Privacy Policy - greenduhks

This Privacy Policy (“Policy”) sets forth the principles and practices of greenduhks.com (“we,” “our,” or “us”) regarding the collection, processing, storage, and protection of personal data. We are committed to maintaining your privacy and protecting your personal information in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). By accessing or using greenduhks.com (the “Website”), you acknowledge and accept the terms of this Privacy Policy.

1. Commitment to Privacy and Data Protection

Your privacy is important to us. We adhere to a privacy-first approach and implement appropriate legal, technical, and organizational measures to ensure that your personal data is handled responsibly and securely. We strive to limit data collection to only what is necessary, and to provide full transparency on how we manage your personal information.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all visitors, users, and others who interact with the Website. We, as the data controller (as defined under GDPR), determine the purposes and means of the processing of your personal data collected through greenduhks.com. If you have any questions regarding this Policy or your data, you may contact us at [email protected].

This Policy does not apply to third-party websites, platforms, or services accessed through greenduhks.com. Please refer to those third parties’ privacy policies for information on how they handle data.

3. Categories of Data We Process

Depending on your interaction with the Website, we may process the following categories of personal data:

a) Usage Data
Includes data about how you use the Website, such as your IP address, browser type and version, time zone setting, referring URLs, clickstream data, and session metadata.

b) Account Data
Includes identifying information voluntarily provided by you when creating an account or placing an order, such as your full name, email address, billing address, phone number, and shipping address.

c) Profile Data
Includes preferences, interests, order history, saved items, behavior on the Website, and demographic data.

d) Communication Data
Includes email correspondence, customer support queries, chat history, and contact forms submitted via greenduhks.com.

e) Technical Data
Includes device model, operating system, browser plugins, system and performance settings, screen resolution, and error reports.

f) Transaction Data
Includes payment method details (processed securely via third-party processors), purchase history, delivery records, and invoice information.

g) Preference Data
Includes your choices regarding newsletters, marketing communications, promotional offers, product or service interests, and cookie consent preferences.

4. Legal Bases for Processing

Under GDPR, we rely on the following legal grounds to process your personal data:

– Consent: Where you have provided explicit consent (e.g., newsletter subscriptions, cookies).
– Contract: Where processing is necessary for the performance of a contract with you (e.g., order fulfillment).
– Legal Obligation: Where processing is necessary to comply with applicable laws.
– Legitimate Interests: For functionalities necessary to operate, secure, and improve greenduhks.com, provided that such interests are not overridden by your rights and freedoms.

5. Your Rights

Subject to applicable laws, you have the following rights with respect to your personal data:

– Right of Access: You may request confirmation of whether we process your data and obtain copies.
– Right to Rectification: You may request correction of inaccurate or incomplete data.
– Right to Erasure: You may request deletion of your data under certain conditions.
– Right to Restriction: You may request limited use of your data under specific circumstances.
– Right to Data Portability: You may request your data in a machine-readable format.
– Right to Object: You may object to processing based on our legitimate interests.
– Right to Withdraw Consent: You may withdraw consent at any time, without affecting prior lawful processing.

To exercise these rights, contact us at [email protected] with a clear description of your request.

6. Security Measures

We implement commercially reasonable, industry-standard technical and organizational safeguards to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

– Encryption during transit and storage
– Access controls and authentication protocols
– Regular system audits and vulnerability testing
– Data minimization and pseudonymization practices
– Secure backup and storage systems
– Staff privacy training and security awareness programs

7. International Data Transfers

If you are located outside of the region where processing occurs, your data may be transferred to countries that may not offer the same level of protection. When we transfer data internationally, we implement safeguards such as the European Commission’s Standard Contractual Clauses or other approved mechanisms to ensure lawful and secure transfers.

8. Data Retention

We retain personal data only as long as necessary for legitimate business purposes or as required by law. Retention periods are determined based on the category of data:

– Usage and Technical Data: Retained for 12 months for analytics and troubleshooting.
– Account and Profile Data: Retained while your account remains active, and for 6 years thereafter if required for regulatory compliance.
– Transaction Data: Retained for up to 7 years to comply with tax and accounting laws.
– Communication Data: Retained for 2 years for quality and dispute resolution purposes.
– Preference Data: Retained for as long as marketing consent is valid, or until withdrawn.

Upon expiry of these periods, data is securely deleted or anonymized.

9. Cookie Policy

greenduhks.com uses cookies and similar technologies to enhance your browsing experience and collect usage data. Cookies fall into the following categories:

– Essential Cookies: Necessary for basic website operations and user sessions.
– Functional Cookies: Enable personalized features such as remembering your preferences.
– Analytics Cookies: Help monitor website performance and user behavior trends.
– Performance Cookies: Measure system performance and user interface optimization.

10. Cookie Management and Compliance

Upon your first visit, a cookie banner will prompt you to accept or adjust your cookie preferences. You can withdraw or modify consent at any time via our Cookie Settings page or by adjusting your browser settings. Where required by GDPR or CCPA, we obtain explicit opt-in consent before placing non-essential cookies.

Under CCPA, California residents may opt out of the “sale” of personal data (as defined under CCPA). We do not sell personal data in the conventional sense but may share data with service providers under strict contractual controls.

11. Special Protections for Children

greenduhks.com is not intended for, nor do we knowingly collect information from, individuals under the age of 13. If you believe that a child under the age of 13 has provided us with personal information, please contact us immediately at [email protected] so we can take appropriate action.

12. Policy Updates and Notifications

We reserve the right to update this Privacy Policy from time to time in response to legal, regulatory, or operational changes. Updates will be prominently posted on our Website, and where appropriate, you will be notified via email or website notification.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us at:

Email: [email protected]

We are committed to upholding your privacy rights and ensuring that greenduhks.com remains a secure and transparent platform for all users.

This Privacy Policy reflects our commitment to compliance with applicable data protection regulations and our responsibility to protect your personal information. If you have concerns about how your data is handled, we encourage you to contact us directly.