This Privacy Policy describes how your personal information is collected, used, and shared when you visit www.genealogystories.co.uk (the “Site”).
PERSONAL INFORMATION WE COLLECT
Cookies
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using “Cookies”. Cookies are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
Some forms on this site require the use of Google’s reCAPTCHA service before they can be submitted. If you consent to use Google’s reCAPTCHA service, a cookie is created that stores your consent. This cookie deletes itself after thirty days.
We use a cookie to show success and failure messages to logged-in users, in response to certain actions, like joining a group. These cookies contain no personal data, and are deleted immediately after the next page load.
We use cookies on group, member, and activity directories to keep track of a user’s browsing preferences. These preferences include the last-selected values of the sort and filter dropdowns, as well as pagination information. These cookies contain no personal data, and are deleted after 24 hours.
When a logged-in user creates a new group, we use a number of cookies to keep track of the group creation process. These cookies contain no personal data, and are deleted either upon the successful creation of the group or after 24 hours.
Security Logs
The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 60 days.
We collect information about you during the signup process as well as some basic activities such as the dates you make purchases, login to the site, or cancel/pause/resume your subscriptions with us.
Additionally when you submit information to us, by emailing any @genealogystories.co.uk address, by using the “Contact Us” box on the Site, or by using the Comments feature on the Site’s blog pages, we collect certain information from you, including your name, address, email address, and phone number. We refer to this information as “Contact Information.”
When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Contact Information.
What personal data we collect and why we collect it
Profile Data
When you register for the site, you may be asked to provide certain personal data for display on your profile. The “Name” field is required as well as public, and user profiles are visible to any site visitor. Other profile information may be required or optional, as configured by the site administrator.
User information provided during account registration can be modified or removed on the Profile > Edit panel. In most cases, users also have control over who is able to view a particular piece of profile content, limiting visibility on a field-by-field basis to friends, logged-in users, or administrators only. Site administrators can read and edit all profile data for all users.
Activity
This site records certain user actions, in the form of “activity” data. Activity includes updates and comments posted directly to activity streams, as well as descriptions of other actions performed while using the site, such as new friendships, newly joined groups, and profile updates.
The content of activity items obey the same privacy rules as the contexts in which the activity items are created. For example, activity updates created in a user’s profile is publicly visible, while activity items generated in a private group are visible only to members of that group. Site administrators can view all activity items, regardless of context.
Activity items may be deleted at any time by users who created them. Site administrators can edit all activity items.
Messages
The content of private messages is visible only to the sender and the recipients of the message. With the exception of site administrators, who can read all private messages, private message content is never visible to other users or site visitors. Site administrators may delete the content of any message.
HOW DO WE USE YOUR PERSONAL INFORMATION?
We use the Contact Information that we collect to reply to any requests for information about our services and / or products and to communicate with you. Additional information may be requested from you in order to provide you with genealogical services. This data (such as family names, dates or births, marriages and deaths, addresses) is only used in order to complete the genealogical service requested by you. It is not shared with any third party without your express information.
We use the Device Information that we collect to help us to improve and optimise our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
Login Device Protection
Session data, such as IP addresses and user agents, are stored to verify that users with the role or higher are logging-in from trusted devices.
WHO ON OUR TEAM HAS ACCESS
Members of our team have access to the information you provide us. For example, site Owner/Administrators can access:
* Order information such as your membership subscriptions, payment dates and amounts, and username / email address.
Any additional information added in your Member Profile can also be visible to the Administrator(s).
SHARING YOUR PERSONAL INFORMATION
We share your Personal Information with the third party, Google Analytics to help us understand how our customers use the Site–you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
When logging into this website, users with the role or higher may have their IP address transmitted to one of the following 3rd-parties, depending on availability, to provide a rough estimate of their location to help prevent unauthorized access to their account: IP Info, Geobytes, GeoPlugin, and IP API.
Some forms on this site require the use of Google’s reCAPTCHA service before they can be submitted. Use of the reCAPTCHA service is subject to the Google Privacy Policy and Terms of Use.
This site is scanned for potential malware and vulnerabilities by the iThemes Site Scanner. We do not send personal information to the scanner; however, the scanner could find personal information posted publicly (such as in comments) during the scan.
Data including, but not limited to, your first name and email address is shared with email marketing service ConvertKit and payment gateway services (Paypal).
This site is part of a network of sites that protect against distributed brute force attacks. To enable this protection, the IP address of visitors attempting to log into the site is shared with a service provided by ithemes.com. For privacy policy details, please see the iThemes Privacy Policy.
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
PAYMENTS
We accept payments through PayPal. When processing payments, some of your data will be passed to PayPal, including information required to process or support the payment, such
as the purchase total and billing information.
Please see the PayPal Privacy Policy for more details.
DO NOT TRACK
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.
YOUR RIGHTS
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below. Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
DATA RETENTION
When you place an order we will maintain your Order Information for our records unless / until you ask us to delete this information.
Additionally, we store information about you for as long as your Curious Descendants Club account exists.
Security logs are retained for 60 days.
CHANGES
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at natalie@genealogystories.co.uk