GDPR & CCPA Privacy Policy

Effective Date: 07/06/2025

At Oats and Quinoa, your privacy matters. This GDPR & CCPA Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the General Data Protection Regulation (GDPR) for residents of the European Economic Area (EEA) and the California Consumer Privacy Act (CCPA) for California residents.

By using our website https://www.oatsandquinoa.com, you agree to the terms outlined below.

Information We Collect

We may collect and process the following categories of personal information:

Personal Identification Information (PII): Name, email address, mailing address, phone number, or any data you voluntarily submit (e.g., through forms, newsletter signups, or comments).
Usage Data: IP address, browser type, referring/exit pages, and time spent on pages.
Cookies and Tracking Technologies: Small text files and tags that help us understand user behavior, preferences, and engagement.

How We Use Your Information

We use your data to:

Provide and improve website functionality and content
Personalize your browsing experience
Communicate via email newsletters and promotions (with consent)
Conduct analytics and performance tracking
Ensure security and prevent fraud or misuse

We only collect and use your data for legitimate business purposes and always with transparency.

Your Rights Under GDPR (For EEA Residents)

If you are located in the European Economic Area, you are entitled to:

Right to Access: Request details of personal data we hold about you
Right to Rectification: Request corrections to inaccurate or incomplete data
Right to Erasure: Request deletion of your personal information (“Right to be Forgotten”)
Right to Restrict Processing: Request a limit on how your data is used
Right to Data Portability: Receive a copy of your personal data in a portable format
Right to Object: Object to processing, especially for direct marketing
Right to Withdraw Consent: Withdraw any previously given consent at any time

📧 To exercise any of these rights, contact us at: [email protected]

Your Rights Under CCPA (For California Residents)

If you reside in California, you have the following rights under the CCPA:

Right to Know: Request what categories of personal information we collect, how it’s used, and what third parties we share it with
Right to Delete: Request deletion of your personal data, subject to legal exceptions
Right to Opt-Out of Sale: We currently do not sell personal data. If that changes, you will be notified and given the ability to opt out
Right to Non-Discrimination: You will not be penalized or treated unfairly for exercising your privacy rights

📧 To make a request, contact: [email protected]

Data Sharing and Disclosure

We may share personal data under the following limited circumstances:

Service Providers: With trusted vendors (e.g., web hosting, email delivery, analytics), who are contractually obligated to protect your data
Legal Obligations: When required to comply with laws or protect the rights of Oats and Quinoa or others
Business Transfers: If our business is sold or merged, user data may be part of the assets transferred

We do not sell your personal data to third parties.

Data Retention

We retain your data only as long as necessary to:

Fulfill the purposes outlined in this policy
Comply with legal obligations
Resolve disputes or enforce agreements

When no longer needed, your data is securely deleted or anonymized.

Cookies and Tracking Technologies

We use cookies to:

Remember your preferences and settings
Analyze traffic and behavior on the site
Serve personalized content and ads

You can manage or disable cookies in your browser settings. Some features may be limited if cookies are disabled. For detailed cookie usage, see our separate Cookie Policy.

Data Security

We implement appropriate technical and organizational safeguards to protect your data. This includes:

SSL encryption
Access controls
Routine security monitoring

While we take security seriously, no method of transmission or storage is 100% secure. Please contact us immediately if you suspect unauthorized access to your data.

Children’s Privacy

Our site is not directed at children under 16 years old. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us at [email protected], and we will delete it promptly.

Changes to This Policy

We may update this GDPR & CCPA Privacy Policy from time to time. Changes will be posted on this page, and the “Effective Date” at the top will be updated.

We encourage you to review this policy regularly to stay informed about how we protect your information.