Privacy policy
Last updated: February 17, 2024
At Colorendo ("we," "us," or "our"), we value your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website and services.
Information we collect
Information you provide
When you create an account or use our services, we collect:
- Email address
- Account credentials
- Profile information
- Payment information (processed securely through our payment provider)
- Any other information you choose to provide
Information automatically collected
We automatically collect certain information when you visit our website:
- Usage data (pages visited, features used)
- Device information (browser type, operating system)
- IP address
- Cookie data
Legal basis for processing
We process your personal data based on the following legal grounds:
- Performance of our contract with you when you use our services
- Your consent, which you can withdraw at any time
- Our legitimate interests in operating and improving our services
- Compliance with legal obligations
How we use your information
We use your information for the following purposes:
- Providing and improving our services
- Processing your payments
- Communicating with you about our services
- Analyzing usage patterns to improve user experience
- Protecting against fraud and unauthorized access
- Complying with legal obligations
Data storage and security
We use industry-standard security measures to protect your data:
- Data is stored securely in encrypted databases
- User authentication is handled through secure protocols
- All data transfers are encrypted using SSL/TLS
- Regular security audits and updates are performed
Data retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- As long as your account is active
- As needed to provide you with our services
- As required to comply with legal obligations
- As necessary to resolve disputes and enforce our agreements
You can request deletion of your account and associated data at any time. Some information may be retained for legal or technical reasons, which we will clearly communicate if applicable.
Analytics and tracking
We use analytics services to understand how our services are used, which helps us improve our website and user experience. Our analytics tools collect:
- Page views and navigation patterns
- Feature usage statistics
- User interaction data
Analytics tracking is limited to authenticated users, and you can control tracking preferences through your browser settings.
International data transfers
Your personal data may be transferred to and processed in countries other than your own. We ensure these transfers comply with applicable data protection laws and implement appropriate safeguards to protect your data, including:
- Using service providers that maintain adequate data protection standards
- Implementing contractual safeguards for international transfers
- Storing data in regions with strong privacy protections
Cookies
We use cookies for the following purposes:
- Authentication and session management
- Remembering your preferences
- Analytics and performance monitoring
You can control cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our services.
Third-party services
We use trusted third-party services for:
- Website hosting and content delivery
- Database management and user authentication
- Analytics and performance monitoring
- Payment processing
These service providers are carefully selected and are required to use your personal information only as necessary to provide their services to us. Each service provider maintains their own privacy policy governing how they handle your data.
Your rights
Under various privacy laws including GDPR and CCPA, you have the following rights:
- Access and receive a copy of your personal data
- Correct or update inaccurate data
- Request deletion of your data (right to be forgotten)
- Object to or restrict data processing
- Data portability (receive and transfer your data)
- Withdraw your consent at any time
- Opt-out of the sale of personal information
- Non-discrimination for exercising your privacy rights
- Lodge a complaint with a supervisory authority
California residents have additional rights under the CCPA. To exercise any of these rights, please contact us through our contact page. We will respond to your request within 30 days or the timeframe required by applicable law.
Do not track signals
We honor Do Not Track (DNT) signals and do not track, plant cookies, or use advertising when a DNT browser mechanism is in place. You can enable or disable DNT by visiting your browser's preferences or settings page.
Children's privacy
We understand that children may use our coloring services under parental supervision. To protect children's privacy:
- Children under 13 must have parental consent to create an account
- Parents can review their child's activity and manage privacy settings
- We collect minimal information necessary to provide our services
- Parents can request to review, edit, or delete their child's data at any time
If you believe we have collected data from a child under 13 without proper parental consent, please contact us immediately through our contact page.
Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes:
- We will update the "Last updated" date at the top of this policy
- For significant changes, we will provide a prominent notice on our website
- Where required by law, we will obtain your consent for material changes
- Previous versions will be archived and available upon request
We encourage you to review this policy periodically to stay informed about our data practices.
Contact us
If you have questions about this privacy policy or our data practices, please visit our contact page. We will respond to your inquiry as soon as possible.
Data breach notification
In the event of a data breach that affects your personal information, we will:
- Notify affected users promptly and without undue delay
- Provide specific information about the breach and data affected
- Outline steps we are taking to address the breach
- Offer guidance on protecting yourself from potential harm
- Report to relevant supervisory authorities as required by law
Accessibility
We are committed to making our privacy policy accessible to all users, including those with disabilities. This policy is designed to be:
- Compatible with screen readers and assistive technologies
- Navigable using keyboard controls
- Written in clear, simple language
- Available in alternative formats upon request
If you need this policy in an alternative format, please contact us through our contact page.