Privacy Policy

At Sacred Alley Business AI, we recognize the importance of privacy and are committed to maintaining the trust of our customers. This Privacy Policy outlines our practices regarding the collection, use, and protection of personal information through our text marketing services. Our adherence to strict legal and ethical standards ensures that your data is handled responsibly and in compliance with all applicable data protection regulations, such as the GDPR and CCPA.

Types of Information collected:

Contact Information: Primarily includes mobile phone numbers, essential for sending text messages.
Personal Identifiers: Depending on user interaction, this may include name, address, or email.
Engagement Data: Details how users interact with our messages, including response times and preferences.

Methods of Collection:

Direct Collection: When you opt into our text marketing services, we collect information directly from you, typically through sign-up forms or website interactions.
Indirect Collection: We may receive information from third-party partners when you have consented to share your data for marketing purposes.

User Consent Process:

Opt-In Procedures: Users provide explicit consent through clear affirmative actions, such as ticking a checkbox or sending a keyword to a short code.
Consent Management: We maintain records of consent and provide easily accessible options for users to withdraw consent at any time.

Purpose and Utilization:

Communication: We use the collected information primarily to send you promotional messages, updates, and exclusive offers via SMS. This direct line of communication is designed to enhance your shopping experience and keep you informed about our latest products and services.
Improvement of Services: By analyzing how you interact with our messages, we can tailor our offerings to better meet your needs and preferences, ensuring a more personalized experience.
Compliance and Enforcement: We also use personal data to comply with legal obligations, resolve disputes, and enforce our agreements, which helps maintain a safe and lawful environment for both us and our users.

Legal Basis for Processing:

Consent: The primary basis for processing your information is your consent, which you provide when opting into our text marketing services.
Contractual Necessity: If you enter into a contract with us, such as when making a purchase, we may process your information to fulfill our contractual obligations.

Circumstances Under Which Information Is Shared:

Service Providers: We share information with third-party service providers who perform services on our behalf, such as data analytics, message delivery, and customer service, under strict confidentiality agreements.
Legal Requirements: In exceptional circumstances, we may disclose information if required by law, such as in response to a court order or other legal process.

Third-Party Service Providers:

We only engage with providers who ensure an adequate level of protection for your personal data, consistent with this policy and applicable laws. Our agreements with them prohibit the use of your information for any purposes other than those specified by us.
With the foundation for using and sharing your information clearly laid out, I will proceed to draft the sections on Data Security and User Rights. Please let me know if you have any specific requests or if there are additional details you would like included in these upcoming sections.

Security Measures:

To protect your personal information, we implement robust technical and organizational measures. These include:

Encryption: Encrypting data in transit and at rest to prevent unauthorized access.
Access Controls: Restricting access to personal information to only those employees or third parties who need it to perform their job-related duties.
Regular Audits: Conducting regular security audits and vulnerability assessments to ensure the ongoing security of our information systems.

Data Breach Notification:

Should a data breach occur, we are prepared to act swiftly to mitigate any potential harm. We will:

Notify affected individuals promptly if there is a risk of significant harm.
Communicate transparently about the nature of the breach, the possible consequences, and the measures being taken to address it.
Report breaches to the appropriate regulatory authorities as required by law.

Your Rights Over Your Information:

You have several rights concerning your personal data, which include:

Access: You can request access to the personal information we hold about you.
Rectification: You have the right to ask us to correct inaccurate or incomplete personal information.
Erasure: You can request the deletion of your personal information when it is no longer necessary for us to retain it.
Restriction of Processing: You may ask us to suspend the processing of personal information in certain scenarios, such as if you want us to establish its accuracy or the reason for processing it.
Data Portability: You have the right to obtain and reuse your personal data for your own purposes across different services.

Exercising Your Rights:

To exercise any of these rights, please contact us using the details provided in the Contact Information section of this policy. We will respond to your request as per the timelines set by applicable data protection laws.

Retention Period:

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. The specific retention period depends on the nature of the information and the reasons for which it is processed. Here are the criteria we use to determine data retention periods:

Legal and Regulatory Requirements: To comply with legal obligations under applicable laws (e.g., tax laws or regulatory guidelines).
Contract Fulfillment: For the duration of our business relationship, such as while you are an active subscriber to our text marketing services.
Consent-Based Retention: If you have provided consent for a longer retention period, we will retain data in accordance with your consent.

Deletion Of Data:

Once the retention period expires, personal data is securely deleted or anonymized so that you can no longer be identified from it.

Notification Of Changes:

This Privacy Policy may be updated periodically to reflect changes in our personal information practices or relevant laws. We will post a notice on our website to inform you of any significant changes and indicate at the top of the policy when it was most recently updated.

For Privacy Concerns:

If you have any questions, concerns, or complaints about our Privacy Policy or our data practices, or if you wish to exercise your rights, please contact us at:

Email: [email protected]
Phone: 805-856-6965
Address: 119 N Nashville Way Vancouver, WA 98664

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to the data protection authority of your country.