Privacy Policy

1. Information We Collect

We may collect the following types of information when you use our services:

• Personal Information: Name, delivery address, email address, phone number, and payment information necessary to process and fulfill your orders.
• Account Information: Login credentials, order history, preferences, and delivery schedules if you create an account on our website.
• Website Usage Data: IP address, browser type, operating system, referring URLs, pages visited, and time spent on our website.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content.
• Customer Service Interactions: Records of communications when you contact our customer service team via phone, email, or chat.

2. How We Use Your Information

We use the collected information for the following purposes:

• Processing and fulfilling your orders for bottled water delivery
• Managing your account and providing customer support
• Improving our website functionality and user experience
• Sending order confirmations, delivery updates, and service notifications
• Providing personalized recommendations based on your preferences and order history
• Conducting internal analytics to improve our products and services
• Detecting and preventing fraudulent activities and security breaches
• Complying with legal obligations and enforcing our terms of service

3. Legal Basis for Processing (GDPR Compliance)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contractual obligations to you when you order our bottled water delivery services.
• Legitimate Interests: When processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring website security.
• Legal Compliance: Processing required to comply with applicable laws and regulations.
• Consent: When you have explicitly provided consent for specific processing activities, such as marketing communications.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• The duration of our ongoing relationship with you and provision of services
• Legal obligations that require data retention for specific periods
• Statute of limitations under applicable law
• Our legitimate business needs and industry standards

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data during transmission and storage
• Regular security assessments and vulnerability testing
• Access controls and authentication procedures for our staff
• Employee training on data protection and security practices
• Secure network architecture and monitoring systems

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

6. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right to Access: You can request information about the personal data we hold about you and how it is processed.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure: You can request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: You can request limitation of processing of your personal data.
• Right to Data Portability: You can request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You can object to processing of your personal data based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: You can withdraw previously given consent for data processing at any time.

7. Cookies Policy

Our website uses cookies to enhance user experience and analyze website performance. Cookies are small text files stored on your device that help us recognize your browser and remember certain information.

We use the following types of cookies:

• Essential Cookies: Required for basic website functionality and security features.
• Preference Cookies: Enable us to remember your preferences and settings.
• Analytics Cookies: Help us understand how visitors interact with our website.
• Functionality Cookies: Allow for enhanced functionality and personalization.

You can control and manage cookies through your browser settings. Disabling cookies may affect your experience on our website.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised policy on our website with an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about our data practices.

Significant changes to this policy will be communicated to you through a notice on our website or via email if you have an account with us.

9. Data Processing Agreement

When we engage third-party service providers who process personal data on our behalf, we enter into data processing agreements that ensure they process data in accordance with our instructions and maintain appropriate security measures.

These agreements include provisions required by applicable data protection laws, including the GDPR, to safeguard your personal information when it is processed by our service providers.