Privacy Statement
Privacy Statement
Privacy Policy - Ultimate Seeds
To ensure a safe online environment and ensure adequate data protection, we strictly adhere to all legal requirements. In this privacy statement we provide information about how and for what purpose data is collected, security measures, retention periods and contact details.
COMPANY NAME:
Ultimate Seeds
Segment 3, 6921 RC Duiven
This privacy policy sets out the conditions under which we at Ultimate Seeds handle personal data. This includes all personal data collected via our website https://www.ultimate-seeds.com/ and all other data that we process in the context of our business activities.
Ultimate Seeds collects the following personal data for the purposes stated below:
SECTION 1 – PERSONAL INFORMATION WE COLLECT
1.1 Account purchases
Account purchases can only be made if you have a personal account. When you create an account or purchase something from our shop, we collect the following personal information that you provide to us as part of the buying and selling process:
- First and last name
- Home and billing address
- Phone number
- Gender
- IP address
- Email address
- Date of birth
This information is required for delivery. In addition, we automatically receive your computer's Internet Protocol (IP) address when you browse our shop. Based on this information we can optimize your online experience and at the same time protect our online environment.
Purpose of data collection
We collect and store account-related data for the following purposes:
(a) to fulfill obligations arising from any contracts between you and us, and to provide you with information, products and services that you request from us;
(b) to set up, manage, and communicate with you about your account and your orders;
(c) to conduct market research and analysis;
(d) to confirm your age and identity and to detect and prevent fraud.
1.2 Newsletters
With your explicit permission, we may send you newsletters about our store, new products and other updates. We send newsletters based on your explicit consent. In the event that you purchase a product, and in accordance with current regulations, we may send you commercial communications in accordance with the legitimate interest of our company, always about products or services similar to those you have purchased or contracted. In any case, you can exercise your right to object through the channels announced in this Privacy Policy. The following information is collected in relation to the newsletter:
First and last name
In order to send the newsletter, we do not need to know the gender of the person (data minimization: legally we must only request the data that is strictly necessary to provide the service, in this case it is not necessary to know the gender to send the newsletter).
Email address
Purpose of data collection
The collected data is used to:
(a) personalize our emails, including your name and gender;
(b) provide gender-specific content.
You can withdraw your consent at any time by using the link in the newsletter or via the contact details in
1.3 Customer service and contact form
In order to provide appropriate support, our customer service representatives will have access to information related to the account. This will make their support very effective and friendly. The data provided in our contact form is used by our CRM provider, SuperOffice. We only use your data to respond to your message.
SECTION 2 – LEGITIMATE INTEREST
If you have purchased one of our products, please note that we may process your personal data for promotional purposes, based on Ultimate Seeds' legitimate interest to offer you only products or services from our company and about products or services that are similar to the one you purchased. You may exercise your right to unsubscribe from receiving future communications through the means set forth in this Privacy Policy or via any notice you receive.
SECTION 3 – DISCLOSURE
We may disclose your personal information if we are required to do so by law or if you violate our Terms of Service.
SECTION 4 – HOW LONG DO WE KEEP YOUR DATA?
At Ultimate Seeds we do not store your data for longer than is necessary for the purposes described in this policy. Different retention periods apply to different types of data; however, the longest period for which we normally retain personal data is 10 years.
4.1 Account information
Data relating to the account remains relevant as long as the consumer is in possession of an account. Therefore, the data remains documented as long as the account exists. When our customers delete an account, the associated data will be deleted within a reasonable period of time. Requests regarding the inspection or correction of stored personal data or deletion of an account can be sent to info@ultimate-seeds.com.
4.2 Newsletters
In the event that you give us permission to inform you about our products or services, we will retain your data until you indicate that you do not wish to receive further communications from us. However, we regularly (every month) carry out a relevance check. Registered customers (and their personal data) will be deleted when customers do not respond to our request. In addition, our newsletter distribution has an opt-out function. Consumers can withdraw their consent by using this opt-out function.
SECTION 5 – THIRD PARTY SERVICES
Third party services are required to complete transactions and provide our services. In general, the third-party providers we use will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your transactions.
We recommend that you read the privacy policies of these providers so that you understand how they handle your personal information.
In particular, certain suppliers may be located or have facilities in a jurisdiction different from yours or ours. Therefore, if you choose to proceed with a transaction that involves the services of a third party, your information may become subject to the laws of the jurisdiction in which that service provider or its facilities are located.
Once you leave our website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy and our website Terms of Service.
Web analysis service (anonieme gegevens)
On this website we have integrated an element of a web analysis service (with anonymization functionality). Web analytics can be defined as the collection, processing and analysis of data about the behavior of visitors to websites. An analysis service collects, among other things, data about which website a person came from (the so-called referrer), which sub-pages he visited or how often and for how long he visited a sub-page. Web analytics is mainly used for website optimization and for cost-benefit analysis of Internet advertising.
Courier service
To complete deliveries we use a courier service. This courier service provides delivery between our company and the consumer's home. To complete these logistics, the company needs access to the consumer's name and address information.
Postal service
Ultimate Seeds uses an external mail service provider to send its newsletter. This provider has access to limited account information related to opt-in consent (e.g. email address).
Marketing services
Ultimate Seeds has the support of a company specialized in marketing and communication activities. Their access to personal information is very limited and usually anonymous.
Payment services
At Ultimate Seeds we use third party payment services to process our transactions (e.g. credit card payments).
SECTION 6 – SAFETY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored using AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional industry standards that are generally accepted. Information related to the account is protected with a hashing method. This method transforms the information into a generated hash. As a result, confidential information is protected and invisible, even to us. In addition, our databases are exceptionally protected against unauthorized access. For example, access to the database is only possible and permitted via approved IP addresses (e.g. from Ultimate Seeds headquarters). Other attempts and addresses will be rejected at all times.
Furthermore, data is anonymized as much as possible, so that it cannot be directly linked to a specific consumer. However, we can use this data to conduct market research and analyses. In addition, the third parties involved (e.g. mailing service) are examined prior to our cooperation, they comply with the GDPR from the EU and they receive a processing agreement. Within Ultimate Seeds, employees are assigned different access rights. Specific permission only allows access to information that is strictly necessary to perform a task. Digital security measures are subject to change and must meet high standards to ensure the safety of online customers. Regular verification and improvement of security measures (where necessary) are part of the role.
SECTION 7 – CHANGES TO THIS PRIVACY POLICY
We reserve the right to change this Privacy Policy at any time, so please check back frequently. Changes and clarifications will be effective immediately upon posting to the Website. If we make material changes to this policy, we will notify you here that it has been updated so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it to make.
ARTICLE 8 – YOU HAVE THE RIGHT TO:
- Withdraw the consent you have given;
- Access to personal data;
- Correct personal data;
- Delete personal data;
- File a complaint or request for the protection of your rights with the Dutch Data Protection Authority;
- Be notified of any security incident that may affect your rights;
- Restriction of processing;
- Portability