Privacy Policy for Prairie Harvest History

1. Introduction and Scope

Prairie Harvest History ("we," "our," or "us") operates the website PrairieHarvestHistory.com (the "Site"). We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, subscribe to our newsletter, participate in our forums, or otherwise interact with our services.

This policy applies to all personal data processed through the Site, regardless of where you are located. It is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Union/European Economic Area (EU/EEA) and the United Kingdom, and other relevant regulations.

By using the Site, you consent to the data practices described in this policy. If you do not agree with the terms of this policy, please do not access the Site.

2. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person ('data subject').
• Processing: Any operation performed on personal data, such as collection, recording, storage, use, or disclosure.
• Data Controller: Prairie Harvest History, which determines the purposes and means of processing personal data.
• Data Processor: A third party that processes personal data on behalf of the Data Controller.
• Consent: Freely given, specific, informed, and unambiguous indication of the data subject's wishes.

3. Information We Collect

We collect several types of information from and about users of our Site, which may include:

3.1. Information You Provide Directly

• Contact and Account Information: Name, email address, username, and password when you create an account, subscribe to our newsletter, or contact us.
• User Content: Comments, forum posts, historical contributions, photographs, or other content you submit to the Site.
• Communication Data: Records of your correspondence with us, including email content and support queries.
• Transaction Data: If you make a donation or purchase, we collect payment information (processed by a secure third-party processor; we do not store full credit card details).
• Preference Data: Your preferences in receiving marketing from us and your communication preferences.

3.2. Information Collected Automatically

• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Site.
• Usage Data: Information about how you use our Site, including pages visited, time spent on pages, clickstream data, and the referring/exit pages.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to track activity on our Site and hold certain information. See our Cookie Policy for details.

3.3. Information from Third Parties

We may receive limited personal data about you from third parties, such as social media platforms (if you interact with us through them) or analytics providers (like Google Analytics).

4. Legal Basis for Processing (GDPR)

For users protected under the GDPR, we process your personal data on one or more of the following legal bases:

• Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., sending newsletters).
• Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your interests and fundamental rights do not override those interests. Our legitimate interests include: operating and improving our Site, ensuring security, conducting analytics, and promoting our historical research.

5. How We Use Your Information

We use the information we collect for various purposes, including:

• To operate, maintain, and improve the Site and its content.
• To manage your account and provide you with access to interactive features.
• To send you administrative information, such as updates, security alerts, and support messages.
• To send you promotional communications, such as newsletters, where you have consented to receive them.
• To facilitate user contributions, comments, and community interactions.
• To process donations or transactions securely.
• To respond to your comments, questions, and requests.
• To monitor and analyze trends, usage, and activities in connection with our Site for technical and content development.
• To detect, prevent, and address technical issues, fraud, or illegal activities.
• To comply with legal obligations and protect our legal rights.

6. Sharing and Disclosure of Information

We do not sell, rent, or trade your personal data. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party vendors who perform services on our behalf (e.g., web hosting, email delivery, analytics, payment processing). These processors are bound by contractual obligations to keep personal data confidential and use it only for the purposes we specify.
• Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Protection of Rights: To enforce our Terms of Service, protect the security of the Site, or protect the rights, property, or safety of Prairie Harvest History, our users, or the public.
• Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
• With Your Consent: For any other purpose disclosed by us when you provide the information, with your explicit consent.
• Aggregated/Anonymized Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, historical analysis, or promotional purposes.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

7. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. For users in the EU/EEA and UK, this may involve transfers to countries not deemed to have an adequate level of data protection.

When we transfer your personal data internationally, we implement appropriate safeguards as required by law. These may include using standard contractual clauses approved by the European Commission or ensuring the recipient is part of the EU-US Data Privacy Framework. You can obtain details of these safeguards by contacting us.

8. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. These measures include encryption (SSL/TLS), secure server hosting, access controls, and regular security reviews. However, please be aware that no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

9. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Criteria used to determine retention periods include:

• The length of time we have an ongoing relationship with you.
• Whether there is a legal obligation to which we are subject.
• Whether retention is advisable in light of our legal position (such as for statute of limitations, litigation, or regulatory investigations).

For example, we retain account data for as long as your account is active. Newsletter subscription data is retained until you unsubscribe. Analytics data is typically retained in an aggregated form.

10. Your Data Protection Rights

Depending on your location and applicable law (particularly under the GDPR), you may have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your personal data under certain conditions.
• Right to Restrict Processing: Request restriction of processing your personal data under certain conditions.
• Right to Data Portability: Request transfer of your data to another organization or to you in a structured, machine-readable format.
• Right to Object: Object to our processing of your personal data, particularly for direct marketing or where we rely on legitimate interests.
• Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your data. This does not affect the lawfulness of processing before the withdrawal.
• Right to Lodge a Complaint: Complain to a data protection authority about our collection and use of your personal data. For EU/EEA users, this is your local supervisory authority.

To exercise any of these rights, please contact us using the details in the Contact Information section. We may need to verify your identity before responding to your request. We will respond to all legitimate requests within one month.

11. Cookies and Similar Technologies

We use cookies and similar tracking technologies to track activity on our Site and store certain information. Cookies are small data files placed on your device.

Types of Cookies We Use:

• Essential Cookies: Necessary for the Site to function and cannot be switched off.
• Performance/Analytics Cookies: Allow us to count visits and traffic sources to measure and improve Site performance.
• Functionality Cookies: Enable enhanced functionality and personalization (e.g., remembering login details).
• Targeting/Advertising Cookies: May be set by our advertising partners to build a profile of your interests.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site. You can also manage your cookie preferences via our Cookie Consent Banner or your browser settings.

12. Third-Party Websites

Our Site may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

13. Children's Privacy

Our Site is not intended for children under the age of 16 ("Children"). We do not knowingly collect personally identifiable information from Children. If you are a parent or guardian and you are aware that your Child has provided us with personal data, please contact us. If we become aware that we have collected personal data from Children without verification of parental consent, we take steps to remove that information from our servers.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We may also provide notice via email or a prominent notice on our Site for significant changes. You are advised to review this Privacy Policy periodically for any changes. Your continued use of the Site after the posting of changes constitutes your acceptance of such changes.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Controller at:

For EU/EEA or UK residents, you have the right to contact your local data protection supervisory authority.