Privacy Policy for CoActNet
Last Updated: 2024-08-29
Welcome to CoActNet! Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website, https://coactnet.org/.
1. Who We Are
Our website address is https://coactnet.org/. CoActNet is operated by Heinz Peter Lichtenberg, located at 2/105 Robert Road, Bentley Park, QLD, 4869, Australia. For any privacy-specific concerns, please contact us via our contact form or by phone at +61 456293412.
2. What Personal Data We Collect and Why We Collect It
We collect various types of personal data from users and site visitors for different purposes:
- Comments: When visitors leave comments on the site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to check if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
- Media: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
- Contact Forms: If you submit a contact form on our site, we collect your name, email address, and any additional information you provide. This data is used solely for customer service purposes and is retained for six months. We do not use this information for marketing purposes unless you have given explicit consent.
- Cookies: Our website uses cookies to improve user experience and analyze site traffic. If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies. These cookies are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year. If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me,” your login will persist for two weeks. If you log out of your account, the login cookies will be removed. If you edit or publish an article, an additional cookie will be saved in your browser, which includes no personal data and simply indicates the post ID of the article you just edited. It expires after one day.
- Embedded Content from Other Websites: Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.
- Data Collected to Manage Your Membership: When you sign up for a membership on our site using the Paid Memberships plugin, we collect the following data:
- At Checkout: We collect your name, email address, username, and password to set up your account. If you are redirected to an offsite payment gateway, we may store this information in a temporary session variable to set up your account when you return to our site.
- Billing Information: We may collect your billing address and phone number to confirm your credit card. This information is saved by our site to prepopulate the checkout form for future purchases and to contact you if needed regarding your order.
- Payment Information: We collect your credit card number, expiration date, and security code to process your purchase. The last four digits of your credit card number and the expiration date are saved for reference and to notify you if your card will expire before the next recurring payment.
- Cookies for Membership Management: When logged in, we use cookies to track some of your activities on our site, including logins, visits, and page views.
- Consent Management with Complianz: This website uses the Privacy Suite for WordPress by Complianz to collect and record browser and device-based consent. For this functionality, your IP address is anonymized and stored in our database. This service does not process any personally identifiable information and does not share any data with the service provider. For more information, see the Complianz Privacy Statement.
- Anti-Spam Protection with Akismet: We use the Akismet Anti-Spam service to filter and prevent spam comments. Akismet collects information about visitors who comment on sites that use the Akismet Anti-Spam service. The information collected typically includes the commenter’s IP address, user agent, referrer, and site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself). For more details, see the Akismet Privacy Policy.
3. Who We Share Your Data With
- Service Providers: We may share data with service providers that assist in operating our website, conducting our business, or providing services to you, such as hosting providers, email marketing services, and payment processors. We ensure these providers comply with data protection laws and maintain the confidentiality of your data.
- Analytics Providers: We share anonymized data with analytics providers like Google Analytics to help us understand how users interact with our website.
- Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities (e.g., a court or government agency).
- Spam Detection: Visitor comments may be checked through an automated spam detection service to help identify and prevent spam.
- Payment Processing: If you make a payment through an offsite gateway, some of your payment information may be shared with the payment processor to complete the transaction securely.
- Password Resets: If you request a password reset, your IP address will be included in the reset email.
4. How Long We Retain Your Data
We retain personal data for as long as necessary to fulfill the purposes for which it was collected:
- Comments: Comments and their metadata are retained indefinitely. This allows us to recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
- Registered Users: For users who register on our website (if any), we store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
- Contact Form Submissions: Retained for six months for customer service purposes.
- Analytics Data: Retained for [specify duration, e.g., one year] for performance analysis.
- Membership Data: Membership data, including billing information, is retained for as long as the membership is active and for a period after termination to comply with legal and financial obligations.
- Transaction Data: Retained for ten years to comply with legal and accounting obligations.
5. What Rights You Have Over Your Data
Under GDPR, you have the following rights concerning your personal data:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of any inaccurate or incomplete data.
- Right to Erasure: You can request the deletion of your data under certain conditions.
- Right to Restrict Processing: You can request to limit how we use your data.
- Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
- Right to Object: You can object to the processing of your data for direct marketing or other purposes.
- Right to Withdraw Consent: If you have given consent for data processing, you can withdraw it at any time.
To exercise any of these rights, please contact us at [contact email].
6. Where Your Data is Sent
Data collected through our website may be transferred outside the European Union. We ensure that any data transferred outside the EU is protected by appropriate safeguards, such as Standard Contractual Clauses or the Privacy Shield framework. Visitor comments may also be checked through an automated spam detection service.
7. How We Protect Your Data
We take the security of your data seriously and have implemented technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include:
- SSL Encryption: All data transmitted through our website is encrypted using Secure Socket Layer (SSL) technology.
- Access Controls: Access to personal data is restricted to authorized personnel only.
- Regular Security Audits: We conduct regular security audits and vulnerability assessments to ensure our systems are secure.
- Two-Factor Authentication: Enabled for accessing sensitive areas of our website.
8. What Data Breach Procedures We Have in Place
In the event of a data breach, we have procedures to identify, assess, and mitigate the breach’s impact. We will notify affected users and the relevant data protection authority as required by law.
9. What Third Parties We Receive Data From
We do not receive personal data from third parties unless you have given explicit consent or if it is necessary to provide you with a service you have requested.
10. What Automated Decision Making and/or Profiling We Do with User Data
We do not engage in automated decision-making or profiling of user data.
11. Industry Regulatory Disclosure Requirements
We comply with all applicable industry regulations and privacy laws.
Contact Information
For any privacy-related concerns or questions, please contact our Data Protection Officer:
- Name: Heinz Peter Lichtenberg
- Email: contact email
- Phone: +61 456293412