Privacy Policy
Tribal Tapestry Privacy Statement 2024
Introduction
At Tribal Tapestry, we are committed to protecting and respecting your privacy. This Privacy Statement explains how we handle personal information — including its collection, usage, sharing, and protection — to ensure you are fully informed.
Structure of This Statement
The statement includes the following parts:
- Part A: Information We Collect and How We Use It
- Part B: Methods of Collecting Information
- Part C: Sharing Your Information
- Part D: Retention of Your Information
- Part E: Security Measures
- Part F: General Provisions and Your Rights
- Appendix: Detailed Rights Information
Personal Information Definition
"Personal information" refers to any data that could identify you. We handle this information with the utmost care.
Regulatory Framework: GDPR
As data controllers under the EU GDPR, we process personal data in compliance with lawful bases outlined in the GDPR, including consent, contract performance, legal obligations, and legitimate interests.
Part A: Information We Hold and Usage
- General Contact Information
- Collection: Via direct interactions (emails, calls, website forms).
- Use: To manage queries, provide services, and send communications, based on consent, contractual necessity, and legitimate interests.
- Payment Information and Financial Records
- Collection: Through online and offline transactions.
- Use: For processing payments and refunds, maintaining financial records, under legal obligations and contractual necessity.
- Genetic Data and Related Information
- Collection: Through DNA tests and voluntary uploads.
- Use: To provide personalized reports and services, conduct research with consent, and improve service quality.
Part B: Collection Methods
We collect your personal information through:
- Direct Interactions: You provide data when ordering services, participating in research, or communicating with us.
- Automated Interactions: As you navigate our website, we gather data via cookies (see our Cookie Policy).
- Third Parties: We receive data from partners and public databases, enhancing our services
Part C: Information Sharing
- Service Providers: We share information with labs, payment processors, and cloud storage providers, ensuring they adhere to strict data protection standards.
- Partners: We exchange necessary information with partners when you purchase our services through them.
- Legal Requirements: We disclose information when legally required or to protect our rights.
Part D: Retention of Your Information
We retain personal information based on its purpose and compliance with legal requirements:
- General Information: Up to 7 years after the last interaction.
- Payment Information: As mandated by law, typically up to 7 years.
- Genetic Information: As long as it is needed for account management or research purposes, and subsequently for compliance with legal obligations.
Part E: Security Measures
We implement robust security measures:
- ISO Certifications: We adhere to ISO:9001 and ISO:27001 standards.
- Encryption and Pseudonymization: To safeguard data integrity and confidentiality.
- Regular Security Assessments: To proactively identify and mitigate risks.
Part F: General Provisions and Your Rights
Under GDPR, you have rights to access, correct, erase, or restrict how we use your personal data. Detailed rights are outlined in the appendix.
Contact Information:
- Office: 255 W. Moana Lane. Reno, Nevada. 89509
- Email: support@tribaltapestry.com
Appendix: Detailed Rights
This section elaborates on your rights under GDPR, including data access, correction, and deletion processes, and how to object to or restrict data processing.
Changes to This Statement
We review and update this Privacy Statement periodically. It is important to keep us informed of changes to your personal data.