Introduction

Greenleaf Blends ("the Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy will explain how we collect, use, and protect your personal data when you visit or interact with our website and services, in compliance with the General Data Protection Regulation (GDPR) and Dutch privacy laws.

Information We Collect

We may collect the following types of information:

• Personal Information: This includes details such as your name, address, email address, phone number, and payment information when you make purchases, sign up for newsletters, or participate in promotions or events.
• Automatic Data Collection: We collect non-personal information through cookies and similar technologies, including details like your IP address, browser type, device model, and interactions with our website.
• Third-Party Sources: We may receive information about you from third-party platforms, social media, or business partners, subject to your privacy settings on those platforms.

How We Use Your Information

We use your information for the following purposes:

• Processing orders and payments
• Providing personalized shopping experiences
• Sending newsletters, promotional offers, and updates (with your consent)
• Improving our website and services
• Safeguarding the security of our website
• Complying with legal obligations
• Conducting data analysis and usage tracking
• Providing customer support
  
  

Legal Bases for Processing Your Data

Under the GDPR, we process your personal data based on the following legal grounds:

• Consent: We will seek your consent before sending marketing emails or processing sensitive personal data.
• Contract: We process your data to fulfill a contract, such as processing your purchases.
• Legitimate Interest: We may process your data when we have a legitimate business interest, such as improving our website and service.
• Legal Obligation: To comply with tax, accounting, and other legal duties.

Your Rights

As a resident of the European Union, you have the following rights under the GDPR:

• Right to Access: You can request access to the personal data we hold about you.
• Right to Rectification: You have the right to request corrections to any incorrect or incomplete personal data.
• Right to Erasure: You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
• Right to Restrict Processing: You can request that we limit the processing of your data under certain circumstances.
• Right to Data Portability: You have the right to request that we transfer your data to another organization or directly to you.
• Right to Object: You can object to the processing of your data for direct marketing or other legitimate interests.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your data has been processed unlawfully.
• Right to Withdraw Consent – You may withdraw your consent at any time, such as by clicking an unsubscribe link in emails or by contacting us.

To exercise any of these rights, please contact us at support@greenleafblends.nl

Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, tax, or accounting requirements. Specific retention periods are as follows:

• Customer account information: 7 years after the last activity (as required by Dutch tax law)
• Marketing preferences: Until you withdraw consent or 2 years after last interaction
• Order history: 7 years (as required by Dutch tax law)
• Website logs and analytics: 26 months
• Correspondence: 2 years after last communication

Once the data is no longer required, we will securely delete or anonymize it.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website. This includes cookies that are:

• Strictly Necessary: Required for the website to function properly.
• Performance Cookies: Used to analyze site usage and improve functionality.
• Functionality Cookies: Allow personalization, such as remembering your preferences.
• Targeting Cookies: Used to deliver personalized advertisements.

When you first visit our website, you will be presented with a cookie banner allowing you to accept or decline non-essential cookies. You can change your preferences at any time through our Cookie Preference Center on our website.

You can also manage your cookie preferences through your browser settings or opt-out of certain advertising cookies using tools like the Network Advertising Initiative's opt-out page (http://www.networkadvertising.org/managing/opt_out.asp).

Data Security

We take appropriate technical and organizational measures to secure your personal data. However, no method of transmission over the internet or electronic storage is completely secure. We strive to use commercially acceptable means to protect your data but cannot guarantee its absolute security.

Third-Party Services

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

Data Transfers

Your personal data may be transferred to and stored on servers outside of the European Economic Area (EEA). We ensure that appropriate safeguards are in place to protect your data during these transfers, in line with GDPR requirements, including: **- Standard Contractual Clauses approved by the European Commission

• Only transferring data to countries with an EU adequacy decision
• Ensuring all processors and sub-processors comply with GDPR requirements**

Children's Privacy

Our website is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will delete it immediately.

Automated Decision Making and Profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you. While we may use some automated processes to personalize our marketing efforts based on browsing behavior, these do not have significant impacts on your rights and you can opt out of such processing at any time by contacting us.

Data Protection Officer

We have appointed a Data Protection Officer who is responsible for overseeing questions in relation to this privacy policy. If you have questions about how we handle your data, you can contact our DPO at:

Email: dpo@greenleaf-blends.nl
Address: Coolsingel 104, 3011AG Rotterdam

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly as soon as reasonably possible.

Privacy by Design and Impact Assessments

We implement privacy by design principles in our systems and processes. For new initiatives that may involve the processing of sensitive data or present privacy risks, we conduct Data Protection Impact Assessments (DPIAs) to ensure appropriate safeguards are in place.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. The latest version of the Privacy Policy will always be posted on our website, with the effective date clearly indicated.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Email: support@greenleafblends.com
Address: Coolsingel 104, 3011AG Rotterdam

Greenleaf Blends (part of Create Brands BV) KVK: 93396090 Coolsingel 104 3011AG Rotterdam

Last updated: April 22, 2025