Politique de confidentialité

Personal data protection policy

Version updated November 24, 2023

www.eracbd.com
KXI Group, “the Company”
Type of site: e-commerce

At Era CBD, we attach great importance to the principles of honesty and transparency. We are committed to establishing a solid and lasting relationship with our consumers based on trust and mutual interest. Part of this commitment involves protecting and respecting your privacy and your choices. Respect for your privacy is an essential issue for us. This is why you will find below our entire Personal Data Protection Policy, in accordance with the Data Protection Act of January 6, 1978, amended by the law of August 6, 2004; Regulation (EU) 2016/679 of the European Parliament and General Data Protection Regulation (hereinafter also referred to as “GDPR”).

OUR COMMITMENT TO PERSONAL DATA PROTECTION

1. Collection of information

Era CBD believes that as a consumer, you are at the heart of everything we do. It is therefore important for us to get to know you in order to offer you tailor-made services adapted to your needs. And we know that many of you enjoy connecting with us. For all these reasons, there are many ways in which you can provide us with your personal data. These are listed in our Privacy Policy:

1.1 Personal Information

When you make a purchase on our site or when you subscribe to our Newsletter, we collect personal information such as your name, postal address, telephone number and email address in order to finalize your order, process and follow up on it. your order, manage the payment of your order and evaluate your satisfaction in accordance with the GDPR regulations in force in Europe.

1.2 Payment Information

It is specified that information relating to payment (credit card number/Paypal information/bank details) is not collected by us but directly by the payment service providers.

1.3 Information Related to CBD

To ensure compliance with CBD-specific regulations in Europe, we may collect information related to age and geographic location to ensure the compliance and legality of our products.

2. Use of Information

We use your personal information to process your orders, provide you with efficient customer service, personalize your shopping experience and comply with all applicable European laws and regulations.
When we collect data, we mark required fields with an asterisk. Some of the data we request from you is essential to us for the following reasons:

• The performance of the contract we have entered into with you (for example in order to deliver goods you have purchased on our website);
• Providing the service you have requested from us (for example to send you a newsletter);
• Compliance with legal obligations (for example invoicing).

Failure to complete fields marked with an asterisk may impact our ability to offer you products and services.

3. Protection of Information and security measures

3.1 Security Measures

We use advanced security protocols to protect your personal data. This includes encryption of sensitive data, restricted access to information and regular training of our staff on security best practices.
We have put in place specific measures to guarantee your protection:

Data Encryption: All personal data transmitted between your browser and our site is encrypted using secure protocols, ensuring the confidentiality of sensitive information such as payment details.

Restricted Access Control: Access to personal data is strictly limited to employees requiring this information to perform their specific tasks. Access authorizations are regularly reviewed to ensure continued security.

Staff training : Our staff is trained regularly on security best practices regarding data protection. This includes constant awareness of potential threats and security protocols.

3.2 Duration of Retention of Personal Data

We retain your personal data for as long as necessary to fulfill the purposes mentioned in this privacy policy, unless a longer retention period is required or permitted by law. The retention period may vary depending on the specific purposes of the processing:

Data related to your order: we keep your personal data for the duration of our commercial relationship;
If you consent to receive marketing communications, we retain your personal data until you withdraw your consent or request to no longer receive marketing communications;
Geolocation and age-related data, collected to ensure compliance with CBD-related regulations, will be retained for the period necessary to demonstrate such compliance;
If you wish to be informed of the availability of a product, we keep your personal data for 3 months from the notification sent to you for this purpose;
If cookies are placed on your computer, we retain your data only for as long as necessary to fulfill their purpose (for example, for the duration of a session for shopping cart cookies or session ID cookies). and for any period defined in accordance with local regulations and instructions.

After the applicable retention period, we will take all reasonable steps to securely delete or anonymize your personal data, except to the extent that further retention is necessary for legal obligations, for dispute resolution, or for other purposes. other legitimate business reasons.

4. Information sharing

We do not offer or sell your personal data.

This confidentiality policy refers exclusively to the Website: www.eracbd.com and does not apply to other sites, pages or online services accessible by hyperlinks, even if they are published there. In these cases, data management is their responsibility.

4.1 Categories of Third Parties with whom Data is shared

We may share your data with third parties such as payment service providers, carriers, government authorities, search engines or social networks but only to the extent necessary for the fulfillment of the purposes described in this privacy policy and with your consent.

5. Legality and Liability

Due to the specific nature of our CBD products, we are committed to complying with all applicable laws and regulations in Europe. We may share information with relevant authorities to ensure the legality of our activities.

6. Cookies

We use cookies to improve your browsing experience on our site. You can disable cookies in your browser settings, but this may affect some functionality of the site.

7. Your Rights

In accordance with the GDPR, you have the right to access your personal information, correct it, request its deletion or object to its processing. To exercise these rights, please contact us at contact@eracbd.com.

8. Changes to the Privacy Policy

We reserve the right to update this privacy policy at any time. Changes will be posted on this page with an updated date.

By using our site, you agree to our privacy policy. For specific questions or concerns related to the sale of CBD in Europe, please contact us at contact@eracbd.com.

To better understand your rights and duties, you can also consult the website of the Commission Nationale de l’Informatique et des Libertés www.cnil.fr.