Privacy Policy for eatcrispgreens.com

1. Introduction

At eatcrispgreens.com, we are committed to protecting your personal data and respecting your privacy. We believe in transparency, security, and control, and this commitment underpins all our data processing activities. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act of 2018 (“CCPA”), as amended.

2. Scope of This Privacy Policy and Data Controller Role

This Privacy Policy applies to all users of our website eatcrispgreens.com and any other online platform or mobile application controlled or operated by us that links to this policy. The data controller responsible for your personal data is eatcrispgreens.com. If you have questions or concerns regarding the use of your data, you may contact us via email at [email protected].

3. Categories of Data Processed

We collect and process various categories of personal information, as defined below:

a. Usage Data: Information automatically collected when you visit eatcrispgreens.com, including your browser type, IP address, access times, page views, referring URLs, and session behavior.

b. Account Data: Information you provide when creating or updating an account, such as your full name, email address, mailing address, and telephone number.

c. Profile Data: Details about your preferences, shopping behavior, dietary choices, and product interests, as collected through surveys, purchases, or interaction with our website.

d. Communication Data: Records of communications with us, including emails, chat messages, customer support inquiries, and other forms of correspondence.

e. Technical Data: Device-related data such as your operating system, device type, system settings, language preferences, and mobile network information.

f. Transaction Data: Information related to your purchases, including order details, payment methods, billing and delivery addresses, and transaction history.

g. Preference Data: Your preferences regarding marketing communications, dietary habits, subscription settings, and promotional opt-ins or opt-outs.

4. Legal Bases for Processing

We process your personal data under various legal bases:

– Consent: When you have given clear consent for us to process your personal data (e.g., for marketing communications).
– Contractual Necessity: When processing is necessary to fulfill a contract with you or provide services requested by you (e.g., fulfilling an order).
– Legal Obligation: Where we are required by law to process personal data (e.g., tax and accounting records).
– Legitimate Interest: Where necessary for our business purposes, such as improving our services, ensuring website security, or analyzing usage behavior, provided such interests are not overridden by your fundamental rights and freedoms.

5. Your Rights

As a data subject under the GDPR and a consumer under the CCPA, you are entitled to the following rights, subject to applicable limitations:

– Right of Access: You may request access to the personal data we hold about you.
– Right to Rectification: You may request correction of inaccurate or incomplete personal data.
– Right to Erasure: You may request deletion of your personal data, subject to certain conditions.
– Right to Restrict Processing: You may request that we limit how we use your personal information.
– Right to Data Portability: You may request your personal data in a structured, commonly used format and transfer it to another controller.
– Right to Object (GDPR): You may object to data processing based on legitimate interests or direct marketing.
– Right to Opt Out (CCPA): California residents may request to opt out of the “sale” (as legally defined) of their personal data.

To exercise any of these rights, you may contact us at [email protected].

6. Security Measures

We implement appropriate technical and organizational safeguards to protect your personal data against unauthorized access, accidental loss, destruction, or damage. These include:

– Encryption for data in transit and at rest
– Access controls and authentication protocols
– Regular data backups and disaster recovery solutions
– Employee training on data protection and privacy principles
– Secure data storage and restricted system access

7. International Data Transfers

Your personal data may be transferred to and stored in countries outside of your jurisdiction, including locations where data protection laws may differ from those in your home country. In such cases, we apply appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure a level of protection equivalent to EU standards.

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including:

– Usage Data: Up to 12 months for analytical purposes
– Account Data: Retained while your account is active and for up to 6 years thereafter
– Profile and Preference Data: As long as you remain an engaged user or until consent is withdrawn
– Communication Data: Up to 3 years after the last interaction
– Transaction Data: 6 years for tax and legal compliance
– Technical Data: Up to 24 months, aggregated for performance optimization

Data will be securely deleted following the expiration of the applicable retention period.

9. Cookie Policy

Our website uses cookies and similar technologies to enhance your browsing experience and provide essential functionality. We categorize cookies into four main types:

– Essential Cookies: Required for website functionality such as login, shopping cart, and protecting forms.
– Functional Cookies: Enable personalization and remember your preferences.
– Analytics Cookies: Collect statistical data to help us understand website usage and improve performance.
– Performance and Advertising Cookies: Help us provide relevant marketing messages and measure campaign effectiveness.

10. Cookie Management and Compliance

Upon your first visit to eatcrispgreens.com, you will be presented with a cookie consent banner that allows you to customize your cookie preferences in alignment with GDPR and CCPA regulations. You may withdraw or modify your consent at any time through your browser settings or the “Cookie Settings” link available on our website. CCPA-covered users also have the right to opt out of the use of cookies designated as a “sale.”

11. Children’s Privacy

eatcrispgreens.com does not knowingly collect or solicit personal data from children under the age of 13. If we learn that we have collected such data, we will promptly delete it. If a parent or guardian believes that their child has provided us with information, they may contact us at [email protected].

12. Updates to This Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in legal requirements, our services, or data processing practices. Where legally required, we will notify you of material changes and provide an opportunity to review them before they take effect. Continued use of eatcrispgreens.com implies acceptance of the updated terms.

13. Contact

For questions regarding this Privacy Policy or your personal data, or to exercise your rights under applicable laws, please contact us at:

Email: [email protected]

We are committed to full compliance with data protection laws and to assisting our users in understanding and managing their privacy rights.