Privacy Policy

Last Updated: October 18, 2024

This Privacy Policy explains how The Montana Way ("we," "our," "us") collects, uses, and protects the personal information of users ("you," "your") when you visit and interact with our website www.themontanaway.com (the "Site"). We are committed to safeguarding your privacy and ensuring that your personal data is handled in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

1. Data Controller

The Montana Way is the data controller responsible for your personal data. Our business details are as follows:

• Business Name: The Montana Way
• Address: 123 Bridger Court, Missoula, MT 59803
• Email: hello@themontanaway.com

2. Data Collection

We collect and process personal data when you interact with our website or make a purchase. This includes, but is not limited to:

• Personal Information: Name, email address, billing and shipping address, phone number, and payment details (processed via secure payment gateways).
• Technical Information: IP address, browser type, device information, operating system, and browsing behavior (cookies, log files, and analytics).
• Order Information: Products purchased, transaction history, and communication preferences.
• Marketing Preferences: If you opt in to receive our marketing materials, we may collect details such as your product interests and shopping habits.

3. Purpose of Data Collection

We collect personal data for the following purposes:

• Processing Orders: To process and fulfill your orders, including delivery and invoicing.
• Customer Support: To respond to your inquiries, requests, or complaints.
• Personalization: To personalize your experience on our website, including product recommendations and targeted marketing based on your preferences.
• Marketing Communications: With your explicit consent, we may send you promotional emails about new products, special offers, and other information we think you will find interesting.
• Legal Compliance: To comply with legal obligations, such as tax reporting and data retention requirements.
• Website Improvement: To analyze website traffic and improve user experience through analytics tools.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

• Consent: When you sign up for marketing communications or newsletters.
• Contractual Necessity: To fulfill a contract when you purchase products from our website.
• Legal Obligation: To comply with tax, legal, or regulatory obligations.
• Legitimate Interest: For fraud prevention, ensuring network security, and enhancing website performance.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and gather analytical data. You can control your cookie preferences via your browser settings.

• Types of Cookies We Use:
• Essential Cookies: Necessary for website functionality.
• Analytics Cookies: To understand how visitors use the website and improve performance.
• Marketing Cookies: To deliver personalized ads based on your interests.

By using our website, you agree to the use of cookies in accordance with this policy.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your data with trusted third parties for the following purposes:

• Service Providers: To process orders, payments, and deliveries (e.g., shipping companies, payment processors).
• Analytics Providers: To help us analyze website traffic and improve our services.
• Legal Authorities: To comply with legal requests or court orders.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred as part of the business transaction.

All third-party service providers we work with are GDPR-compliant and are required to protect your data under strict contractual obligations.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this policy, including legal, accounting, or reporting requirements. The retention periods are as follows:

• Order Data: Retained for 7 years to comply with tax obligations.
• Marketing Data: Retained until you unsubscribe from marketing communications.
• Technical Data: Retained for as long as necessary to ensure website functionality and security.

8. Security Measures

We take the protection of your personal data seriously and implement appropriate technical and organizational measures to prevent unauthorized access, loss, misuse, or alteration of your information. This includes:

• Encryption: Your personal information is encrypted during transmission using Secure Socket Layer (SSL) technology.
• Access Control: Restricted access to personal data to authorized personnel only.
• Secure Payment Processing: All payment data is handled through third-party, PCI-compliant payment processors.

9. Your Rights Under the GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

• Right to Access: You have the right to request access to the personal data we hold about you.
• Right to Rectification: You may request that we correct or update any inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request the deletion of your personal data, subject to legal or contractual obligations.
• Right to Restrict Processing: You have the right to request a restriction on processing your personal data.
• Right to Data Portability: You may request a copy of your data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing or legitimate interests.
• Right to Withdraw Consent: If we are processing your data based on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at hello@themontanaway.com.

10. Data Transfers

If we transfer your personal data to countries outside the European Economic Area (EEA), we ensure that adequate protection measures are in place, such as EU Standard Contractual Clauses or other approved safeguards.

11. Children's Privacy

Our website is not intended for individuals under the age of 16, and we do not knowingly collect personal data from children without appropriate consent from a parent or guardian.

12. Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The most recent version will always be available on our website. We encourage you to review this policy regularly to stay informed about how we protect your personal data.

13. Contact Information

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:

• Email: hello@themontanaway.com
• Address: 123 Bridger Court, Missoula, MT 59803

By using our website, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.