GDPR Compliance

1. Introduction

This document outlines the General Data Protection Regulation (GDPR) compliance efforts of THWC Ltd, a website accessible at https://www.thehempwellnesscentre.co.uk. The GDPR is a regulation in UK law on data protection and privacy, and this document aims to inform users about the collection, processing, and protection of their personal data.

2. Data Controller

The data controller for the processing of personal data on the website is:

 

THWC Ltd,

West Park, Yarnscombe, Barnstaple, Devon, EX31 3LZ

sales@thehempwellnesscentre.co.uk

 

3. Types of Data Collected

THWC Ltd may collect and process the following types of personal data:

Contact Information (e.g., name, email address)

Payment Information (if applicable)

Website Usage Data (e.g., IP addresses, browser information)

Other Information provided voluntarily by the user

4. Purpose of Data Processing

Personal data is collected and processed for the following purposes:

Order Processing and Fulfillment

Customer Support

Marketing and Promotions (with user consent)

Website Analytics

5. Legal Basis for Processing

THWC Ltd processes personal data based on one or more legal grounds as defined in the GDPR, including the necessity of processing for the performance of a contract, compliance with a legal obligation, protection of vital interests, consent, the performance of a task carried out in the public interest or the exercise of official authority, and legitimate interests pursued by the data controller.

6. Data Subject Rights

Users have the following rights regarding their personal data:

Right to Access

Right to Rectification

Right to Erasure

Right to Restriction of Processing

Right to Data Portability

Right to Object

Rights related to Automated Decision Making and Profiling

To exercise these rights, users can contact THWC Ltd through the provided contact information.

7. Data Security Measures

THWC Ltd employs appropriate technical and organisational measures to ensure the security of personal data. These measures include encryption, access controls, and regular security assessments.

8. Data Breach Notification

In the event of a data breach that may result in a risk to the rights and freedoms of individuals, THWC Ltd will notify the relevant supervisory authority and affected data subjects in accordance with GDPR requirements.

9. Changes to the Privacy Policy

THWC Ltd reserves the right to update this GDPR compliance document. Users will be notified of any changes, and the latest version will be available on the website.

10. Contact Information

For questions, concerns, or requests related to GDPR compliance, please contact:

sales@thehempwellnesscentre.co.uk