Privacy Policy

2.1 Information you give us

We collect personal information you provide voluntarily when you register for an account, place an order, or contact customer service. This may include:

• Your full name and contact details, including email address, phone number and postal address
• Account login credentials
• Payment information, including billing address
• Delivery addresses
• Purchase history and preferences
• Your correspondence with our customer service team
• Profile information and photographs, if you provide them

2.2 Information collected automatically

When you visit our website or use our application, we may automatically collect certain information about your device and about how you use the service. This includes your IP address, device type and model, operating system, browser type and version, mobile device identifiers, and, with your consent, your geographic location.

We also record usage information: the pages you visit and features you use, time spent on pages, clicking patterns, search queries, referring and exit pages, and date and time stamps.

2.3 Information from third parties

We may also receive information about you from:

• Social media platforms, when you interact with our content or connect an account
• Payment processors, who confirm that a payment has succeeded
• Delivery partners, who provide delivery status updates
• Marketing partners, who help us understand customer demographics

3.1 Orders and service

• Creating and managing your account
• Processing and fulfilling your orders
• Arranging delivery of your products
• Processing payments and refunds
• Providing customer support
• Sending service notifications and updates

3.2 Improving our services

• Analysing usage patterns and trends
• Conducting research and analytics
• Troubleshooting problems
• Developing new features and products
• Personalising your shopping experience
• Improving website and application functionality

3.3 Communications and marketing

• Sending order confirmations and updates
• Providing information about new products
• Sharing promotional offers and discounts
• Conducting surveys and collecting feedback
• Sending newsletters, with your consent
• Informing you about relevant events

3.4 Security and compliance

• Verifying your identity
• Detecting and preventing fraud
• Protecting against security breaches
• Enforcing our terms and policies
• Complying with legal obligations
• Establishing, exercising or defending legal claims

3.5 Legal basis for processing

We process your personal information on the basis of your consent, the necessity of performing our contract with you, our legitimate business interests, and compliance with legal obligations. You may withdraw consent at any time by contacting us. Doing so does not affect the lawfulness of processing carried out before the withdrawal.

4.1 Types of cookies we use

Essential cookies:

Necessary for the website to function. They enable core functionality such as security, account management and network management. These cannot be turned off.

Preference cookies:

Remember your settings, such as language and region, so the site behaves the way you left it.

Analytics cookies:

Collect and report information anonymously about how visitors move through the site, which helps us improve its structure and content.

Marketing cookies:

Placed by advertising networks with our permission, to make advertising more relevant and to limit how often you see the same advertisement.

4.2 Managing cookies

Most browsers allow you to control cookies through their settings. Limiting them may affect how parts of our website work.

Chrome:

Settings, then Privacy and security, then Cookies and other site data

Firefox:

Settings, then Privacy and Security, then Cookies and Site Data

Safari:

Settings, then Privacy, then Cookies and website data

Edge:

Settings, then Cookies and site permissions, then Cookies

5.1 Service providers

We share information with trusted companies who provide services on our behalf, including payment processors, delivery and logistics partners, cloud storage providers, customer support services, marketing and advertising partners, and analytics providers.

All of them are bound by contract to keep your personal information confidential and secure, and to use it only for the purposes for which we disclosed it to them.

5.2 Legal requirements

We may disclose your information where the law requires it:

• To comply with a legal obligation, court order or legal process
• To protect our rights, property or safety
• To investigate fraud, or verify compliance with our policies
• To respond to government or regulatory requests
• To enforce our agreements, including our Terms and Conditions

5.3 Business transfers

If we are involved in a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction. We will notify you by email and by a prominent notice on our website of any change in ownership or in the way your personal information is used, together with any choices you may have.

6.1 Technical measures

• SSL and TLS encryption for data in transit
• Encrypted storage at rest
• Firewalls and intrusion detection systems
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Payment processing that is compliant with PCI DSS

6.2 Internal practices

• Regular security training for employees
• Access granted strictly on a need to know basis
• Documented data handling policies and procedures
• Regular security audits
• Incident response plans
• Confidentiality agreements with employees

7.1 How to exercise your rights

To exercise any of these rights, contact us using the details in section 11. We will respond within 30 days, and we may need to verify your identity before we act on a request.

1. Submit your request by email to ambertalefarms@gmail.com
2. Include your full name and the email address associated with your account
3. Specify which right you wish to exercise
4. Provide any relevant details that will help us process your request
5. Respond to our identity verification request, if we send one

7.2 Marketing communications

You can opt out of receiving marketing communications from us at any time by clicking the unsubscribe link in any of our emails, by adjusting your communication preferences in your account settings, or by contacting our customer service team.

Please note. Even if you opt out of marketing communications, we may still send you service messages such as order confirmations, delivery updates and notices about your account.

8.1 Cross border transfer safeguards

When we transfer your data internationally, we implement appropriate safeguards to ensure that your information continues to receive adequate protection:

• Data transfer agreements incorporating standard contractual clauses
• Vendor assessment and due diligence before onboarding
• Contractual data protection requirements
• Implementation of appropriate technical security measures