Effective Date: 2024

Shroom Boost Bars is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, store, use, share, and protect the personal information of our users in compliance with the General Data Protection Regulation (GDPR) and other applicable data privacy laws. By using our website and services, you agree to the terms outlined in this policy.

Information We Collect

Personal Data: When you make a purchase, register, or otherwise interact with our website, we may collect personal information such as your:

  • Name
  • Email address
  • Postal address
  • Payment information
  • IP address

Usage Data: We may automatically collect certain information about how you interact with our website, including:

  • Browser type and version
  • Device type and operating system
  • Pages you visit, and time spent on each page
  • Referring website URLs
  • Other diagnostic data for analysis and site improvement purposes

How We Use Your Information

We use your personal data for the following purposes:

  • Order Processing and Fulfillment: To process payments, ship products, and handle customer support.
  • Communication: To contact you regarding orders, customer inquiries, product updates, and marketing, if you have opted into marketing communications.
  • Website Improvement: To analyze usage patterns and improve the functionality and performance of our website.
  • Legal Compliance: To comply with legal obligations, respond to legal requests, and protect our rights and interests.

Legal Basis for Data Processing

Under the GDPR, we rely on the following legal grounds for processing your data:

  • Contractual Necessity: To process orders and fulfill our contractual obligations to you.
  • Consent: When you provide consent to receive marketing emails or participate in other optional services.
  • Legitimate Interests: To improve our services, prevent fraud, and ensure site security.
  • Legal Obligation: To comply with legal and regulatory requirements.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Data related to your orders and transactions will generally be retained for a minimum period required by applicable law, typically five years, to comply with financial and legal record-keeping obligations.

Data Sharing and Disclosure

We will not sell, rent, or lease your personal data. However, we may share your information with:

  • Service Providers: Third-party vendors who assist us with payment processing, order fulfillment, customer support, and website analytics. We ensure these providers comply with GDPR by entering into data processing agreements with them.
  • Legal Requirements: Law enforcement or governmental bodies, if required to comply with applicable law, regulation, or a valid legal process.
  • Business Transfers: In the event of a merger, acquisition, or asset sale, where personal data is among the assets transferred. We will notify you and ensure data protection in accordance with this policy.

Security Measures

We are committed to ensuring the security of your personal data. To prevent unauthorized access, alteration, disclosure, or destruction, we implement appropriate technical and organizational security measures including:

  • Data Encryption: Using encryption protocols to protect data transmitted to and from our website.
  • Access Control: Limiting access to personal data to authorized employees and third parties under strict confidentiality agreements.
  • Regular Security Audits: Conducting regular reviews of our data collection, storage, and processing practices to ensure data protection standards.

Despite our efforts, no security measure is entirely foolproof, and we cannot guarantee the absolute security of your data.

Your Rights Under GDPR

Under GDPR, you have specific rights regarding your personal data:

  • Right to Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You have the right to request corrections if your information is inaccurate or incomplete.
  • Right to Erasure (“Right to be Forgotten”): You may request deletion of your personal data under certain circumstances, subject to legal exceptions.
  • Right to Restrict Processing: You may ask us to restrict processing of your data in certain situations.
  • Right to Data Portability: You may request your data in a structured, machine-readable format, or have it transferred to another data controller.
  • Right to Object: You may object to processing based on legitimate interests, direct marketing, and profiling.
  • Right to Withdraw Consent: If processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise these rights, please contact us at info@shroomboostbars.com. We will respond within 30 days as required under GDPR. Note that some requests may be subject to identity verification for security purposes.

Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience, analyze website usage, and provide relevant marketing. Cookies are small files placed on your device that enable us to recognize your browser and capture certain information. You may choose to disable cookies through your browser settings; however, this may limit some functionalities of our website.

Third-Party Links

Our website may contain links to third-party websites or services that are not operated by us. We have no control over, and are not responsible for, the privacy practices or content of these third-party sites. We encourage you to review their privacy policies before providing any personal data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make significant changes, we will notify you via email (if you have provided it) or by posting an updated version on our website with a revised effective date.

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at:

Shroom Boost Bars
Bellingham, Washington
Email: info@shroomboostbars.com

Thank you for trusting Shroom Boost Bars with your personal data. We are committed to protecting your privacy and providing a safe online experience.