GDPR Compliance

1. Introduction

This document outlines the General Data Protection Regulation (GDPR) compliance efforts of Orange County CBD, a website accessible at https://orangecounty-cbd.com/. The GDPR is a regulation in UK law on data protection and privacy, and this document aims to inform users about the collection, processing, and protection of their personal data.

2. Data Controller

The data controller for the processing of personal data on the website is:

Orange County CBD

Suite 78, 4 Montpelier Street, Knightsbridge

London

SW7 1EE

United Kingdom

support@orangecounty-cbd.com

3. Types of Data Collected

Orange County CBD may collect and process the following types of personal data:

Contact Information (e.g., name, email address)

Payment Information (if applicable)

Website Usage Data (e.g., IP addresses, browser information)

Other Information provided voluntarily by the user

4. Purpose of Data Processing

Personal data is collected and processed for the following purposes:

Order Processing and Fulfillment

Customer Support

Marketing and Promotions (with user consent)

Website Analytics

5. Legal Basis for Processing

Orange County CBD processes personal data based on one or more legal grounds as defined in the GDPR, including the necessity of processing for the performance of a contract, compliance with a legal obligation, protection of vital interests, consent, the performance of a task carried out in the public interest or the exercise of official authority, and legitimate interests pursued by the data controller.

6. Data Subject Rights

Users have the following rights regarding their personal data:

Right to Access

Right to Rectification

Right to Erasure

Right to Restriction of Processing

Right to Data Portability

Right to Object

Rights related to Automated Decision Making and Profiling

To exercise these rights, users can contact Orange County CBD through the provided contact information.

7. Data Security Measures

Orange County CBD employs appropriate technical and organisational measures to ensure the security of personal data. These measures include encryption, access controls, and regular security assessments.

8. Data Breach Notification

In the event of a data breach that may result in a risk to the rights and freedoms of individuals, Orange County CBD will notify the relevant supervisory authority and affected data subjects in accordance with GDPR requirements.

9. Changes to the Privacy Policy

Orange County CBD reserves the right to update this GDPR compliance document. Users will be notified of any changes, and the latest version will be available on the website.

10. Contact Information

For questions, concerns, or requests related to GDPR compliance, please contact:

support@orangecounty-cbd.com