Effective Date 09 may 2023
The data controller for the processing of your personal data on this Website is
Information We Collect
We may collect and process the following types of personal data
- Email address
- Postal address
- Phone number
We may collect payment information such as credit card details or other payment methods when you make a purchase on our Website. However, we do not store this information on our servers. All payment transactions are processed securely through a third-party payment processor.
We may collect information about how you use our Website, including your browsing behavior, IP address, device information, and location data.
How We Use Your Information
We use your personal data for the following purposes
- To process and fulfill your orders
- To communicate with you about your orders, inquiries, and account
- To improve our Website and user experience
- To send you marketing communications with your consent
- To comply with legal obligations
Legal Basis for Processing
We will only process your personal data when we have a legal basis to do so, which may include
- Your consent
- The necessity of processing for the performance of a contract
- Compliance with a legal obligation
- Protection of vital interests
- Legitimate interests pursued by Sunset CBD or a third party
We may share your personal data with third parties in the following circumstances
- With service providers and partners necessary for the operation of our Website and services.
- With legal authorities or government agencies to comply with legal obligations.
- With third parties when required to protect our rights, safety, or property or those of others.
Under the GDPR, you have certain rights regarding your personal data. These include
- The right to access your personal data.
- The right to correct inaccurate or incomplete data.
- The right to have your data erased (“right to be forgotten”).
- The right to restrict processing of your data.
- The right to data portability.
- The right to object to processing based on legitimate interests.
- The right not to be subject to automated decision-making, including profiling.
We take the security of your personal data seriously and have implemented appropriate technical and organizational measures to protect it.
We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.