows or can easily guess and (2) keep your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.
We may store your data on servers provided by third party hosting vendors with whom we have contracted. To facilitate global operations, we may transfer and access Personal Information from around the world, including to servers located inside or outside the United States. By providing information to us, you consent to the transfer and storage of Personal Information in these locations.
We use the following technical safeguards to keep your data safe and secure:
- Unique password requirements and limited employee access;
- Destruction, deletion or de-identification of data;
- Industry standard security protocols;
- Employee training on how to handle sensitive data, breach notice and procedures;
- Secure Technology (SSL), server authentication and data encryption and use of firewall to host data;
- Designated security coordinator or team on the DDK Publishing team;
- Sub-processors and third-parties are bound to same security practice obligations;
- Backups; and
- Periodic audits.
- When We May Disclose Data
DDK Publishing will only disclose your Personal Information to the third parties as described in this section, with your permission, or as otherwise permitted or required by applicable law. In the preceding 12 months, we have disclosed all categories of Personal Information we collected to third-party recipients for a business purpose. We may disclose this information to the following recipients:
- Service Providers. DDK Publishing uses third-party service providers like data hosting companies, analytics services, and payment processors that may have access to your Personal Information to perform their contractual obligations to us. The type of information that we disclose to a service provider will depend on the service that they provide to us. Our service providers are subject to contractual agreements that protect your Personal Information, and we require all service providers to maintain confidentiality standards that are commercially reasonable to ensure the security of your Personal Information.
- Law Enforcement and Legal Obligations. DDK Publishing may disclose your Personal Information to a government institution that has asserted its lawful authority to obtain the information. DDK Publishing may also disclose your Personal Information if DDK Publishing has reasonable grounds to believe the Personal Information could be useful in the investigation of unlawful activity. DDK Publishing may also disclose your Personal Information to comply with a subpoena, judgment, or warrant or an order made by a court, person, or body with jurisdiction to compel the production of information, or to comply with court rules regarding the production of records and information. DDK Publishing has no control over, or liability for, those persons’ use and disclosure of your Personal Information, and their use and disclosure is not subject to this Policy.
- Aggregated and De-Identified Information. DDK Publishing reserves the right to disclose, use, or sell aggregated or anonymized information about any individuals with third parties for any purpose, without restriction. For example, we will not disclose that you bought a particular item, but we may disclose how many customers in demographic groups bought that certain item.
- Your Privacy Rights
This section offers instructions to control how DDK Publishing collects and uses your Personal Information and provides the notices of privacy rights as required under the laws applicable to residents of California and other US states, Canada, and the EEA and UK.
- California and Certain Other U.S. States. This section provides the disclosures and notices required under the California Consumer Privacy Act of 2018 (“CCPA”) and offers informational notices to residents of Virginia, Colorado, Nevada, and other U.S. states with laws providing similar protections (each a “Consumer”). Consumers may exercise the rights below to the extent provided by the laws that apply to the Consumer and to DDK Publishing, subject to our receipt of a verifiable Consumer Privacy Request and any exceptions and limitations that may apply:
- Right to Correct. You may request that we correct inaccurate Personal Information about you on our systems. If you become aware that the Personal Information that we hold about you is incorrect, or if your information changes, please inform us and we will update our records.
- Right to Deletion. You have the right to request that we delete any of your Personal Information that we collected and retained, with certain exceptions. DDK Publishing may permanently delete, deidentify, or aggregate the Personal Information in response to a request for deletion. If you submit a Consumer Privacy Request to delete your Personal Information, we will confirm the Personal Information to be deleted prior to its deletion, and we will notify you when your request is complete.
- Opt-Out of CCPA Sharing of Personal Information DDK Publishing discloses Personal Information collected via cookies as part of our display retargeting advertising efforts, which may qualify as “sharing” Personal Information under the CCPA. You can prevent your Personal Information from being disclosed and used in this manner by adjusting your device settings to block cookies or by installing a third-party plugin to control how cookies interact with your device.
- Right to Opt-Out of Profiling. The Services do not use automated processing for profiling purposes. If this changes in the future, we will update this posting to describe our use of profiling and your methods to opt-out.
- Right to Access. You have the right to request that we provide you with access to specific pieces of Personal Information we have collected about you over the past 12 months (also called a data portability request). If you submit an access request, we will provide you with copies of the requested pieces of Personal Information in a portable and readily usable format. Please note that DDK Publishing may be prohibited by law from disclosing pieces of Personal Information that would create a substantial, articulable, and unreasonable risk to the security of the information, our business systems, or your account. Under the CCPA, DDK Publishing is only required by law to respond to two access requests within a 12-month period.
- Right to Disclosure. You may request that we disclose information to you about our collection and use of your Personal Information over the past 12 months, such as: (a) the categories of Personal Information we have collected about you; (b) the categories of sources for the Personal Information we have collected about you; (c) our business purpose for collecting or selling that Personal Information; (d) the categories of third parties with whom we share that Personal Information; and (e) if we sold or shared your Personal Information under the CCPA, two separate lists stating: (i) sales or sharing, identifying the Personal Information categories that each category of recipient purchased; and (ii) disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained. Under the CCPA, DDK Publishing is only required to respond to two disclosure requests within a 12-month period.
- Right to Nondiscrimination. We will not discriminate against you for exercising your privacy rights. Unless permitted by law, we will not: (i) deny you goods or services; (ii) charge you different prices or rates for goods or services; (iii) provide you a different level or quality of goods or services; (iv) retaliate against you as an employee, applicant for employment, or independent contractor for exercising your privacy rights; or (v) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services, because you exercised a right under applicable privacy laws.
- Right to Disclosure of Marketing Information. California’s Shine the Light Act (Civil Code sections 1798.83-1798.84) entitles California residents to request certain disclosures regarding Personal Information sharing with affiliates and/or third parties for marketing purposes.
- Canada. This section provides supplemental information in compliance with Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”). This section applies solely to residents of Canada where PIPEDA applies (“Canadian Consumers”). PIPEDA gives Canadian Consumers specific rights regarding Personal Information offering details on an identifiable person without the inclusion of name, title, telephone number, and business address of an employee of a business or organization. The following paragraphs describe PIPEDA rights and explain how to exercise those rights.
- Right to accuracy of your Personal Information. We take steps to reasonably ensure that your Personal Information we are using is accurate. In most cases, we rely on you to ensure that your information is current, complete, and accurate. We provide methods for you to correct, update, and delete inaccurate Personal Information in your account, and we will provide you with reasonable assistance to ensure that your Personal Information is accurate in our systems and with our service providers.
- Right to access your Personal Information Upon written request and identity authentication, we will provide you with your Personal Information under our control, information about the ways in which that information is being used and a description of the individuals and organizations to whom that information has been disclosed. We will make the information available within 30 days or provide written notice where additional time is required to fulfil the request. If limited by law or potential infringement on another’s privacy rights, we may not be able to provide access to some or all of the Personal Information you request. If we must refuse an access request, we will notify you in writing, document the reasons for refusal, and outline further steps that are available to you.
- European Economic Area and United Kingdom. This section is provided to comply with the General Data Protection Regulations (“GDPR”) and its counterpart regulation applicable to residents of the United Kingdom. This section applies solely to residents of the EEA and the United Kingdom (“Data Subjects”). DDK Publishing collects and processing Personal Information of Data Subjects as a controller. If you are a Data Subject, you have the following rights in relation to the Personal Information we hold about you:
- Right to access your Personal Information. You can request to access your Personal Information. Upon request, we will provide you with a copy of your Personal Information, along with details about the types of Personal Information we process, why we process it, and any third parties we work with to collect Personal Information on our behalf. We may have one or more legally valid reasons to refuse your request in whole or in part, for example, to protect the rights of other individuals.
- Right to restrict processing of your Personal Information. You can request that we restrict the processing of your Personal Information if: (i) the data is inaccurate; (ii) the processing is unlawful; (iii) we no longer need the Personal Information; or (iv) you exercise your right to object.
- Right to rectify your Personal Information. If you become aware that the Personal Information that we hold about you is incorrect, or if your information changes, please inform us and we will update our records.
- Right to data portability. In some circumstances, we are required to provide your Personal Information to another organization at your request and in a structured, commonly used machine-readable format, so that the other organization can read and use it.
- Right to data erasure (a.k.a. the “right to be forgotten”). Upon your request, and in certain circumstances and where we are required to do so by law, we are required to delete or anonymize your Personal Information. This right is not absolute, and we may be entitled to retain and process your Personal Information despite your request. If you make this request, we balance certain legal, contractual, and business interests against your right to request the deletion of your Personal Information.
- Right to object to certain processing of your Personal Information. Upon your request, and in certain circumstances and where we are required to do so by law, we will limit our processing of your Personal Information as you request.
- Right to not be subject to Automated Decision-Making (“ADM”). DDK Publishing does not use ADM to provide the Services. If this changes in the future, we will update this posting to describe our use of ADM and your options to exercise your right to not be subject to ADM.
- Right to Complain. If you are a resident of the EEA and you believe we are unlawfully processing your Personal Information, you also have the right to complain to your local data protection supervisory authority. If you are a resident in Switzerland, you have the right to complain to the Swiss data protection authorities.
- Lawful Bases for Processing Your Personal Information
DDK Publishing will only use your Personal Information if we have a lawful basis for doing so. Lawful bases for processing include consent, contractual necessity, and our “legitimate interests” or the legitimate interest of others, as further described below.
- Consent. In some cases, we process Personal Information based on the consent you expressly grant to us at the time we collect such data. When we process Personal Information based on your consent, it will be expressly indicated to you at the point and time of collection. To withdraw your consent, please email us at email@example.com.
- Legitimate Interest. We may process Personal Information when we believe doing so furthers our legitimate interest. Our legitimate interests may include operation and improvement of the Services; marketing the Services; provision of customer support; protection from fraud or security threats; completion of corporate transactions; and compliance with legal obligations.
- Other Lawful Bases. From time to time, we may also need to process Personal Information to comply with a legal obligation, if it is necessary to protect the vital interests of you or other data subjects, or if it is necessary for a task carried out in the public interest.
- Links to Third-Party Websites
Our Site and certain of our products may contain links to websites owned or operated by third parties. DDK Publishing offers these links as a convenience, but we are not responsible for and have no ability to control the privacy and data collection, use, and disclosure practices of any third party. When you click on links that take you to external websites or platforms, you will be subject to their privacy policies and practices and not ours. You are encouraged to review and understand the privacy policies of such websites or platforms before submitting any information.
- Consent to Cross-Border Transfers of Personal Information
DDK Publishing is owned and operated in the United States and uses technical infrastructure in the United States and other jurisdictions to provide our Services. If you access the Services from outside the U.S., please be aware that the Personal Information we collect about you may be transferred to, processed, stored, and used in the U.S. or other jurisdictions. When your information is moved from your home country to another country, the laws and rules that protect your Personal Information laws in the U.S. (and other countries) may differ from the laws where you reside. For example, if your information is in the United States, it may be accessed by government authorities in accordance with U.S. law. DDK Publishing is dedicated to ensuring lawful mechanisms are employed for all cross-border data transfers. To the extent that DDK Publishing is deemed to transfer Personal Information from the EEA to outside of the EEA, we do so on the legal basis that such transfer is necessary to provide you with the Services you choose to use. By allowing us to collect Personal Information about you, you consent to the transfer and processing of your Personal Information as described in this paragraph. We do not warrant that our Services are appropriate or authorized for use in any other jurisdictions. You are solely responsible for determining whether your use of our Services complies with applicable laws.
- Privacy Contact
DDK Publishing welcomes your questions and comments about privacy. You may contact us at any time at firstname.lastname@example.org. Residents of California can contact DDK Publishing at email@example.com