GDPR Compliance

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). Learn about your rights and how we protect your information.

Data Protection
Your Rights
Compliance

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It applies to all organizations operating within the EU and those that offer goods or services to individuals in the EU, regardless of where the organization is based.

GDPR gives individuals greater control over their personal data and requires organizations to be more transparent about how they collect, use, and protect personal information.

Your GDPR Rights

Right to Access

You have the right to request access to your personal data and information about how we process it.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data in certain circumstances.

Right to Portability

You can request a copy of your data in a structured, machine-readable format.

Right to Object

You can object to processing of your data for certain purposes.

Right to Restriction

You can request restriction of processing in certain circumstances.

How to Exercise Your Rights

1

Contact Us

Send an email to omorfodesigned@gmail.com with your request.

2

Provide Information

Include your name, email address, and specific details about your request.

3

Verification

We may need to verify your identity before processing your request.

4

Response

We will respond to your request within 30 days, as required by GDPR.

How We Process Your Data

Legal Basis for Processing

  • Consent: When you explicitly agree to data processing
  • Contract: To fulfill our obligations to you
  • Legitimate Interest: For business operations and improvements
  • Legal Obligation: To comply with applicable laws

Data Retention

  • Account Data: Until account deletion or 3 years of inactivity
  • Order Data: 7 years for tax and legal purposes
  • Marketing Data: Until consent withdrawal
  • Analytics Data: 2 years maximum

Data Security Measures

Encryption

All data is encrypted using industry-standard SSL/TLS protocols

Access Controls

Strict access controls and authentication measures

Secure Storage

Data stored in secure, monitored facilities

Data Breach Procedures

Detection & Assessment

We have procedures in place to detect and assess potential data breaches within 72 hours.

Notification

If a breach poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and affected individuals as required by GDPR.

Remediation

We will take immediate steps to contain and remediate any breach, including implementing additional security measures.

Questions About GDPR?

If you have any questions about our GDPR compliance or want to exercise your rights, please don't hesitate to contact us.