BUFF adheres to The Video Privacy Protection Act of 1988.
When registering online with BUFF you will be asked to provide certain personal information, such as your name, email address, password, age, and other information required to provide you with the requested Services. Personal information that we collect from you will only be used for the purposes of providing the requested Services and will not be shared with any third parties except to the extent as set out below. BUFF retains the right to contact you in relation to the Services provided on this Site.
BUFF will use your personal information to identify you as a user, to set up and administer your account, to take, process, and deliver your orders for Services provided on this Site, to provide you with effective customer service and/or technical support, to provide you with information about other products, services, offers, competitions and promotions (assuming you have consented to receive such information as described in the “Opt-In” section of this Privacy Statement), and for other purposes that BUFF notifies you about. We do not collect or keep your personal information unless it is necessary for the above purposes(s) or required by law. BUFF will not retain your information for any longer than is necessary for these purposes or as required by law.
Cookies are small text files that are sent to or accessed from your web browser or your device’s memory. A cookie typically contains the name of the domain (internet location) from which the cookie originated, the “lifetime” of the cookie (i.e., when it expires), and a randomly generated unique number or similar identifier. A cookie also may contain information about your device, such as user settings, browsing history, and activities conducted while using our services. We use functional cookies to make our website work properly and give you the best experience. We also use statistical cookies to gather data for our website. As a non-profit organisation, these statistics may be helpful in our funding process.
BUFF will not rent, sell or share your personal information with any third party except as described below or as otherwise agreed by you. BUFF employs other companies and individuals to perform functions on our behalf. Examples include fulfilling orders, sending postal mail and e-mail, removing repetitive information from customer lists, providing marketing assistance, providing search results and links, and providing customer service. They have access to personal information needed to perform their functions, but may not use it for other purposes.
In compliance with the GDPR, every data subject has a number of rights in relation to the information we hold about you:
-Your right of access: If you ask us, we’ll confirm whether we’re processing your personal information and, subject to any applicable exemptions, provide you with a copy of that personal information (along with certain other details) within the timescales or extended timescales provided for by the law for complex requests, or where applicable, provide you with an explanation as to why we will not be complying with your request. If you require additional copies, we may need to charge a reasonable fee.
-Your right to rectification: If the personal information we hold about you is inaccurate or incomplete, you’re entitled to have it rectified. If you are entitled to rectification and if we’ve shared your personal information with others, we’ll let them know about the rectification where possible and where this would not involve a disproportionate effort. If you ask us, where possible and lawful to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.
-Your right to erasure: You can ask us to delete or remove your personal information in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable because that was the legal basis on which we were processing your personal information). If you are entitled to erasure and if we’ve shared your personal information with others, we’ll take reasonable steps to inform those others where possible and where this would not involve a disproportionate effort. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.
-Your right to restrict processing: You can ask us to ‘block’ or suppress the processing of your personal information in certain circumstances such as where you contest the accuracy of that personal information or you object to us. If you are entitled to restriction and if we’ve shared your personal information with others, we’ll let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.
-Your right to data portability: You have the right, in certain circumstances, to obtain personal information you’ve provided us with (in a structured, commonly used, and machine-readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.
-Your right to object: You can ask us to stop processing your personal information, and we will do so if we are:
• relying on our own or someone else’s legitimate interests to process your personal information except if we can demonstrate compelling legal grounds for the processing; or
• processing your personal information for direct marketing.
-Your rights in relation to automated decision-making and profiling: You have the right not to be subject to a decision when it’s based on automatic processing, including profiling if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for entering into, or the performance of, a contract between you and us.
-Your right to withdraw consent: If we rely on your consent (or explicit consent) as our legal basis for processing your personal information, you have the right to withdraw that consent at any time.
-Your right to lodge a complaint with the supervisory authority: If you wish to contact us on any matter in relation to the processing of your personal information, please submit requests to firstname.lastname@example.org
BUFF works to protect the security of your information during transmission by using Secure Sockets Layer (SSL) software, which encrypts the information you input. BUFF complies with appropriate measures to industry standards to protect users’ personal data. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure, and therefore BUFF cannot guarantee its absolute security. Here are some of our key security policies:
• User’s passwords are salted and hashed, following best practices from OWASP
• Users have access to their own data. Their data is not visible publicly or to other users.
• Admins have access to user data, including name, email, age, among others.
Contact us at email@example.com if you wish to have your account permanently deleted.
You should also be aware that when you link to another website from the Site, BUFF has no control over that other Site. Accordingly, BUFF cannot guarantee that the controller of that Site will respect your privacy in the same manner as BUFF.
BUFF uses Google Analytics to help us to understand how you use our site and tools, which allows us to know how to improve our products for your benefit. For more information on Google’s privacy policies, please visit https://policies.google.com/privacy. Google Analytics services are governed by the Google Analytics Terms of Service which can be found at https://marketingplatform.google.com/about/analytics/terms/us/.
If you are aged 18 or younger, you must have your parent’s/guardian’s permission before submitting your personal information to this Site. If you don’t have your parent’s/guardian’s consent, you should not submit any personal information to this Site.