Privacy Policy - Free Speech Bus

1. Introduction

At Free Speech Bus LLC (“Company,” “we,” “us,” or “our”), available via https://freespeechbus.com (“Website”), your privacy and the protection of your personal data are of paramount importance. We are fully committed to safeguarding the privacy rights of our users and to complying with applicable data protection legislation including, but not limited to, the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act of 2018 (“CCPA”). This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you interact with our Website and services.

2. Scope and Data Controller

This Privacy Policy applies to information collected through our Website, communications, and any services provided by Free Speech Bus LLC. For the purposes of the GDPR, Free Speech Bus LLC is the Data Controller responsible for the processing of your personal data. If you have any questions about this Policy or our handling of your data, you may reach us at [email protected].

3. Categories of Data Processed

We collect and process the following categories of personal data to provide and enhance our services:

a. Usage Data
This includes information such as your browser type and version, IP address, device identifiers, referral URLs, pages visited, time and date of each visit, time spent on pages, clickstream data, and other diagnostic data about how you use the Website.

b. Account Data
Information you provide when creating an account or submitting forms, including your full name, email address, postal address, and telephone number.

c. Profile Data
Includes information on user preferences, browsing behavior, purchase history, and any personalization choices you make within the Website.

d. Communication Data
Covers data provided through customer support queries, contact forms, surveys, and other user-initiated correspondence. This may include the content of messages you send and our correspondence history.

e. Technical Data
Information pertaining to the devices you use to access the Website, such as operating system, browser configuration, screen resolution, and language settings.

f. Transaction Data
Includes information related to purchases, payment method, billing address, shipping address, and order history. Note: We do not store full payment card details; these are processed by secure third-party payment processors.

g. Preference Data
Information related to your marketing and communication preferences, including opt-in consents and stated product or content interests.

4. Legal Bases for Processing

We process your personal data according to the following lawful bases under the GDPR:

– Consent: For specific purposes where you have given us explicit permission (e.g., subscribing to our newsletter).
– Contract: Where processing is necessary for the performance of a contract with you or in preparation for entering into such a contract.
– Legal Obligation: Where processing is necessary to comply with our legal obligations.
– Legitimate Interest: For purposes such as analyzing usage trends, improving digital infrastructure, fraud prevention, and promoting our services, provided such interests are not overridden by your individual rights and freedoms.

5. Your Rights — GDPR & CCPA

You have the following rights concerning your personal data:

– Right of Access: You can request a copy of your personal data.
– Right to Rectification: You may request corrections if your data is inaccurate or incomplete.
– Right to Erasure: You may request that we delete your personal data under certain conditions (“right to be forgotten”).
– Right to Restriction: You may request that we restrict processing where appropriate.
– Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format.
– Right to Object: You may object to our processing of your data for direct marketing or other legitimate interest purposes.
– Right Not to Be Subject to Automated Decision-Making: We do not make decisions affecting you solely based on automated processing.
– Right to Opt-Out (for CCPA): California residents may request to opt out of the sale or sharing of their personal data, request disclosure of categories of data collected, and request deletion of their data.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request in accordance with applicable data protection laws.

6. Security Measures

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, loss, misuse, or alteration. These include but are not limited to:

– Encryption of data at rest and in transit
– Role-based access controls and employee confidentiality agreements
– Secure server infrastructure with regular security patches
– Industry-standard firewalls and intrusion detection systems
– Routine backups and disaster recovery planning
– Ongoing privacy and security training for all personnel

7. International Transfers

Your personal information may be transferred to, and maintained on, servers located outside your jurisdiction — including in countries that may not provide equivalent levels of data protection as those in your home country. In such cases, we use Standard Contractual Clauses approved by the European Commission or other legally-approved mechanisms to ensure an adequate level of protection for your personal data.

8. Data Retention

We retain personal data only as long as necessary for legitimate business purposes, contractual obligations, and compliance with applicable laws:

– Usage Data: Retained for up to 12 months for analytics purposes.
– Account Data: Retained for the duration of account existence and up to 3 years thereafter unless otherwise required.
– Profile Data: Retained for the period of customer relationship and up to 3 years for analytics and recordkeeping.
– Communication Data: Stored for up to 2 years following last contact.
– Technical and Log Data: Retained for up to 12 months.
– Transaction Data: Maintained for a minimum of 7 years for accounting and legal compliance.
– Preference Data: Maintained until consent is withdrawn or data is otherwise updated.

9. Cookie Policy

We use cookies and similar technologies to enhance your experience on our Website. These may include:

– Essential Cookies: Required for core site functionality, such as login authentication and security.
– Functional Cookies: Remember your preferences and settings.
– Analytical Cookies: Collect data on how users interact to help us improve performance.
– Performance Cookies: Monitor system performance, server load, and error diagnostics.

Analytics may involve third-party services (such as Google Analytics) which may collect user data through their own cookies.

10. Cookie Management and Compliance

Upon your first visit to freespeechbus.com, you will be notified of our use of cookies and given the option to manage your preferences in compliance with GDPR and CCPA. You can revise your cookie preferences at any time through browser settings or our cookie consent tool made available on the Website.

11. Children’s Privacy

Our Website is not directed to children under the age of 13, and we do not knowingly collect personal data from such individuals. If we learn that we have inadvertently collected data from a child under 13, we will take immediate steps to delete such information. If you are a parent or guardian and believe we have collected information about a child, please contact us at [email protected].

12. Policy Updates

We reserve the right to modify or update this Privacy Policy at our discretion. Any material changes will be reflected through a revised Privacy Policy accessible via this webpage. We encourage you to review this document periodically to remain informed of how we protect your personal data.

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, you may reach us at:

Email: [email protected]
Website: https://freespeechbus.com

We are committed to ensuring your personal data is handled lawfully, fairly, and transparently. If you have concerns about your privacy rights or how we process your personal data, please contact us. We aim to respond promptly and in accordance with applicable data protection laws.

We are committed to full compliance with all applicable privacy regulations including the GDPR and CCPA. If you have further concerns, we welcome the opportunity to address them directly via the contact details provided above.