Privacy Policy

Privacy

FindHotSprings.com ("we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy outlines how we collect, use, store, and safeguard personal information obtained through our website and related services. By accessing or using FindHotSprings.com, you consent to the practices described in this policy.

Introduction to Data Collection and Use

FindHotSprings.com operates as a platform to help users discover and navigate hot springs locations globally. To provide these services, we collect limited personal and non-personal data. Our practices comply with global privacy regulations, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA). This policy clarifies:

  • What data we collect and why
  • How data is processed and protected
  • Your rights over your information

Types of Information Collected

1. Personal Information

We collect the following personal data **only when voluntarily provided**:

  • Contact details: Name, email address, and phone number (e.g., for account creation or newsletter subscriptions).
  • User-generated content: Reviews, photos, or comments submitted to the platform.

2. Non-Personal Information

Automatically collected technical data includes:

  • Device information: Browser type, operating system, and IP address.
  • Usage analytics: Pages visited, time spent, and interactions (e.g., clicks, searches).
  • Cookies and trackers: Session cookies for login authentication and preference tracking.

Purpose of Data Processing

We use collected information for the following purposes:  

1. Service Delivery

  • Facilitating user accounts, reviews, and community interactions.

2. Communication

  • Sending transactional emails (e.g., account verification, password resets).
  • Delivering promotional content or newsletters only with explicit consent.

3. Analytics and Improvements

  • Analyzing traffic patterns to optimize site performance and user experience.
  • Conducting surveys or research to enhance service features.

4. Legal Compliance

  • Responding to lawful requests from government authorities.
  • Investigating fraud, security breaches, or violations of our Terms of Service.

Data Sharing and Third Parties

We do not sell personal data to third parties. Limited sharing occurs under these circumstances:

1. Service Providers

  • Hosting partners: Cloud storage and server infrastructure.
  • Analytics tools: Google Analytics (anonymized data only).
  • Payment processors: For premium subscriptions (transaction data is encrypted).

2. Legal Obligations

  • Disclosures required by subpoenas, court orders, or regulatory audits.

3. Business Transfers

  • Data shared during mergers, acquisitions, or asset sales, with guarantees of continued privacy.

4. Aggregated Data

  • Non-identifiable statistics shared with partners (e.g., "40% of users visit hot springs in winter").

Data Security Measures

We implement industry-standard safeguards to protect your information:

1. Technical Protections

  • Encryption: SSL/TLS for data in transit; AES-256 for stored data.
  • Access controls: Role-based permissions limit employee access to sensitive data.
  • Regular audits: Penetration testing and vulnerability assessments.

2. Data Retention

  • Personal data is retained only as long as necessary (e.g., account activity) or required by law.

3. Incident Response

  • Breach notifications issued within 72 hours of discovery, per GDPR guidelines.

User Rights and Controls

You retain full control over your data:

1. Access and Portability

  • Request a copy of your data in a structured, machine-readable format.

2. Corrections and Deletions

  • Update inaccuracies via account settings or by contacting us.
  • Delete accounts and associated data, excluding information required for legal compliance.

3. Opt-Out Mechanisms

  • Unsubscribe from marketing emails via links in each message.
  • Disable non-essential cookies through our preference center.

4. GDPR/CCPA Rights

  • Withdraw consent for data processing.
  • Object to automated decision-making or profiling.

Policy Updates and Contact Information

1. Revisions

  • Significant changes will be announced via email or site banners 30 days in advance.
  • Archived versions of this policy are available upon request.

2. Contact Us

For questions or data requests:

  • Email: webmaster at findhotsprings.com

This policy was last updated on February 22, 2025. By continuing to use FindHotSprings.com, you acknowledge and agree to the terms outlined above.