Privacy Policy

1. Introduction

At LA Road Runners (“we,” “us,” or “our”), accessible at laroadrunners.com, we are firmly committed to safeguarding your privacy and personal data. This Privacy Policy outlines how we collect, process, store, and protect personal information in accordance with global data protection standards, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We are dedicated to ensuring transparency and upholding your rights with a privacy-first approach that respects your trust in our services.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all users of laroadrunners.com, encompassing visitors, account holders, subscribers, and customers. We act as the Data Controller under applicable data protection laws for the personal information collected through our website and related services. It governs how we use your data and your rights in relation to that data. If you reside in California or within the European Economic Area (EEA), this Policy outlines your specific rights and our corresponding responsibilities.

3. Categories of Data Processed

We may collect and process the following categories of personal data:

– Usage Data: Includes information such as your browser type and version, IP address, geographical location, operating system, referral source, length of visit, page views, and website navigation paths. This data helps us analyze how users interact with our website.

– Account Data: Includes data provided through registration or communication, such as your full name, billing and shipping address, email address, phone number, and account credentials.

– Profile Data: Includes your preferences, feedback, purchase history, browsing behavior, and selected interests. We may use this data to personalize your experience on laroadrunners.com.

– Communication Data: Includes records of interactions with our support team, emails sent to us, service requests, and related correspondence.

– Technical Data: Includes device identifiers, device type, operating system details, system configurations, diagnostic data, and software-related identifiers collected via cookies or similar technologies.

– Transaction Data: Includes purchase history, order details, shipping and delivery information, and payment data (processed securely by authorized payment processors, never stored in full on our systems).

– Preference Data: Includes your expressed preferences concerning marketing communications, promotional offers, and product categories of interest.

4. Legal Bases for Processing

We rely on the following legal grounds to collect and process personal information:

– Consent: Granted by you explicitly, such as when opting in to newsletters or accepting cookies.

– Contract Performance: Needed to fulfill transactions, manage your account, or deliver requested products/services.

– Legal Obligations: Where we are legally required to retain or disclose information.

– Legitimate Interests: For purposes such as securing our platform, preventing fraud, improving our site functionality, and tailoring marketing based on user interactions — provided that such interests do not override your data protection rights.

5. Your Rights

Under applicable laws, including the GDPR and CCPA, you have the right to:

– Access: Request a copy of the personal data we hold about you.
– Rectification: Request correction of inaccurate or incomplete data.
– Erasure: Request the deletion of your data under certain legal grounds (“Right to be Forgotten”).
– Restriction: Request the processing of your data be limited in specific contexts.
– Portability: Receive a copy of your data in a structured, commonly used, machine-readable format that can be transferred to another controller.
– Objection: Object to data processing for direct marketing or based on legitimate interests.
– Opt-Out: California residents may opt out of the “sale” of their personal information, as defined under the CCPA.

To exercise these rights, please contact us at [email protected]. We will respond to valid requests in accordance with legal requirements.

6. Security Measures

To protect your personal information, we implement robust security measures, which include:

– Data encryption (in transit and at rest)
– Restricted data access through user authentication and role-based permissions
– Frequent system updates and vulnerability assessments
– Secure data backups and incident response plans
– Employee training on data handling and compliance protocols

7. International Transfers

Where applicable, your personal data may be transferred to third-country jurisdictions outside your residence, including to service providers and partners located in regions without equivalent data protection regulations. In such cases, we employ appropriate safeguards such as Standard Contractual Clauses (SCCs), adherence to the EU-U.S. Data Privacy Framework (where applicable), and binding corporate policies to ensure that your data receives an equivalent level of protection.

8. Data Retention

We retain your data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, including compliance with legal, accounting, or reporting requirements. Retention periods vary by category:

– Usage and Technical Data: retained for up to 12 months for analytics purposes.
– Account and Profile Data: retained for the duration of your account and for 6 years after closure for compliance.
– Communication and Transaction Data: retained for 7 years to meet legal and regulatory requirements.
– Preference and Marketing Data: retained indefinitely until the user revokes consent or opts out.

9. Cookie Policy

We use cookies and similar technologies on laroadrunners.com to enhance user experience, optimize site functionality, analyze traffic, and provide personalized content.

– Essential Cookies: Required for basic website operations (e.g., login, shopping cart).
– Functional Cookies: Enhance usability by remembering user preferences.
– Analytics Cookies: Collect information on site usage for performance improvements.
– Performance Cookies: Monitor and measure website loading times and service reliability.

For further detail on cookies used on our site, please refer to our separate Cookie Notice, accessible via the site footer.

10. Cookie Management and Compliance with GDPR & CCPA

We provide transparent controls that enable users to manage cookie preferences directly through the cookie banner presented upon first visit. You may adjust your selections any time through your browser settings or by accessing cookie preferences on laroadrunners.com.

Under GDPR and CCPA, users have the right to:

– Accept or decline non-essential cookie categories
– Withdraw consent at any time without consequences
– Request details about data collected via cookies

We do not sell personal information as defined under CCPA and honor Do Not Track (DNT) signals where possible.

11. Special Protections for Children Under 13

laroadrunners.com is not intended for children under the age of 13, and we do not knowingly collect personal data from them. If we discover or are notified that personal data of a child under 13 has been submitted to us, we will take prompt steps to delete such data from our systems in compliance with applicable laws, including the Children’s Online Privacy Protection Act (COPPA).

12. Policy Updates and User Notifications

We reserve the right to revise this Privacy Policy to reflect changes in our practices, legal obligations, or technological advancements. If we make material changes affecting your rights or the way we process your information, we will notify you through prominent notices on laroadrunners.com or directly via email if you are an account holder. Your continued use of our services constitutes acceptance of the revised policy.

13. Contact

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, we encourage you to contact our Data Protection Team at:

Email: [email protected]

We value your trust and are committed to maintaining the confidentiality and integrity of your personal data.

We are dedicated to full compliance with GDPR, CCPA, and other applicable privacy laws. Please reach out to [email protected] with any concerns, rights requests, or data protection inquiries.