GDPR Compliance
- Data Collection and Use: We collect and process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. Personal data may be collected when you browse the Website, register an account, place an order, or interact with us through various channels.
- Types of Data Collected: The types of personal data we may collect include but are not limited to:
- Contact information (e.g., name, email address, phone number)
- Billing and shipping address
- Payment details
- User preferences and account settings
- Communications and interactions with us
- Purpose of Data Processing: We collect and process personal data for the following purposes:
- Fulfilling orders and providing customer support
- Processing payments and managing transactions
- Personalizing user experience and improving our services
- Sending promotional offers, newsletters, and marketing communications (with your consent)
- Complying with legal obligations and protecting our rights
- Legal Basis for Processing: We process personal data on the following legal bases:
- Performance of a contract: To fulfill our obligations under the terms and conditions and provide requested products and services.
- Consent: For purposes such as sending marketing communications, where required by applicable law.
- Legitimate interests: To pursue our legitimate interests, such as improving our services and preventing fraud.
- Data Retention: We retain personal data for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. Upon expiration of the retention period, we securely delete or anonymize the data.
- Data Security: We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is entirely secure, and we cannot guarantee absolute security.
- Data Sharing and Disclosure: We may share personal data with third-party service providers and partners who assist us in operating the Website, processing payments, delivering products, or conducting marketing activities. We ensure that such third parties are contractually obligated to process personal data only for specified purposes and in accordance with applicable data protection laws.
- Your Rights: Under the GDPR, you have certain rights regarding your personal data, including the right to access, rectify, erase, restrict processing, object to processing, and data portability. To exercise these rights or inquire about your personal data, please contact us using the contact information provided below.
- Updates to Privacy Policy: We reserve the right to update or modify our privacy policy from time to time to reflect changes in our data processing practices or legal requirements. Any updates will be posted on the Website, and your continued use of the Website after the posting of changes constitutes acceptance of such changes.
- Contact Information: If you have any questions, concerns, or requests regarding our data processing practices or privacy policy, please contact us at mail@hevergreen.com
