This privacy policy explains how Science Dress Bear handles personal data when you use sciencedressbear.beer. It covers contact requests, site operation, security, and the limited cookie use described below.
This introduction outlines how information is handled, what rights may apply, and where to direct policy-related questions.
Privacy data overview
When you use the contact form or reach out through our listed channels, we may process your name, email address, phone number if you provide it, inquiry message, and service preferences. We also process technical data such as server request metadata and browser and device information to operate and secure the website.
We receive personal data when you submit a form, send a message, or otherwise contact us. Technical data is generated automatically when you visit the site and is used for delivery, security, and basic troubleshooting.
Essential cookies support core site functions, such as page delivery and basic security. Preference cookies remember your privacy choices so the site can respect them on later visits. We do not confirm the use of analytics or advertising cookies.
We use essential cookies for site operation and cookies that remember privacy choices. Because tracking is not enabled, we do not rely on analytics or marketing cookies. You can usually block or delete cookies in your browser, but some site functions may not work as intended if essential cookies are disabled.
Data processing overview
This section outlines the primary purposes for processing personal data, the categories of recipients involved in service delivery, and the legal context that may govern disclosure.
We process data to answer contact requests, manage service preferences, deliver the website, maintain security, and troubleshoot technical issues. We also use limited information to meet legal obligations and to keep records needed for administration and accountability.
Where outside support is needed for hosting, technical delivery, or message handling, we may provide limited data to those providers. They should receive only the information needed to perform their role and are expected to handle it under appropriate confidentiality and security obligations.
We may share personal data with service providers that help us operate the website, deliver messages, or maintain security. We may also disclose information if required by law, to respond to lawful requests, or to protect our rights, users, or systems.
You may ask us to review, correct, delete, or limit the personal data we hold about you, subject to legal and operational limits. Where processing is based on legitimate interests, you may also object in situations allowed by law.
To exercise your rights, send a clear request and describe the data or issue involved. We may ask for enough information to confirm your identity and understand the request. If we cannot act on part of a request, we will explain the reason where permitted.
Contact inquiries are retained for the time needed to respond and manage the matter, then deleted or archived if a legal or operational reason remains. Technical records are kept for a practical period needed for security, delivery, and troubleshooting, after which they are removed or anonymized where possible.
If we make material changes, we will update the policy on this page and, where appropriate, draw attention to the change through the site or another reasonable channel. The version in effect is the one posted most recently.
Under the GDPR, we process personal data only when we have a lawful basis for doing so, such as responding to your request, meeting legal obligations, protecting the site, or relying on consent where it is needed. We keep the scope of processing limited to what is necessary for the stated purpose.
You may have the right to access your data, correct inaccurate information, ask for deletion, restrict certain processing, object to processing based on legitimate interests, and request portability where applicable. If we rely on consent, you may withdraw it for future processing. You also have the right to raise a concern with the competent data protection authority.
