GDPR Compliance

Collection of Personal Information

We collect personal information only with the explicit consent of our users. The information collected may include, but is not limited to:

  • Name: For identification and personalized communication.
  • Address: For shipping and billing purposes.
  • Email: To send order confirmations, updates, and marketing materials (with consent).
  • Phone Number: For order-related inquiries and customer support.
  • Payment Details: To process transactions securely.

Use of Personal Information

We utilize personal information to:

  • Process Orders: Ensure accurate and timely delivery of products.
  • Provide Customer Support: Assist with inquiries, complaints, and support requests.
  • Improve Services: Analyze user behavior to enhance our website and offerings.
  • Marketing Communications: Send newsletters, promotions, and updates, only with prior consent. We ensure that personal data is used solely for specified and legitimate purposes and is not further processed in a manner incompatible with those purposes.

Sharing of Personal Information

We do not share personal information with third parties without explicit consent, except as required by law. When sharing information with third-party service providers (e.g., shipping companies, payment processors), we:

  • Ensure Adequate Protection: Enter into contracts that mandate protection measures equivalent to those we employ.
  • Limit Disclosure: Share only the necessary information to perform the services.

Storage and Protection of Personal Information

We store personal information only for as long as necessary to fulfill the purposes for which it was collected. We implement robust security measures, including:

  • Technical Safeguards: Encryption, secure servers, and firewalls.
  • Organizational Safeguards: Restricted access, staff training, and confidentiality agreements.

Rights of Individuals

Under the GDPR, individuals have the following rights:

  • Access: Request access to their personal information.
  • Correction: Correct inaccuracies in their personal information.
  • Erasure: Request deletion of their personal information (the "right to be forgotten").
  • Restriction: Restrict processing of their personal information.
  • Data Portability: Receive their personal information in a structured, commonly used, and machine-readable format.
  • Objection: Object to the processing of their personal information for specific purposes.
  • Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  • Complaint: Lodge a complaint with a supervisory authority.