Privacy Policy

Privacy Policy for WarmBrews (GDPR-Compliant)
Effective Date:  2025/05/25 

At WarmBrews, accessible from https://warmbrews.com, we respect your privacy and are committed to protecting your personal data. This Privacy Policy describes how we collect, use, and process your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).


1. Data Controller

The data controller responsible for your personal data under this Privacy Policy is:

WarmBrews
Morris
 Email: info@warmbrews.com
  


2. Lawful Bases for Processing Personal Data

We process your personal data under one or more of the following lawful bases:

  • Consent: You have given clear consent to process your data for specific purposes.

  • Contractual Necessity: Processing is necessary for a contract with you (e.g., to fulfill your order).

  • Legal Obligation: We are legally required to process the data (e.g., for tax records).

  • Legitimate Interests: Processing is necessary for our legitimate interests (e.g., to improve our services), provided your rights don’t override those interests.


3. Your Rights Under the GDPR

You have the following rights:

  • Right to Access – You can request a copy of your personal data.

  • Right to Rectification – You can request correction of inaccurate or incomplete data.

  • Right to Erasure – You can ask us to delete your data, under certain conditions.

  • Right to Restrict Processing – You can request limited use of your data.

  • Right to Object – You can object to certain types of processing.

  • Right to Data Portability – You can request to transfer your data to another service provider.

  • Right to Withdraw Consent – You can withdraw consent at any time for processing that is based on consent.

To exercise any of these rights, please contact us at: [Insert Contact Email].


4. Data Transfers Outside the EEA

If we transfer your data outside the European Economic Area (EEA), we ensure that adequate safeguards are in place, such as:

  • The European Commission’s Standard Contractual Clauses (SCCs)

  • Transfers to countries deemed to have adequate data protection laws

  • Binding corporate rules (where applicable)


5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements.


6. Security of Your Data

We implement industry-standard security practices, including HTTPS, encryption, access controls, and regular audits to ensure data integrity and confidentiality.


7. Automated Decision Making

We do not use your personal data for automated decision-making, including profiling, that produces legal or similarly significant effects.


8. Data Protection Officer (If Applicable)

If required, we have appointed a Data Protection Officer (DPO) who ensures our compliance with GDPR.

Data Protection Officer Contact:
info@warmbrews.com


9. Filing a Complaint

If you believe we have violated your data protection rights, you have the right to lodge a complaint with your local supervisory authority.

In the EU, you can find your local data protection authority here:
https://edpb.europa.eu/about-edpb/board/members_en


10. Contact Us

For questions or concerns regarding this Privacy Policy or our data practices:

Warm Brews
Email:  info@WarmBrews.com