Privacy policy
PRIVACY POLICY
1 - COLLECTION OF PERSONAL DATA
When you make a purchase on our webshop, as part of our buying and selling process, we collect personal information you provide to us, such as your name, address, and email address.
When you browse our webshop, we also automatically receive your computer's Internet Protocol (IP) address, which allows us to obtain more details about the browser and operating system you are using.
1.1. Marketing:
With your consent, we may send you emails about our webshop, our products, and other updates about your purchases, such as satisfaction surveys or discount codes for special promotions.
2 - CONSENT
2.1. How we obtain consent
When you provide us with your personal information to complete a transaction, verify your credit card, place an order, schedule a delivery, or return a purchase, we
assume that you consent to our keeping your data but only for these purposes and using it.
If we ask you to provide your personal information for other reasons, such as for marketing purposes, we will ask for your explicit consent directly or give you the opportunity to refuse.
2.2. Withdrawing consent
If, after initially giving us consent to contact you, you wish to withdraw your consent for us to contact you, you can contact us via our customer service by phone or email at info@cbdorigin.be or by mail at: CBD Origin, Ringlaan 35, 8480 Ichtegem, Belgium.
2.3. Disclosure of data
We may disclose your personal data if we are legally required to do so or if you violate our Terms and Conditions.
3 - SHOPIFY
Our store is hosted on the Shopify platform. This platform allows us to sell our products and services to you.
Your data is stored in Shopify's data storage system and databases and in the general Shopify application. Your data is stored on a secure server protected by a firewall.
3.1. Credit card data
If you make your purchase via a direct payment gateway, Shopify stores your credit card data in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is retained as long as necessary to complete your order. Once your order is complete, your purchase transaction data is deleted. All direct payment gateways are PCI-DSS compliant, managed by the PCI Security Standards Council, a joint effort of companies such as Visa, MasterCard, American Express, and Discover. The PCI-DSS standard requirements ensure the secure processing of credit card data by our store and its service providers. For more information, see WooCommerce's Terms of Service here or Privacy Policy here.
4 - THIRD-PARTY SERVICES
In general, the third-party providers we use only collect, use, and disclose your information to the extent necessary to perform the services they provide to us.
However, some external service providers, such as payment gateways and other payment transaction processors, have their own privacy policies regarding the information we need to provide them for your purchase transactions.
For these providers, we recommend that you read their privacy policies carefully so that you understand how they handle your personal data. It is important to remember that some providers may be located or have facilities in a different jurisdiction than yours or ours.
If you choose to proceed with a transaction involving the services of a third-party provider, your data may therefore fall under the laws of the jurisdiction in which that provider is located or where its facilities are situated.
For example, if you are located in Canada and your transaction is processed through a payment gateway in the United States, your information used to complete the transaction may be disclosed under U.S. law, including the Patriot Act.
Once you leave our store site or are redirected to a third-party website or application, you are no longer subject to this Privacy Policy or the Terms and Conditions of our website.
4.1. External links
You may leave our site by clicking on certain links on our site. We are not responsible for the privacy policies of these other sites and recommend that you read their privacy policies carefully.
5 - SECURITY
To protect your personal data, we take reasonable precautions and follow industry best practices to ensure that it is not lost, stolen, accessed, disclosed, altered, or destroyed.
If you provide us with your credit card data, it is encrypted using SSL security protocol and stored with AES-256 encryption.
Although no method of transmission over the Internet or electronic storage is 100% secure, we comply with all PCI-DSS requirements and apply additional generally accepted industry standards.
6 - COOKIES
Here is a list of the cookies we use. We have listed them here so you can choose whether or not to accept them. Shopify uses various cookies to ensure that their e-commerce platform functions properly and provides a good user experience.
1. **_shopify_fs**
- **Purpose**: Used to store data about the user's first session, such as when the visitor's first session on the webshop began.
- **Duration**: 2 years
2. **_shopify_s**
- **Purpose**: Stores a temporary session ID to track data about the visitor's session.
- **Duration**: 30 minutes
3. **_shopify_d**
- **Purpose**: Stores data about the session and is used to identify returning visitors.
- **Duration**: 1 year
4. **_shopify_y**
- **Purpose**: Stores information about the session and is used for analysis and tracking.
- **Duration**: 1 year
5. **_secure_session_id**
- **Purpose**: Maintains a unique session ID for secure sessions.
- **Duration**: Until the end of the session
6. **_shopify_y**
- **Purpose**: Contains a unique identifier used by Shopify for analytics and tracking purposes.
- **Duration**: 1 year
7. **_shopify_p**
- **Purpose**: Used to store payment information and cart information for enhanced user experiences.
- **Duration**: Until the end of the session
8. **_shopify_sa_t**
- **Purpose**: Used for Shopify’s marketing and analytics purposes.
- **Duration**: 30 minutes
9. **_shopify_m**
- **Purpose**: Stores information for a marketing campaign and tracking.
- **Duration**: 1 year
These cookies are essential for the functioning of a Shopify store and improve your user experience by allowing session management, purchase tracking, and data analysis.
7 - AGE OF MAJORITY
By using this site, you affirm that you are at least of legal age in the state, country, or province where you reside.
8 - CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
9 - QUESTIONS AND CONTACT DETAILS
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our customer service at info@cbdorigin.be.