Afro Veggie USA GDPR Compliance Statement

Last Updated: June 29, 2024

This statement outlines our compliance with the General Data Protection Regulation (GDPR) for residents of the European Economic Area (EEA). While our primary operations are within the United States, we are committed to high standards of data protection for all our customers.

1. Lawful Basis for Processing

We process personal data from you on one or more of the following legal bases:

  • To Perform a Contract: We process your personal data to fulfill our contractual obligation to deliver the products you purchase.
  • Legitimate Interests: We may process your data when we have a legitimate interest, such as for fraud prevention or to maintain the security of our website.
  • Consent: We will not process your data for marketing purposes. Any processing beyond order fulfillment would require your explicit consent.

2. Data Controller

Afro Veggie USA is the data controller for the personal information collected through our website, https://afroveggieusa.com/.

3. Your Rights Under GDPR

If you are a resident of the EEA, you have the following data protection rights:

  • The right to access: You have the right to request copies of your personal data.
  • The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
  • The right to erasure (The “right to be forgotten”): You have the right to request that we erase your personal data, under certain conditions.
  • The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
  • The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

4. Data Transfers

Our business is located in the United States. Information we collect is processed in the US. Our payment processor, Stripe, may transfer and process data internationally as described in their own privacy policies. We ensure that such transfers are protected by appropriate safeguards.

5. Contacting Us and Exercising Your Rights

To exercise any of these rights, please contact us. We will respond to your request within one month.