GDPR Policy

This GDPR Policy explains how personal data is handled in accordance with applicable data protection principles and how it relates to our Privacy Policy.

1. Purpose of This Policy

This policy provides additional transparency regarding personal data processing and user rights under GDPR-related data protection standards.
It should be read together with our Privacy Policy, which outlines how information is collected and used in daily operations.

2. Personal Data Covered

The scope of personal data addressed in this policy includes information that can identify or relate to an individual, such as contact details, order records, communication history, and technical usage data generated during website access.

3. Lawful Basis for Processing

Personal data is processed only when a valid legal basis applies. These bases include:

• Performance of a contract: handling orders, payments, shipping coordination, and customer support

• Explicit consent: where users voluntarily subscribe to informational communications

• Legal obligations: maintaining records required for accounting, taxation, or regulatory review

• Legitimate interests: improving service functionality, maintaining website security, and preventing misuse

Each processing activity is limited to its specific and relevant purpose.

4. Data Subject Rights

Users have rights in relation to their personal data, including the ability to:

• Request access to personal data held

• Ask for corrections where information is inaccurate or incomplete

• Request deletion where data is no longer necessary

• Withdraw previously given consent

• Request restriction of processing in certain circumstances

Requests are reviewed and handled in line with applicable data protection requirements.

5. Data Storage and Retention

Personal data is retained only for as long as it remains necessary for the original purpose of collection or as required by applicable obligations.
Retention periods may vary depending on the type of data involved.

6. Data Transfers and Access Control

Access to personal data is limited to situations where it is operationally required.
Appropriate administrative and technical controls are used to reduce unauthorized access or misuse.

7. Relationship to Cookies

Some personal data may be generated through the use of Cookies, as described in our Privacy Policy.
Users can manage cookie preferences through browser settings, which may affect how certain site features function.

8. Policy Updates

This GDPR Policy may be revised to reflect changes in legal requirements or internal data handling practices.
Updated versions will be made available through the website.

9. Contact Information

For GDPR-related questions or to exercise data protection rights, please contact us:

Contact Address: 817 9 MILE RD,SAINT MARYS,WV,26170,US
Customer Service Phone: +1(351)501-4768
Customer Service Email: wholesalehelp@habithull.com
Business Hours: Monday to Friday, 9:30–12:30 and 14:30–18:30 (Australian Time)