Privacy Policy

Privacy Policy for Sarrast.net

We maintain an unwavering dedication to protecting and preserving all personal data provided by our website visitors and service users, implementing robust and comprehensive security measures throughout our services and operations.

This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data. In this role, we are responsible for ensuring the proper handling, processing, and protection of all personal data submitted through our website.

We may process usage data (“usage data”), which comprehensively includes browser type, operating system, page views, navigation patterns, timing of visits, device information, and interaction metrics. This information is collected through automated logging systems, cookies, and analytics tools and may include time spent on pages, features accessed, and browsing patterns specific to gardening content. The source of this data is our analytics software and server logs. We process this information for several important purposes, including improving website performance, enhancing user experience, analyzing content effectiveness, and optimizing garden-related resources, which enables us to deliver personalized content, improve navigation, and enhance our gardening tutorials. The legal basis for this processing is our legitimate interests in monitoring and improving our website services.

We may process account data (“account data”), which comprehensively includes name, email address, account preferences, subscription status, billing information, and communication preferences. This information is collected through registration forms, account updates, and subscription processes and may include newsletter preferences, garden planning tools access, and community feature participation. The source of this data is direct user input during account creation and management. We process this information for account administration, service provision, communication management, and subscription handling, which enables us to provide personalized gardening resources, community access, and targeted content. The legal basis for this processing is the performance of a contract between you and us and/or taking steps at your request to enter into such a contract.

We may process profile data (“profile data”), which comprehensively includes gardening interests, expertise level, climate zone, garden size, preferred plants, and project history. This information is collected through profile completion forms, surveys, and interaction with site features and may include garden photos, project logs, and community contributions. The source of this data is user-provided information and interaction history. We process this information for community building, content personalization, expertise matching, and resource optimization, which enables us to deliver relevant gardening advice, connect similar users, and enhance learning resources. The legal basis for this processing is our legitimate interests in providing personalized gardening services and building an engaged community.

You have the following rights regarding your personal data:

Right to Access: You have the right to access your personal data, which means you can request and receive a comprehensive copy of all information we hold about you. This includes the ability to view your profile information, review your account history, and examine your usage data. To exercise this right, you can submit a formal request through our dedicated privacy portal or contact our privacy team directly at [email protected]. We will respond within 30 days and may require government-issued identification, proof of address, and account verification to verify your identity.

Right to Rectification: You have the right to correct any inaccurate personal data we hold about you and complete any incomplete personal data. This includes the ability to update profile information, correct account details, and modify preferences. To exercise this right, you can access your account settings directly or submit a correction request through our support system. We will process valid requests within 15 days and may require account password verification, email confirmation, and specific detail validation to verify your identity.

Right to Erasure: You have the right to request the deletion of your personal data when it is no longer necessary for its original purpose or when you withdraw consent. This includes the ability to delete your account, remove profile content, and erase usage history. To exercise this right, you can initiate an account deletion request through your account settings or contact our privacy team. We will process your request within 30 days and may require password confirmation, identity verification documents, and explicit confirmation of deletion intent to verify your identity.

Right to Restrict Processing: You have the right to limit how we use your personal data if you contest its accuracy or object to its processing. This includes the ability to pause data collection, limit profile visibility, and restrict marketing communications. To exercise this right, you can adjust your privacy settings or submit a formal restriction request. We will respond within 15 days and may require account verification, written confirmation of restrictions, and specific processing concerns to verify your identity.

Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format and transmit it to another service provider. This includes the ability to export profile data, download account history, and transfer garden planning information. To exercise this right, you can use our data export tool or submit a portability request. We will process your request within 30 days and may require two-factor authentication, account ownership verification, and destination service validation to verify your identity.Data Processing and Security Measures

Data Types and Processing

We process Service Data which includes user profiles, gardening preferences, plant inventories, and garden layout configurations. This processing involves automated data collection, user input analysis, and preference tracking, enabling us to provide personalized gardening recommendations and content delivery. For example, in the context of Home Gardening, this includes tracking plant care schedules, growth progress, and seasonal planning. The legal basis for this processing is legitimate interest and contract fulfillment, specifically to provide tailored gardening advice and maintain user garden profiles.

We process Technical Data which includes browser type, device information, IP addresses, and site interaction patterns. This processing involves automated logging, analytics processing, and system monitoring, enabling us to optimize site performance and user experience. For example, in the context of Home Gardening, this includes adapting plant care recommendations based on user location and climate data. The legal basis for this processing is legitimate interest and consent, specifically for essential website functionality and service improvement.

We process Communication Data which includes email correspondence, support tickets, and community forum interactions. This processing involves message routing, response management, and communication archiving, enabling us to provide effective customer support and community engagement. For example, in the context of Home Gardening, this includes processing plant care inquiries and community knowledge sharing. The legal basis for this processing is legitimate interest and consent, specifically for customer support and community management.

We process Transaction Data which includes purchase histories, subscription details, and payment information. This processing involves payment processing, order fulfillment, and transaction recording, enabling us to manage user purchases and subscriptions. For example, in the context of Home Gardening, this includes processing orders for gardening guides and premium content subscriptions. The legal basis for this processing is contract fulfillment and legal obligation, specifically for financial record-keeping and service delivery.

We process Preference Data which includes content preferences, notification settings, and personalization choices. This processing involves preference tracking, content customization, and settings management, enabling us to deliver personalized user experiences. For example, in the context of Home Gardening, this includes customizing content based on garden types and plant preferences. The legal basis for this processing is consent and legitimate interest, specifically for service personalization and user experience enhancement.

Security Measures

Our comprehensive encryption protocols ensure end-to-end protection of your data, incorporating industry-standard algorithms and regular security updates to maintain data integrity. This includes regular security assessments and penetration testing by qualified professionals.

We implement multi-layered security infrastructure, including advanced firewalls and intrusion detection systems that continuously monitor for and prevent unauthorized access attempts. This infrastructure undergoes regular updates and enhancements.

Access to personal data is strictly controlled through role-based permissions, multi-factor authentication, and detailed access logs. We maintain comprehensive audit trails of all data access and modifications.

Our continuous monitoring systems provide real-time threat detection and automated response protocols, ensuring immediate action against potential security threats.

We maintain comprehensive backup procedures with encrypted offsite storage and regular recovery testing, ensuring data availability and integrity.

All staff undergo regular security awareness training and must comply with detailed data protection protocols, including specific training for handling sensitive data.

International Transfers

We may transfer your personal data to countries outside your jurisdiction. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses, Privacy Shield certification, and Binding Corporate Rules. Each international transfer is conducted under strict protocols that ensure:
– Adequate data protection standards
– Compliant processing procedures
– Enforceable data subject rights
– Effective legal remedies

International transfers are protected by GDPR standards, ISO 27001 certification, and regional data protection regulations, ensuring compliance with international privacy laws. We implement additional measures including:
– Regular compliance audits
– Data protection impact assessments
– Documented transfer mechanisms
– Continuous monitoring procedures

Regarding international transfers, you maintain specific rights including:
– Right to information about transfers
– Right to object to transfers
– Right to withdraw consent
– Right to data protection guarantees

Data Retention

We maintain specific retention periods for different data categories:

Account Information: Retained for the duration of account activity plus 24 months after account closure to facilitate account reactivation and maintain service continuity.

Usage Data: Retained for 12 months to analyze usage patterns and improve service quality.

Transaction Records: Retained for 7 years to comply with financial regulations and tax requirements.

Communication History: Retained for 36 months to maintain support history and resolve ongoing inquiries.

Technical Logs: Retained for 6 months to monitor system performance and investigate security incidents.

These retention periods are determined by:
– Legal requirements
– Business purposes
– Technical necessities
– User preferences

Special circumstances affecting retention:
– Legal obligations
– Dispute resolution
– Security investigationsCookie Policy for Sarrast.net

Essential cookies serve fundamental functions for our website’s core operations. These cookies process authentication data, security tokens, and session information to enable basic site functionality. For example, in our Home Gardening context, these cookies remember your plant care schedules and garden planning tools while you navigate between pages. We use them specifically for user authentication, security measures, basic site operations, session management, and technical stability.

Functional cookies enhance your browsing experience by remembering your preferences. They process user-specific settings to enable personalized features. In the context of home gardening, these cookies remember your preferred plant types, growing zones, and customized garden layouts. They enable language preferences, region-specific content, user interface customization, feature optimization, and personalized settings.

Analytics cookies help us understand how visitors interact with our gardening resources. They collect anonymous information about page interactions, navigation patterns, feature usage, session duration, and user preferences. For instance, these cookies track which plant care guides are most popular and how users interact with our seasonal planting calendars.

Performance cookies assess and improve our website’s operation by monitoring site speed, identifying technical issues, optimizing content delivery, analyzing user experience, and tracking system performance. These cookies ensure our garden planning tools and interactive features run smoothly for all users.

Cookie Management

You can control your cookie preferences through browser settings, cookie consent tools, privacy preferences, and account settings. We provide clear options to manage your cookie choices while maintaining essential website functionality.

GDPR Compliance

For EU residents, we ensure explicit consent mechanisms, data minimization, purpose limitation, storage limitations, and processing transparency. All data processing activities strictly adhere to GDPR requirements.

CCPA Compliance

California residents have additional rights, including the right to know about personal information collected, right to delete personal data, right to opt-out of data sales, right to non-discrimination, and right to access collected information.

COPPA Compliance

Regarding users under 13, we implement age verification requirements, parental consent procedures, limited data collection, special protection measures, and parental access rights to ensure compliance with COPPA regulations.

Updates and Changes

Our policy updates involve regular review procedures, user notifications, consent renewal when required, clear change documentation, and continuous compliance monitoring to maintain transparency and trust.

Contact Information

For privacy-related inquiries:
Primary Contact: [email protected]
Response Time: Within 48 hours
Verification Required: For data-related requests
Available Support: Privacy concerns, data requests, rights exercise

This policy was created specifically for sarrast.net and covers all associated services within the Home Gardening industry.