Last Updated: January 1, 2024
General Data Protection Regulation (GDPR) Compliance
Wholesome Gourmet is committed to protecting your personal data and respecting your privacy rights under the GDPR.
Legal Basis for Processing
We process your personal data based on:
- Consent: When you provide explicit consent for marketing communications
- Contract: To fulfill our contractual obligations for product delivery
- Legitimate Interest: To improve our services and prevent fraud
- Legal Obligation: To comply with applicable laws and regulations
Your Rights Under GDPR
Right of Access
You can request information about what personal data we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten)
You can request deletion of your personal data in certain circumstances.
Right to Restrict Processing
You can request limitation of how we process your personal data.
Right to Data Portability
You can request transfer of your data to another service provider.
Right to Object
You can object to processing based on legitimate interests or for marketing purposes.
Right to Withdraw Consent
You can withdraw consent at any time without affecting prior processing.
Data Protection Officer
For GDPR-related inquiries, contact our Data Protection Officer:
Email: dpo@wholesomegourmet.sbs
Phone: +1 (415) 555-0187
Address:
Data Protection Officer
Wholesome Gourmet
1247 Market Street, Suite 400
San Francisco, CA 94103, USA
Data Transfers
When we transfer data outside the EU/EEA, we ensure adequate protection through:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses
- Binding Corporate Rules
- Certification schemes
Data Breach Notification
We will notify supervisory authorities within 72 hours of becoming aware of a data breach that poses a risk to individuals' rights and freedoms.
Supervisory Authority
You have the right to lodge a complaint with your local supervisory authority if you believe we have not complied with GDPR requirements.
Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected or as required by law:
- Customer data: Duration of business relationship plus 7 years
- Marketing data: Until consent is withdrawn
- Website analytics: 26 months maximum
- Legal compliance: As required by applicable laws
Privacy by Design
We implement privacy by design principles:
- Data minimization - collecting only necessary data
- Purpose limitation - using data only for stated purposes
- Storage limitation - retaining data only as long as necessary
- Security measures - protecting data with appropriate safeguards
Contact Us
For any GDPR-related questions or to exercise your rights:
Email: gdpr@wholesomegourmet.sbs
Phone: +1 (415) 555-0187
We will respond to your request within 30 days.
