Privacy Policy

Privacy Policy

Last updated: [current date]

1. Introduction

This Privacy Policy describes how Cheech QA ("we," "us," or "our") collects, uses, shares, and protects your personal information when you visit our website, purchase our products or services, or otherwise interact with us. We are committed to transparency about our data practices and to respecting your privacy rights under applicable laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other relevant privacy regulations.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.

2. Information We Collect

We collect several types of information from and about users of our services:

Identity and Contact Data: When you sign up for our services, make a purchase, subscribe to our email list, request information, or contact us, we collect your name, email address, phone number, and any other information you voluntarily provide in forms or communications.

Automatically Collected Data: When you visit our website, we automatically collect certain technical information, including your IP address, device type and identifiers, operating system, browser type and version, referring and exit pages, pages viewed and time spent on pages, clickstream data, and approximate geographic location derived from your IP address. This data helps us understand how visitors use our site and improve our services.

Cookies and Analytics Data: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing behavior and preferences. This includes session cookies (which expire when you close your browser) and persistent cookies (which remain on your device). We use analytics services to track website traffic, user engagement, and conversion metrics. For more details, please see our Cookie Policy and the section below on cookies and tracking technologies.

Payment Information: When you make a purchase, payment information (such as credit card numbers, billing address, and transaction details) is collected and processed by our third-party payment processor. We do not store complete credit card numbers on our servers. We may receive limited payment information from our processor, such as the last four digits of your card, transaction ID, and payment status, to fulfill orders and maintain records.

Content and Communications: We collect any content, messages, feedback, reviews, testimonials, or other materials you submit to us through contact forms, support requests, surveys, or other channels.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

Deliver Products and Services: To process your orders, provide access to purchased products or services, create and manage your account, and fulfill our contractual obligations to you.

Process Payments: To facilitate payment transactions through our third-party payment processor and maintain transaction records for accounting and tax purposes.

Send Communications: To send transactional emails (order confirmations, receipts, account notifications, password resets, and service updates) and, with your consent where required, marketing emails about our products, services, promotions, and content. We also send SMS messages for transactional purposes and, where you have provided prior express written consent, marketing messages about our offerings.

Provide Customer Support: To respond to your inquiries, troubleshoot problems, and provide technical assistance.

Analytics and Improvement: To analyze how our services are used, understand user preferences and behavior, test new features, conduct research, and improve our website, products, and services.

Security and Fraud Prevention: To protect our services, detect and prevent fraud, unauthorized access, and other illegal activities, and to enforce our Terms of Service.

Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests, and to protect our legal rights and interests.

4. Legal Bases for Processing

For visitors and users in the European Union, United Kingdom, and other jurisdictions where the GDPR or similar laws apply, we process your personal data based on the following legal grounds:

Consent: Where you have given explicit consent for us to process your personal data for specific purposes, such as sending marketing communications. You may withdraw your consent at any time.

Performance of a Contract: Where processing is necessary to fulfill our contractual obligations to you, such as delivering products or services you have purchased.

Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services, conducting analytics, preventing fraud, and ensuring security, provided these interests do not override your fundamental rights and freedoms.

Legal Obligation: Where processing is required to comply with legal or regulatory obligations, such as tax reporting or responding to lawful requests from authorities.

5. How We Share Your Information

We do not sell your personal information to third parties. We share your information only in the following circumstances:

Service Providers and Processors: We share personal information with trusted third-party service providers who perform functions on our behalf, including payment processing, email delivery and marketing automation, SMS messaging services, website hosting and infrastructure, customer relationship management, analytics, and other business operations. These providers are contractually obligated to use your information only as necessary to provide services to us and to protect your data in accordance with applicable laws.

Legal and Safety Disclosures: We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect our rights or property, enforce our Terms of Service, investigate fraud or security issues, or protect the safety of our users or the public.

Business Transfers: If we are involved in a merger, acquisition, sale of assets, bankruptcy, or other business transaction, your personal information may be transferred or disclosed as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

California Residents: We do not sell or share personal information as those terms are defined under the CCPA/CPRA. If our practices change, we will update this policy and provide you with the right to opt out of such sale or sharing.

6. Marketing Communications and Your Choices

Email Marketing: We send marketing emails only to individuals who have subscribed to our list or who have an existing business relationship with us. Every marketing email includes a clear and conspicuous unsubscribe link. You may opt out of marketing emails at any time by clicking the unsubscribe link or by contacting us at cheech-qa-established-replacement-20260914060036@izzyos-e2e.test. We will process your request promptly, typically within 10 business days. Please note that even if you opt out of marketing emails, we will still send you transactional and service-related messages necessary to provide our services.

SMS Marketing: We send marketing text messages only to individuals who have provided prior express written consent to receive such messages at the phone number provided. By consenting, you agree that we may use an automatic telephone dialing system to send messages. Consent is not a condition of purchase. You may opt out at any time by replying STOP to any message. Reply HELP for assistance. Message and data rates may apply. We comply with the Telephone Consumer Protection Act (TCPA) and related regulations.

Updating Preferences: You may update your communication preferences or contact information by logging into your account (if applicable) or by contacting us directly.

7. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to collect information about your browsing activity, remember your preferences, authenticate users, and analyze site usage. Cookies are small text files stored on your device that allow us to recognize you on subsequent visits.

We use both first-party cookies (set by us) and third-party cookies (set by our service providers, such as analytics and advertising platforms). Some cookies are essential for the website to function, while others are used for analytics, personalization, and marketing purposes.

You can control cookies through your browser settings and choose to block or delete cookies. However, disabling certain cookies may limit your ability to use some features of our website.

For detailed information about the specific cookies we use, their purposes, and how to manage your cookie preferences, please refer to our separate Cookie Policy.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specifically, we retain account and transaction data for the duration of your relationship with us and for a reasonable period thereafter to comply with legal obligations (such as tax and accounting requirements), resolve disputes, enforce our agreements, and maintain business records. Marketing contact information is retained until you unsubscribe or request deletion. Automatically collected data and analytics information are typically retained for a shorter period, generally between 12 and 26 months, depending on the type of data and business need.

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention and deletion policies.

9. Data Security

We implement reasonable technical, administrative, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit using SSL/TLS, secure server infrastructure, access controls and authentication, regular security assessments, and employee training on data protection.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

If we become aware of a data breach that compromises your personal information, we will notify you and relevant authorities as required by applicable law.

10. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

GDPR Rights (EU and UK Residents): If you are located in the European Union or United Kingdom, you have the following rights under the GDPR:

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal information.
• Right to Erasure: Request deletion of your personal information in certain circumstances.
• Right to Restriction: Request that we limit the processing of your personal information in certain situations.
• Right to Data Portability: Request a copy of your personal information in a structured, commonly used, and machine-readable format.
• Right to Object: Object to our processing of your personal information based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal information appropriately.

California Rights (CCPA/CPRA): If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, purposes, and categories of third parties with whom we share information.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: Opt out of the sale or sharing of your personal information for cross-context behavioral advertising. As stated above, we do not currently sell or share personal information.
• Right to Limit Use of Sensitive Personal Information: Request limitation on the use of sensitive personal information. We do not use sensitive personal information for purposes beyond those permitted without offering a right to limit.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights.

Submitting a Request: To exercise any of these rights, please contact us at cheech-qa-established-replacement-20260914060036@izzyos-e2e.test with the subject line "Privacy Rights Request." Please include your full name, email address, phone number (if applicable), and a description of the right you wish to exercise. We may need to verify your identity before processing your request. We will respond to verified requests within the timeframes required by applicable law, typically 30 to 45 days.

You may designate an authorized agent to submit requests on your behalf. The agent must provide proof of authorization, and we may require you to verify your identity directly with us.

11. International Data Transfers

Our business operates primarily in [jurisdiction where business is based]. If you are located outside this jurisdiction, please be aware that your personal information may be transferred to, stored, and processed in countries where our servers or service providers are located, including countries that may not have the same data protection laws as your jurisdiction.

For transfers of personal data from the European Economic Area, United Kingdom, or Switzerland to countries not deemed to provide adequate protection, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or other legally recognized transfer mechanisms.

By using our services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

12. Children's Privacy

Our services are not directed to, and we do not knowingly collect personal information from, children under the age of 13 (or under 16 in the European Economic Area). If we become aware that we have collected personal information from a child under the applicable age without proper parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child under the applicable age, please contact us immediately at cheech-qa-established-replacement-20260914060036@izzyos-e2e.test.

13. Third-Party Links and Services

Our website may contain links to third-party websites, services, or applications that are not operated or controlled by us. This Privacy Policy applies only to our services. We are not responsible for the privacy practices of third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit or services you use.

When you use third-party services integrated with our platform (such as payment processors, social media platforms, or analytics providers), those third parties may collect information directly from you according to their own privacy policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or for other operational, legal, or regulatory reasons. When we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, by sending you an email notification or posting a notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our services after any changes indicates your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Cheech QA Email: cheech-qa-established-replacement-20260914060036@izzyos-e2e.test

For privacy-related inquiries, data subject requests, or to exercise your privacy rights, please use the email address above with the subject line "Privacy Inquiry" or "Privacy Rights Request."

If you are located in the European Economic Area or United Kingdom and have concerns about our data practices, you may also contact your local data protection authority.