Privacy Policy for Hudson’s Bay Fur Trade Records Archive (HBCRecordsArchive.com)
Last Updated: [Date]
This Privacy Policy describes how HBCRecordsArchive.com ("we", "us", or "our") collects, uses, discloses, and protects your personal information when you visit our website.
1. Introduction and Scope
HBCRecordsArchive.com is dedicated to providing public access to historical records related to the Hudson's Bay Company fur trade. We are committed to protecting the privacy of our visitors. This Privacy Policy applies to all information collected through our website (HBCRecordsArchive.com) and any related services, communications, or functionality.
By accessing or using our Site, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Site.
This policy is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA) and the United Kingdom, and other relevant global privacy standards.
2. Data Controller Information
The data controller responsible for your personal information is:
HBC Records Archive
[Insert Physical or Correspondence Address]
Email: privacy@HBCRecordsArchive.com
For any questions regarding this Privacy Policy or our data practices, please contact us using the information above.
3. Information We Collect
We collect information to provide, improve, and secure our services. The types of information we collect fall into two categories: Information You Provide and Information Collected Automatically.
3.1. Information You Provide Voluntarily
- Contact Information: If you contact us via email or a contact form, we collect your name, email address, and the contents of your message.
- User Account Data: If we offer user accounts for enhanced features (e.g., saving searches, annotations), we collect data necessary to create and maintain your account, such as username, password, and email address.
- Research Inquiries: If you submit a detailed research request, you may provide additional personal or professional details relevant to your inquiry.
- Newsletter Sign-ups: If you subscribe to our newsletter, we collect your email address and potentially your name.
- Feedback and Surveys: Information you provide when participating in surveys or providing feedback on the Site.
3.2. Information Collected Automatically (Usage Data)
When you visit our Site, we and our third-party service providers may automatically collect certain information about your device and browsing actions, including:
- Log Data: Your IP address, browser type and version, operating system, referral URLs, pages viewed, date/time stamps, and clickstream data.
- Device Information: Information about the device you use to access the Site, including device identifiers.
- Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies. For detailed information, please see our Cookie Policy (Section 8).
- Analytics Data: Data regarding your interaction with the Site (e.g., search queries, records viewed, time spent on pages) collected via analytics services like Google Analytics.
3.3. Special Categories of Data (Sensitive Data)
We do not intentionally collect "special categories" of personal data (as defined by GDPR, such as racial/ethnic origin, religious beliefs, health data) through our Site. However, the historical records we archive may contain references to individuals that could be construed as sensitive historical data. We process such archival material in the public interest for historical research purposes.
4. Legal Basis for Processing (GDPR)
For users protected under the GDPR, we process your personal data on the following legal bases:
- Consent: For sending newsletters, non-essential cookies, and certain direct communications. You can withdraw consent at any time.
- Legitimate Interests: To operate, secure, and improve our Site (e.g., analytics, fraud prevention, administrative communications). Our legitimate interest is providing a stable, useful, and secure historical resource.
- Contractual Necessity: To fulfill requests you make (e.g., responding to a research inquiry you initiate).
- Legal Obligation: To comply with applicable laws, regulations, or lawful requests from authorities.
- Public Interest/Archiving: Processing related to the historical records themselves is conducted for purposes of archiving in the public interest, scientific or historical research.
5. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, operate, maintain, and improve the HBCRecordsArchive.com website and its features.
- To respond to your inquiries, comments, or research requests.
- To manage your user account (if applicable) and provide customer support.
- To send administrative information, such as updates to our policies.
- To send newsletters and updates (only with your explicit consent).
- To understand how visitors use our Site through analytics, helping us optimize content and functionality.
- To monitor and protect the security and integrity of our Site, including detecting, preventing, and addressing technical issues or fraudulent activity.
- To comply with legal obligations and enforce our Terms of Service.
6. How We Share and Disclose Information
We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:
- Service Providers: With trusted third-party vendors who perform services on our behalf (e.g., hosting, analytics, email delivery). These providers are contractually obligated to protect your data and use it only for the services we specify.
- Legal Requirements: If required by law, subpoena, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others, to investigate fraud, or to respond to a government request.
- Academic & Research Collaboration: In anonymized, aggregated form for legitimate academic or research purposes related to historiography or digital humanities.
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred. We will notify you via email and/or a prominent notice on our Site of any change in ownership or uses of your personal information.
7. International Data Transfers
Our servers and some of our service providers may be located in countries outside your country of residence, including the United States. These countries may have data protection laws that differ from your own.
When we transfer personal data from the EEA, UK, or Switzerland to a country not deemed to provide an adequate level of protection, we implement appropriate safeguards as required by law, such as Standard Contractual Clauses approved by the European Commission. By using our Site, you consent to the transfer of your information to these countries.
8. Cookies and Similar Technologies
We use cookies and similar tracking technologies to track activity on our Site and hold certain information.
- Essential Cookies: Necessary for the Site to function (e.g., security, basic functionality). They do not require consent.
- Analytics/Performance Cookies: Help us understand how visitors interact with the Site (e.g., Google Analytics). They collect information in an anonymous form.
- Functionality Cookies: Allow the Site to remember choices you make (like language preferences) for a more personalized experience.
- Targeting/Advertising Cookies: We currently do not use advertising cookies. Our focus is historical research, not advertising.
You can control cookies through your browser settings. Disabling essential cookies may affect the Site's functionality. For detailed information on the cookies we use, please see our dedicated Cookie Policy page.
9. Data Security
We implement appropriate technical and organizational measures designed to protect the security of your personal information from accidental loss, unauthorized access, use, alteration, or disclosure. These measures include encryption (SSL/TLS), access controls, and secure server infrastructure.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
10. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law (e.g., tax, accounting, legal obligations).
- Contact/Inquiry Data: Retained for 3 years from the date of last contact to facilitate follow-up.
- Account Data: Retained for the duration your account is active, plus a reasonable period thereafter for administrative recovery or legal purposes.
- Newsletter Data: Retained until you unsubscribe.
- Technical/Log Data: Retained for up to 26 months for security and analytics purposes.
Archival historical records are retained indefinitely in the public interest.
11. Your Privacy Rights (GDPR & CCPA)
Depending on your location, you may have certain rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under certain conditions.
- Right to Restrict Processing: Request we limit the processing of your data in specific circumstances.
- Right to Data Portability: Request a structured, machine-readable copy of your data you provided, or request its transfer to another controller.
- Right to Object: Object to processing based on our legitimate interests.
- Rights Related to Automated Decision-Making: We do not engage in automated decision-making with legal effects.
- Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time.
- Right to Non-Discrimination (CCPA): We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, please contact us at privacy@HBCRecordsArchive.com. We may need to verify your identity before fulfilling your request. You also have the right to lodge a complaint with your local data protection supervisory authority.
12. Third-Party Links
Our Site may contain links to other websites not operated by us (e.g., academic institutions, related archives). This Privacy Policy does not apply to third-party sites. We strongly advise you to review the Privacy Policy of every site you visit.
13. Children's Privacy
Our Site is intended for a general audience and is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. If we become aware of such collection, we will take steps to delete that information.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other reasons. We will post the updated policy on this page with a revised "Last Updated" date. We encourage you to review this page periodically for the latest information on our privacy practices. Material changes will be communicated via email or a prominent notice on our Site prior to the change becoming effective.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: privacy@HBCRecordsArchive.com
Postal Address: [Insert Full Mailing Address]