Privacy Policy

1. Introduction

Whale Bone Magazine (“we,” “us,” or “our”), operated by WhaleBone Media LLC, a Delaware limited liability company, is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website whalebonemag.com (the “Site”).

This policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide

• Contact information (name, email address) when you use our contact form
• Communication data when you correspond with us
• Any other information you voluntarily submit through the Site

3.2 Information Collected Automatically

• Device information (browser type, operating system, device type)
• Log data (IP address, access times, pages viewed, referring URLs)
• Cookies and similar tracking technologies (see Section 8)
• Approximate geographic location derived from IP address

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

• Consent (Article 6(1)(a) GDPR): Where you have given clear consent for us to process your personal data for a specific purpose, such as subscribing to communications or accepting non-essential cookies.
• Legitimate Interests (Article 6(1)(f) GDPR): Where processing is necessary for our legitimate interests, such as improving our Site, analyzing usage patterns, and ensuring security, provided these interests are not overridden by your rights.
• Contract Performance (Article 6(1)(b) GDPR): Where processing is necessary to respond to your inquiries or provide services you have requested.
• Legal Obligation (Article 6(1)(c) GDPR): Where processing is necessary to comply with a legal obligation to which we are subject.

5. How We Use Your Information

• To operate, maintain, and improve the Site
• To respond to your inquiries and communication
• To analyze usage trends and optimize user experience
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our terms
• To send periodic communications if you have opted in

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party vendors who perform services on our behalf (hosting, analytics, email delivery), bound by contractual obligations to protect your data.
• Analytics Partners: Tools such as Google Analytics that help us understand Site usage. These partners process data in accordance with their own privacy policies.
• Legal Authorities: When required by law, regulation, or legal process, or to protect our rights, privacy, safety, or property.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, where personal data may be transferred as a business asset.

7. International Data Transfers

Your data may be transferred to and processed in the United States or other countries outside the European Economic Area (EEA). When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, or reliance on the recipient’s participation in an approved transfer mechanism.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. Categories include:

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Site functionality.

9. Your Rights

9.1 Rights Under GDPR (EEA Residents)

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

9.2 Rights Under CCPA (California Residents)

• Right to know what personal information is collected, used, and shared
• Right to delete personal information held by us
• Right to opt out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at privacy@whalebonemag.com. We will respond within 30 days (GDPR) or 45 days (CCPA).

10. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:

• Contact form submissions: 2 years from last communication
• Analytics data: 26 months
• Server logs: 90 days

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/SSL), secure hosting infrastructure, access controls, and regular security assessments. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children’s Privacy

The Site is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at privacy@whalebonemag.com.

13. Third-Party Links

The Site contains links to third-party websites, including sweepstakes casino platforms and responsible gambling resources. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party site you visit.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, or legal requirements. The “Last updated” date at the top indicates when the most recent revision was published. We encourage you to review this policy regularly. Continued use of the Site following changes constitutes acceptance of the updated policy.

15. Contact Us

For questions or concerns about this Privacy Policy or our data practices, contact us:

For GDPR-related inquiries, you may also contact your local data protection authority.