Privacy Policy

1. Introduction

Heritage Chronicles ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website trewdoms.com or use our services.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy complies with the General Data Protection Regulation (GDPR) for users in the European Union.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name and contact details (email, phone, address)
• Demographic information (age, location)
• Family history and genealogical information
• Payment and billing information
• Communication preferences
• Any information you provide in forms, surveys, or correspondence

2.2 Technical Information

We automatically collect technical information including:

• IP address and device information
• Browser type and version
• Operating system
• Pages visited and time spent on our website
• Referral source
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing historical research and genealogy services
• Processing payments and managing accounts
• Communicating about our services and appointments
• Improving our website and services
• Complying with legal obligations
• Marketing and promotional activities (with consent)
• Fraud prevention and security

4. Legal Basis for Processing (GDPR)

For EU residents, we process your personal data based on:

• Contract: To fulfill our service obligations to you
• Consent: For marketing communications and cookies
• Legitimate Interest: For business operations and fraud prevention
• Legal Obligation: To comply with applicable laws

5. Cookies and Tracking Technologies

5.1 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality
• Analytics Cookies: Help us understand website usage
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used for targeted advertising (with consent)

5.2 Managing Cookies

You can control cookies through:

• Our cookie consent banner
• Your browser settings
• Third-party opt-out tools

6. Information Sharing and Disclosure

We may share your information with:

• Service Providers: Trusted partners who assist with our operations
• Legal Authorities: When required by law or to protect rights
• Business Transfers: In case of merger, acquisition, or sale
• With Consent: When you explicitly agree to sharing

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. Data Security

We implement appropriate security measures to protect your information:

• SSL encryption for data transmission
• Secure servers and data storage
• Access controls and authentication
• Regular security audits and updates
• Staff training on data protection

8. Data Retention

We retain your personal information for:

• Service Records: 7 years after service completion
• Financial Records: 7 years as required by law
• Marketing Data: Until you withdraw consent
• Website Analytics: 26 months maximum

9. Your Rights

Under Australian privacy law and GDPR, you have the right to:

• Access: Request copies of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your information
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing communications

10. International Transfers

Your information may be transferred to and processed in countries other than Australia. We ensure appropriate safeguards are in place, including:

• Adequacy decisions by relevant authorities
• Standard contractual clauses
• Binding corporate rules
• Certification schemes

11. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying prominent notices on our website

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

14. Complaints

If you believe we have breached your privacy rights, you can lodge a complaint with:

• Australia: Office of the Australian Information Commissioner (OAIC)
  Website: www.oaic.gov.au
• EU: Your local Data Protection Authority
  List available at: European Data Protection Board