PRIVACY POLICY

1. Introduction

At Rivi Foods, accessible via rivifoods.com, we are committed to safeguarding your personal data and respecting your privacy rights. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you interact with our website, services, and communications. We uphold the highest standards of data protection and privacy, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the California Consumer Privacy Act of 2018 (“CCPA”), and other applicable privacy laws.

2. Scope and Data Controller

This Privacy Policy applies to all personal data collected through rivifoods.com and associated services. For purposes of data protection law, Rivi Foods is the “data controller” of your personal data. This means we determine the purposes and means of processing your personal information. If you have any questions or concerns regarding our data processing practices, please contact us at [email protected].

3. Categories of Personal Data Processed

We collect the following categories of personal data, either directly from you or automatically through your use of our website:

a. Usage Data
Information about your interactions with our website, including IP address, browser type, pages visited, time stamps, session durations, and referring URLs.

b. Account Data
Details you provide when creating an account, including your full name, email address, physical address, and phone number.

c. Profile Data
Information such as your preferences, product interests, order history, and behavioral interactions with rivifoods.com.

d. Communication Data
Records of your communications with us, including customer support queries and information you submit via contact forms or email correspondence.

e. Technical Data
Information about your device, operating system, browser settings, screen resolution, device type, system configurations, and other related technical identifiers.

f. Transaction Data
Details necessary to process payments and deliveries, such as billing information, payment methods, and shipping addresses.

g. Preference Data
Marketing preferences, subscription settings, and data related to how and when you consent to receive promotional messages from us.

4. Legal Bases for Processing (Under GDPR)

We only process your personal data where we have a valid legal basis to do so. These include:

– Consent: When you have provided clear and affirmative permission for us to process your personal data for a specific purpose.
– Contractual Necessity: When processing is necessary to fulfill a contract with you, such as delivering products or services.
– Legal Obligation: Where processing is required to comply with a legal obligation.
– Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

5. Your Rights

In accordance with applicable data protection laws, including the GDPR and CCPA, you have the following rights:

– Right of Access: To request access to the personal data we hold about you.
– Right to Rectification: To request correction of inaccurate or incomplete data.
– Right to Erasure (“Right to be Forgotten”): To request deletion of your data in certain circumstances.
– Right to Restriction: To request limitation on the processing of your data.
– Right to Data Portability: To obtain a copy of your personal data in a structured, commonly used, and machine-readable format to transmit it to another controller.
– Right to Object: To object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
– Right Not to be Subject to Automated Decision-Making: You have the right not to be subject to decisions made solely on automated data processing.

Requests regarding your privacy rights should be directed to [email protected]. We will respond in accordance with applicable legal time frames.

6. Security Measures

We implement and maintain appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These include:

– Data encryption (in transit and at rest)
– Role-based access control and authentication protocols
– Secure data storage and regular system backups
– Continuous employee training in data protection and confidentiality

7. International Transfers

We may transfer your personal data to jurisdictions outside the European Economic Area (EEA), including to third parties, partners, and service providers. Where such data transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to ensure a level of protection equivalent to that in the EU.

8. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, accounting, and reporting obligations. Specific retention periods include:

– Account and profile data: retained for as long as your account remains active and for up to 6 years thereafter
– Communication records: retained for up to 3 years
– Transaction data: retained for up to 7 years for regulatory and tax compliance
– Preference and marketing data: retained for 2 years from the time of last interaction

After expiration of relevant retention periods, personal data is securely deleted or anonymized.

9. Cookie Policy

We use cookies and similar tracking technologies on rivifoods.com to enhance user experience and analyze traffic. The types of cookies used include:

– Essential Cookies: Necessary for basic functionality such as navigation and secure access.
– Functional Cookies: Enable personalization, such as remembering your preferences and account settings.
– Analytics Cookies: Collect usage data for statistical analysis and performance improvement.
– Performance Cookies: Monitor system performance and detect issues.

10. Cookie Management and Compliance

You can manage your cookie preferences at any time through the cookie consent banner on rivifoods.com or via your browser settings. Under GDPR and CCPA, we obtain prior consent before placing certain non-essential cookies and provide the ability to opt out of sale or sharing of personal data as applicable by law. Our cookie practices are fully compliant with current data protection requirements.

11. Children’s Privacy

We do not knowingly collect or solicit personal information from children under the age of 13. If we learn that we have collected data from a child under 13 without verified parental consent, we will delete that information promptly. Parents or guardians with concerns should contact us at [email protected].

12. Policy Updates

We reserve the right to modify this Privacy Policy at our discretion and without prior notice. Changes will be posted on this page with clear indications of modifications. You are encouraged to review this policy periodically to stay informed about how we are protecting your data. Continued use of rivifoods.com after changes signifies acceptance of the updated terms.

13. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or our data handling practices, please contact us at:

Email: [email protected]
Website: https://rivifoods.com

We are committed to full compliance with applicable data protection laws and transparency in our privacy practices. If you believe your privacy rights have been infringed, please reach out and we will endeavor to resolve your issue promptly and lawfully.