GDPR Compliance
1. Introduction
This document outlines the General Data Protection Regulation (GDPR) compliance efforts of Orange County CBD, a website accessible at https://orangecounty-cbd.com/. The GDPR is a regulation in UK law on data protection and privacy, and this document aims to inform users about the collection, processing, and protection of their personal data.
2. Data Controller
The data controller for the processing of personal data on the website is:
Orange County CBD
Suite 78, 4 Montpelier Street, Knightsbridge
London
SW7 1EE
United Kingdom
support@orangecounty-cbd.com
3. Types of Data Collected
Orange County CBD may collect and process the following types of personal data:
Contact Information (e.g., name, email address)
Payment Information (if applicable)
Website Usage Data (e.g., IP addresses, browser information)
Other Information provided voluntarily by the user
4. Purpose of Data Processing
Personal data is collected and processed for the following purposes:
Order Processing and Fulfillment
Customer Support
Marketing and Promotions (with user consent)
Website Analytics
5. Legal Basis for Processing
Orange County CBD processes personal data based on one or more legal grounds as defined in the GDPR, including the necessity of processing for the performance of a contract, compliance with a legal obligation, protection of vital interests, consent, the performance of a task carried out in the public interest or the exercise of official authority, and legitimate interests pursued by the data controller.
6. Data Subject Rights
Users have the following rights regarding their personal data:
Right to Access
Right to Rectification
Right to Erasure
Right to Restriction of Processing
Right to Data Portability
Right to Object
Rights related to Automated Decision Making and Profiling
To exercise these rights, users can contact Orange County CBD through the provided contact information.
7. Data Security Measures
Orange County CBD employs appropriate technical and organisational measures to ensure the security of personal data. These measures include encryption, access controls, and regular security assessments.
8. Data Breach Notification
In the event of a data breach that may result in a risk to the rights and freedoms of individuals, Orange County CBD will notify the relevant supervisory authority and affected data subjects in accordance with GDPR requirements.
9. Changes to the Privacy Policy
Orange County CBD reserves the right to update this GDPR compliance document. Users will be notified of any changes, and the latest version will be available on the website.
10. Contact Information
For questions, concerns, or requests related to GDPR compliance, please contact:
support@orangecounty-cbd.com