|
Providing Visitors with Anonymous Access
You can access our Website home page and browse our site without disclosing your personal data.
The services and links of our Website
Our Website does not enable our visitors to communicate with other visitors or to post personal information to be accessed by other visitors.
Our Website includes links and / or participates in data tranfers via secure servers (SSL) and industry standard encryption to websites and/ or merchant services managed by the following for visitors who engage in purchasing:
- PayPal http://www.paypal.com/ for Website Payments Pro using Direct Payment API
and/ or
- Wells Fargo Bank, N.A., - WFMS (Wells Fargo Merchant Services) for credit card processing
and/ or
- HSBC Bank plc. - Holding Company for credit card processing Merchant Services
and/ or
- TrustLogo - C·O·M·O·D·O - for IDAuthority Credentials validation and authenticity verification on secure pages (https://) using SSL (128bit) for secure transactions
Such third party Web and Merchant service providers may collect personal data about our visitors specifically relating to purchase process details and transactions.
Automatic Collection of Information
We do not automatically log personal data nor do we link information automatically logged by other means with personal data about specific individuals.
We use cookies and/or sessions to store non-financial personal data (such as your unique login and password), and/or we may link information stored in cookies with personal data about specific individuals. We do so for the following purposes:
- Customer administration
Data Collection and Purpose Specification
We collect the personal data that you may volunteer while using our website in order to facilitate processing of your customer-initiated purchases.
We collect order processing information relating to your purchase(s) limited to initiation of purchase and verification of payment completion (based on our internal order invoice number system) from other sources, such as our secure access area at PayPal via secure servers at PayPal.com.
To access the table of personal data collected and purposes for which they are used, please see below.
We may collect and use personal data for the additional purpose of:
We collect and use the personal data of visitors who become customers to fulfill customer orders, including confirmation of purchase, payment and shipment of goods.
If we wish to use your personal data for a new purpose, we offer you the means to consent to this new purpose:
- by indicating in a box at the point on the website where personal data is collected
We do not collect, log, store or have access to credit card numbers and/or or e-check banking and/or financial account numbers.
Purchase transaction payment details are transmitted directly via 128-bit (SSL) security and industry standard data encryption using Direct Payment API via Paypal Merchant Services, publicly verifiable Secure Socket Layer services via TrustLogo, and server-side encryption for non-financial personal profile details.
Children's Privacy
We do not knowingly collect personal data from children.
We take specific steps to protect the privacy of children by:
- Using the 3rd-party services of PayPal.com and 2CheckOut.com to ensure only adults with valid payment information may purchase goods and therefore provide our company with personal data.
We do provide a link to information about our personal data practices in relation to children on our home page and we do not knowingly collect personnal data from children on our website.
Disclosure and Visitor Choice
We disclose our visitors' personal data to our subsidiaries or other organizations.
Where we disclose your personal data for the same purposes as those indicated in the table below, we provide you with the means to opt-in to disclosure:
- by indicating in a box at the point on the site where personal data is collected
Where we disclose your personal data for purposes which are different from those indicated in the table mentioned above, we offer you the opportunity to consent to disclosure:
- by indicating in a box at the point on the site where personal data is collected
Confidentiality / Security
We give you the option of using a secure transmission method to send us the following types of personal data:
- primary personal data (such as name and contact details)
- identifiers (such as credit card details, Website password)
We have implemented security policies, rules and technical measures to protect the personal data that we have under our control from:
- unauthorised access
- improper use or disclosure
- unauthorised modification
- unlawful destruction or accidental loss
All our representatives and data processors, who have access to, and are associated with the processing of personal data, are obliged to respect the confidentiality of our visitors' personal data.
We ensure that your personal data will not be disclosed to State institutions and authorities except if required by law or other regulation.
Access to the personal data we may hold about you
You can ask us, by:
- sending an email (admin@castillionbay.com)
whether we are keeping personal data about you.
Upon request, which you can indicate by:
- sending an email (admin@castillionbay.com)
We will provide you with a readable copy of the personal data which we keep about you, within a week. - although we may before require proof of your identity - We will provide the information without any charge. We allow you to challenge the data that we hold about you and, where appropriate, you may have the data erased. We reserve the right to refuse to provide our visitors with a copy of their personal data, but will give reasons for our refusal. We do, however, allow you to challenge our decision to refuse to provide you with a copy of your personal data.
Privacy Compliance
Our privacy policy is compliant with the following instrument:
Online Privacy Alliance - http://www.privacyalliance.org/resources/ppguidelines.shtml
It is also compliant with the following global or regional regulatory, or self-regulatory instrument:
Online Privacy Alliance - http://www.privacyalliance.org/resources/enforcement.shtml
In order to demonstrate that our privacy policy accords with the above privacy instrument, we are voluntarily committed to a Self Assessment procedure
Self Assessment Procedure
|
Name or designation of the privacy policy person or service
|
Diana Peters, Website Developer |
| URL |
http://www.beyondthemedia.com |
| Address |
14411 North East 51st St., Vancouver, WA, 98682 |
| Country |
USA |
TABLE of personal data collected and purposes for which they are used
Key:
x = points which are applicable
- = points which are NOT applicable
Primary personal data/Business information
|
x
|
volunteered by each visitor |
| - |
collected from public records or bodies |
| - |
collected from private organizations |
|
Primary personal data
|
Technical administration of the Website |
Research &development
|
Customer Administration |
Marketing |
Trading in personal data |
| Name |
- |
- |
x |
- |
- |
| Gender |
- |
- |
- |
- |
- |
| Address |
- |
- |
x |
- |
- |
| E-mail address |
- |
- |
x |
- |
- |
| Phone/Fax number |
- |
- |
x |
- |
- |
other (describe)
none
|
- | >
- |
- |
- |
- |
|
| Business Information |
Technical administration of the Website |
Research & development |
Customer Administration |
Marketing |
Trading in personal data |
| Employer/organization |
- |
- |
- |
- |
- |
| Job title |
- |
- |
- |
- |
- |
| Address |
- |
- |
- |
- |
- |
| E-mail address |
- |
- |
- |
- |
- |
| Phone/Fax number |
- |
- |
- |
- |
- |
other (describe)
none
|
- |
- |
- |
- |
- |
|
Other personal details and profiling data
| x |
volunteered by each visitor |
| - |
collected from public records or bodies |
| - |
collected from private organizations |
| |
Technical administration of the website
|
Research & development |
Customer Administration |
Marketing |
Trading in personal data |
| Personal details |
- |
- |
x |
- |
- |
| Physical description |
- |
- |
- |
- |
- |
| Family characteristics |
- |
- |
- |
- |
- |
| Education and skills |
- |
- |
- |
- |
- |
| Life style or personal tastes |
- |
- |
- |
- |
- |
| Financial resources |
- |
- |
- |
- |
- |
other (describe)
none
|
- |
- |
- |
- |
- |
|
Identifiers
| x |
volunteered by each visitor |
| - |
collected from public records or bodies |
| - |
collected from private organizations |
| |
Technical administration of the website
|
Research & development |
Customer Administration |
Marketing |
Trading in personal data |
| On-line identifiers |
x |
- |
x |
- |
- |
| Financial identifiers |
- |
- |
x |
- |
- |
| identifiers assigned by Public bodies |
- |
- |
- |
- |
- |
| Biometrics identifiers |
- |
- |
- |
- |
- |
other (describe)
none
|
- |
- |
- |
- |
- |
|
Specific Data
| - |
volunteered by each visitor |
| - |
collected from public records or bodies |
| - |
collected from private organizations |
| |
Technical administration of the website
|
Research & development
|
Customer Administration |
Marketing |
Trading in personal data |
| Racial or ethnic origin |
- |
- |
- |
- |
- |
| Political opinions |
- |
- |
- |
- |
- |
| Religious or philosophical beliefs |
- |
- |
- |
- |
- |
| Trade union membership |
- |
- |
- |
- |
- |
| Health/Medical data |
- |
- |
- |
- |
- |
|
Sex life
|
- |
- |
- |
- |
- |
|
Police/Justice data such as civil/criminal actions brought by or against the visitor
|
- |
- |
- |
- |
- |
other (describe)
none
|
- |
- |
- |
- |
- |
|
|
