Privacy Policy

1. Introduction and scope

This Privacy Policy describes how The Lemon Theory (“we,” “us,” or “our”) collects, uses, processes, and protects the personal information of users (“you,” “your,” or “users”) of our website located at www.thelemontheory.com (the “Website”).

We are committed to protecting your privacy and ensuring that your Personal Data is processed in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), and the Digital Personal Data Protection Act (DPDPA) 2023.

2. Types of personal data collected

We may collect different types of Personal Data from and about you, including:

Identifiers

• Name and contact information (email address, physical address, phone number)
• Account credentials (username, password)
• IP address and device identifiers
• Browser and device information (browser type, version, operating system)
• Unique identifiers stored in cookies

Usage data

• Information about how you interact with the Website, including pages visited, time spent on pages, and click-through data
• Search queries and search terms
• Online browsing history
• Mobile device information, including unique device identifiers and geolocation data (if you have enabled location services)

Sensitive personal information

We do not collect Sensitive Personal Information (such as financial information, precise geolocation, health information, biometric data, racial or ethnic origin, religious beliefs, or private communications) unless explicitly stated at the point of collection and with your specific consent.

Demographic / interest data

• Age, gender, and other demographic information (if voluntarily provided)
• User interests and preferences (inferred from your interactions with the Website)
• Purchase history (if applicable)

3. Methods of data collection

We collect Personal Data through the following methods:

Direct collection

• When you voluntarily provide information to us (e.g., through contact forms, newsletter sign-ups, account registration, surveys, or other submissions)
• When you communicate with us via email, phone, or other channels

Automatic collection

• Through cookies and similar tracking technologies
• Through web server logs that automatically record information generated by your use of the Website
• Through analytics providers (e.g., Google Analytics) that collect information about your use of the Website
• Through third-party advertising and marketing technologies

4. How we use your information

We collect and process Personal Data for the following purposes:

To provide and maintain our services

• To register and manage your account (if applicable)
• To provide you with the Content and services you request
• To verify your identity and prevent fraud
• To provide customer support and respond to your inquiries

To improve our services

• To analyze and understand how you use our Website
• To evaluate and improve our Content, products, and services
• To develop new features and functionalities
• To conduct research and analysis

For marketing and communications

• To send you promotional communications (with your consent)
• To personalize your experience on our Website
• To deliver targeted advertising (with your consent)
• To measure the effectiveness of our marketing campaigns

5. Legal basis for processing

Under applicable data protection laws, we process Personal Data on the following legal bases:

• Consent: When you have given explicit consent to the processing of your Personal Data for a specific purpose.
• Legitimate Interests: When necessary for our legitimate interests in providing and improving our services, provided that these interests are not overridden by your rights and freedoms.
• Contractual Necessity: When necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legal Compliance: When necessary to comply with our legal obligations.

6. Data sharing and disclosure

We may share your Personal Data with the following categories of recipients:

Service providers

We engage third-party companies and individuals to perform functions on our behalf, such as:

• Website hosting and maintenance
• Data analysis
• Customer service
• Marketing and advertising
• Payment processing (if applicable)

These service providers have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Business transfers

We may share or transfer your Personal Data in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Legal requirements

We may disclose your Personal Data if we believe that disclosure is necessary:

• To comply with applicable laws, regulations, or legal processes
• To respond to lawful requests and public authorities (including to meet national security or law enforcement requirements)
• To protect and defend our rights, property, or safety, or that of our users or the public
• To detect, prevent, or otherwise address fraud, security, or technical issues

7. Your rights and choices

Depending on your jurisdiction, you may have the following rights regarding your Personal Data:

• Right to Access: Request a copy of the Personal Data we hold about you
• Right to Rectification/Correction: Request that we correct or update inaccurate or incomplete Personal Data
• Right to Deletion/Erasure (“Right to be Forgotten”): Request that we delete your Personal Data, subject to certain exceptions
• Right to Opt-Out of Sale/Sharing: If you are a California resident, you have the right to opt-out of the sale or sharing of your personal information
• Right to Limit Use of Sensitive Personal Information: If you are a California resident and we collect sensitive personal information, you have the right to limit our use of that information
• Right to Object/Restrict Processing: Object to or restrict certain types of processing of your Personal Data, particularly processing for direct marketing purposes
• Right to Data Portability: Receive a copy of your Personal Data in a structured, commonly used, and machine-readable format
• Right to Withdraw Consent: Where we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within the timeframe required by applicable law.

8. Data security

We implement appropriate technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure Sockets Layer (SSL) encryption for data transmission
• Encryption of sensitive data at rest
• Secure password storage and authentication mechanisms
• Regular security assessments and vulnerability testing
• Access controls to limit who can access your Personal Data
• Employee training on data protection practices

Despite these measures, no internet transmission or electronic storage is completely secure. While we strive to protect your Personal Data, we cannot guarantee its absolute security.

9. Data retention

We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period, we consider:

• The amount, nature, and sensitivity of the Personal Data
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process your Personal Data
• The applicable legal requirements

When we no longer need your Personal Data, we will securely delete or anonymize it.

10. Policy updates

We may update this Privacy Policy from time to time to reflect changes in our data practices or applicable laws. When we make changes, we will:

• Revise the “Last Updated” date at the top of this Privacy Policy
• Notify you by email or through a prominent notice on our Website if the changes are material
• Obtain your consent if required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your Personal Data.

11. Contact us

If you have any questions about this Privacy Policy or concerns about how we handle your Personal Data, please contact our designated privacy contact:

We will investigate and attempt to resolve your complaint promptly and in accordance with applicable laws. If you are not satisfied with our response, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.