1. Introduction

This Privacy Policy describes how Glory Hive (“we”, “us”, or “our”) collects, uses, and shares information about you (“user”, “you”) when you use our website and services, including when you act as a vendor or customer on our platform. We are committed to protecting your personal data and your privacy rights in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our platform, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect different types of information from both vendors and customers, including:

2.1 Personal Information

1. 1. Vendors: Name, company name, address, email, contact information, payment details, tax identification numbers, and any other information needed for legal compliance and transaction facilitation.
   2. Customers: Name, email, shipping address, payment details, and any other personal information necessary to complete a transaction or service.

2.2 Non-Personal Information

1. 1. Browser and device information (e.g., IP address, operating system, browser type).
   2. Usage data (e.g., pages viewed, clicks, time spent on the website).

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies to track activity on our platform and store certain information. You can control cookie preferences via your browser settings.

3. How We Use Your Information

We use the information we collect for various purposes, including:

1. 1. To facilitate transactions: Ensuring vendors and customers can complete purchases and fulfill orders.
   2. To provide customer support: Responding to queries, resolving issues, and improving services.
   3. To process payments: Managing payments securely through third-party processors.
   4. To comply with legal obligations: Meeting tax and accounting requirements, and ensuring legal compliance with Portuguese and EU laws.
   5. For marketing and promotions: Sending you offers and promotions, with your consent where required.

4. Legal Basis for Processing Data

We process personal data in accordance with the GDPR under the following legal bases:

1. 1. Contractual necessity: Processing is necessary to fulfil the contract between vendors, customers, and us.
   2. Legal obligations: Processing is required to comply with legal obligations (e.g., tax reporting).
   3. Consent: Where applicable, we process your data with your consent for specific purposes (e.g., marketing).
   4. Legitimate interests: Processing is necessary for our legitimate business interests, such as improving the platform and services.

5. GDPR Compliance

As you are dealing with users in Portugal and the EU, ensure that data is processed in line with GDPR, including obtaining explicit consent for collecting personal information, providing users with rights (access, deletion, etc.), and disclosing data storage methods.

5. Sharing Your Information

We may share your information with third parties in the following circumstances:

1. 1. Service providers: Third-party companies that help us provide services, such as payment processors, shipping partners, and hosting providers.
   2. Legal requirements: If required by law, to protect the safety, rights, or property of our platform or others.
   3. Business transfers: In the event of a merger, sale, or acquisition of our business, your data may be transferred to the new owners.

We ensure that any third-party service providers we use comply with GDPR and have appropriate safeguards to protect your personal data.

6. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by law (e.g., tax records). After that period, data is securely deleted or anonymized.

7. Your Data Protection Rights

As a user, you have the following rights under the GDPR:

1. 1. Right to access: You can request a copy of your personal data.
   2. Right to rectification: You can request correction of inaccurate or incomplete information.
   3. Right to erasure (Right to be forgotten): You can request deletion of your personal data under certain conditions.
   4. Right to restrict processing: You can request to restrict the processing of your data.
   5. Right to data portability: You can request to transfer your data to another service provider.
   6. Right to object: You can object to processing of your personal data for marketing purposes or in the public interest.

To exercise any of these rights, please contact us at [Contact Email]. We will respond to your request within the legally required time frame.

8. Data Security

We take reasonable precautions to protect your data from loss, theft, misuse, and unauthorized access. We use encryption, firewalls, and secure data storage practices.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your privacy.

9. Children’s Privacy

Our platform is not intended for use by children under the age of 16, and we do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it.

10. International Data Transfers

If your personal data is transferred outside the European Economic Area (EEA), we will ensure it is adequately protected under GDPR-compliant transfer mechanisms, such as Standard Contractual Clauses (SCCs) or Privacy Shield, where applicable.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last modified” date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: contact@gloryebuy.com