This Privacy Policy governs the manner in which Cabin Winterfell collects, uses, maintains, and discloses information collected from users (each, a “User”) of the Cabin Winterfell website (“Site”). This privacy policy applies to the Site and all products and services offered by Cabin Winterfell.

Personal Identification Information

We may collect personal identification information from Users in various ways, including, but not limited to, when Users visit our site, register on the site, place an order, subscribe to the newsletter, fill out a form, and in connection with other activities, services, features, or resources we make available on our Site. Users may be asked for, as appropriate, name, email address, mailing address, phone number, and credit card information. We will collect personal identification information from Users only if they voluntarily submit such information to us. Users can always refuse to supply personally identification information, except that it may prevent them from engaging in certain Site-related activities.

Legal Basis for Processing Personal Data

We will only process personal data where we have a legal basis to do so. The legal basis for processing personal data may include the necessity of processing for the performance of a contract, compliance with a legal obligation, protection of vital interests, consent, or legitimate interests pursued by the data controller or a third party.

Purposes of Processing Personal Data

We may process personal data for the following purposes:

• To improve customer service: Information you provide helps us respond to your customer service requests and support needs more efficiently.
• To personalize user experience: We may use information in the aggregate to understand how our Users as a group use the services and resources provided on our Site.
• To improve our Site: We may use feedback you provide to improve our products and services.
• To process payments: We may use the information Users provide about themselves when placing an order only to provide service to that order. We do not share this information with outside parties except to the extent necessary to provide the service.
• To send direct marketing communications: With the User’s explicit consent, we may send promotional emails about new products, special offers, or other information that we think may be relevant to the User.
• To comply with legal obligations: We may process personal data to comply with applicable laws, regulations, or legal processes.

Data Retention Period

We will retain personal data for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. Personal data will be securely deleted or anonymized when it is no longer needed.

Data Subject Rights

Users have the following rights regarding their personal data:

• Right to access: Users have the right to request access to their personal data and obtain information about how it is being processed.
• Right to rectification: Users have the right to request the correction of inaccurate or incomplete personal data.
• Right to erasure: Users have the right to request the deletion of their personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
• Right to restrict processing: Users have the right to request the restriction of processing of their personal data under certain circumstances, such as when the accuracy of the data is contested or the processing is unlawful.
• Right to data portability: Users have the right to receive their personal data in a structured, commonly used, and machine-readable format and transmit it to another data controller.
• Right to object: Users have the right to object to the processing of their personal data under certain circumstances, such as when the processing is based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: If processing is based on consent, Users have the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Security Measures

We adopt appropriate data collection, storage, and processing practices and security measures to protect against unauthorized access, alteration, disclosure, or destruction of personal information, username, password, transaction information, and data stored on our Site.

Sharing Personal Information

We do not sell, trade, or rent Users’ personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners, trusted affiliates, and advertisers for the purposes outlined above.

International Data Transfers

Personal data may be transferred to and processed in countries outside of the European Economic Area (EEA) or the country of residence of the User. In such cases, we will ensure that appropriate safeguards are in place to protect the data in accordance with applicable data protection laws.

Changes to This Privacy Policy

Cabin Winterfell has the discretion to update this privacy policy at any time. When we do, we will revise the updated date at the bottom of this page. We encourage Users to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.

Contacting Us

If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this site, please contact us.