Privacy Policy (GDPR Compliant) –
“Blue & White Blueberries”

This Privacy Policy explains how Blue & White Blueberries Ltd., the operator of the “Blue & White Blueberries” website (the “Website”), collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

1. Data Controller

The data controller responsible for processing personal data is:
Blue & White Blueberries Ltd.
Email: info@bwberry.com

2. Legal Basis for Processing Personal Data

The Company processes personal data on the following legal bases:

Performance of a contract – processing required to complete purchases and deliver products.

Consent – for marketing communications and non-essential cookies.

Legitimate interests – improving the Website, fraud prevention, and customer support.

Legal obligation – compliance with applicable laws and regulations.

3. Categories of Personal Data Collected
A. Data Provided Directly by the User

Full name

Delivery address

Email address

Phone number

This data is collected when placing an order or subscribing to newsletters or marketing communications.

B. Data Collected Automatically

IP address

Browser type and version

Device type

Pages visited, visit duration, and timestamps

The Website also uses cookies and similar technologies to ensure functionality, analyze traffic, and deliver marketing content (subject to user consent).

4. Purposes of Data Processing

Personal data is processed for the following purposes:

Processing and fulfilling orders and payments

Managing deliveries of perishable food products

Providing customer support

Improving Website functionality and user experience

Sending marketing communications and promotional content (with consent)

Compliance with legal and regulatory obligations

5. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting requirements.
When data is no longer required, it is securely deleted or anonymized.

6. Sharing Personal Data with Third Parties

The Company does not sell or rent personal data.
Data may be shared only with:

Service providers (e.g., payment processors, delivery companies, IT providers) strictly for operational purposes

Public authorities or courts, where required by law

Legal advisors, in case of a legal dispute

All third parties are required to process personal data in compliance with GDPR and under appropriate data protection agreements.

7. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), the Company ensures that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent legal mechanisms.

8. Data Security

The Company implements appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, misuse, or alteration.
Payment information is processed by secure third-party payment providers and is not stored on the Company’s servers.

9. User Rights Under GDPR

Users located in the European Union have the following rights:

Right of access – to request a copy of their personal data

Right to rectification – to correct inaccurate or incomplete data

Right to erasure (“right to be forgotten”) – subject to legal obligations

Right to restriction of processing

Right to data portability

Right to object – to processing based on legitimate interests or direct marketing

Right to withdraw consent – at any time, without affecting prior lawful processing

Requests may be submitted to: info@bwberry.com

10. Marketing Communications

Users will receive marketing communications only if they have provided explicit consent.
Users may withdraw consent or unsubscribe at any time via the unsubscribe link in the message or by contacting:
info@bwberry.com

11. Cookies Policy

The Website uses:

Essential cookies – required for Website functionality

Analytical cookies – for performance and usage analysis

Marketing cookies – for promotional and advertising purposes

Non-essential cookies are used only after obtaining explicit user consent via a cookie banner or consent management tool.
Users may manage cookie preferences at any time through browser settings or the cookie consent tool.

12. Changes to This Privacy Policy

The Company reserves the right to update this Privacy Policy from time to time.
Any changes will be published on the Website, and the updated version will be effective as of the date of publication.

13. Supervisory Authority

EU users have the right to lodge a complaint with their local Data Protection Authority (DPA) if they believe their data protection rights have been violated.