GDPR Policy

At Good Good Ganja Shop, we are committed to protecting the privacy and personal data of our customers and visitors, in line with the General Data Protection Regulation (GDPR) (EU Regulation 2016/679). This policy outlines how we collect, process, store, and protect your personal data.

1. Who We Are

Good Good Ganja Shop
Website: https://goodgoodganjashop.com

2. What Personal Data We Collect

We may collect the following data when you use our website or services:

Full name
Email address
Billing and shipping addresses
Phone number
Payment information (processed securely via third-party providers)
IP address and browser/device information
Order history and preferences
Any communication you send us

3. Legal Basis for Processing

We process your data based on the following legal grounds:

Consent – When you opt-in to receive newsletters or marketing.
Contract – To fulfill an order or service you requested.
Legal obligation – To comply with tax, fraud, or other regulatory requirements.
Legitimate interest – For improving our services, preventing fraud, or conducting analytics.

4. How We Use Your Data

To process and fulfill orders
To send transactional or marketing emails (with consent)
To improve user experience and site performance
To prevent fraud and secure our website
To comply with legal or regulatory requirements

5. Data Sharing & Third Parties

We do not sell your personal data. However, we may share your data with trusted third-party providers such as:

Payment processors (e.g., Stripe, PayPal)
Shipping partners
Email marketing platforms (e.g., Mailchimp, Klaviyo)
Analytics tools (e.g., Google Analytics)

All third-party providers are vetted to ensure GDPR compliance.

6. Your Rights Under GDPR

You have the following rights:

Access – Request a copy of your personal data
Rectification – Correct inaccurate or incomplete data
Erasure – Request deletion of your data (“right to be forgotten”)
Restriction – Limit how we use your data
Portability – Request your data in a structured format
Objection – Object to processing for direct marketing or legitimate interest
Withdraw Consent – At any time where consent was given

To exercise these rights, contact us at: [Insert email]

7. Cookies and Tracking

We use cookies and similar technologies to enhance user experience, analyze traffic, and personalize content. You can manage your cookie preferences via your browser settings.

For more information, please see our [Cookie Policy].

8. Data Retention

We retain your data only as long as necessary:

For order processing: up to 7 years (for legal/tax purposes)
For marketing: until you unsubscribe
For analytics: anonymized after 26 months (Google Analytics default)

9. Data Security

We implement strong security measures to protect your personal information, including SSL encryption, secure payment gateways, and access controls.

10. International Transfers

If you are located outside our operating country, your data may be transferred to servers in other jurisdictions. We ensure all data transfers comply with GDPR standards, including the use of Standard Contractual Clauses where applicable.

11. Complaints

If you have a complaint about how we handle your data, please contact us first at support@goodgoodganjashop.com]. You also have the right to file a complaint with your local Data Protection Authority.