Effective Date: June 09, 2025

1. Who We Are

MellowFellow.eu is operated by Mellow Fellow Europe, a company specializing in high-quality, lab-tested hemp products. If you have any questions about this policy, you can contact us through our contact form.

2. What Data We Collect

We may collect the following categories of personal data:

Information you provide directly:

• Name
• Email address
• Phone number
• Shipping and billing address
• Payment information (processed securely by third-party payment processors)
• Account details (if you create an account)

Automatically collected data:

• IP address
• Browser type and version
• Device type
• Pages visited and time spent
• Referring website
• Cookies and similar tracking technologies

3. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Contractual necessity: to process your orders and deliver our products.
• Legal obligation: to comply with tax, accounting, or regulatory requirements.
• Legitimate interests: to improve our website, prevent fraud, and conduct marketing.
• Consent: for email newsletters, marketing, or cookie usage where required.

4. How We Use Your Information

We use your data to:

• Process and fulfill your orders
• Provide customer support
• Send transactional or marketing emails (with your consent or implied consent)
• Comply with legal and tax obligations
• Improve website functionality and security

5. Sharing Your Data

We do not sell your personal data. We may share it with:

• Payment processors (e.g., Stripe, PayPal, Authorize.net)
• Shipping providers (e.g., DHL, UPS)
• IT service providers and website hosting
• Legal or regulatory authorities if required

All third parties are GDPR-compliant and only process data on our behalf under data processing agreements.

6. International Transfers

Your data may be transferred to and processed in countries outside the EU/EEA. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

7. Data Retention

We retain your personal data only for as long as necessary:

• For order processing and accounting: up to 7 years
• For marketing: until you withdraw consent
• For analytics: pseudonymized data retained for up to 26 months

8. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Rectify incorrect or incomplete data
• Erase your data (“right to be forgotten”)
• Restrict or object to processing
• Withdraw consent at any time
• Port your data to another provider
• Lodge a complaint with a supervisory authority (e.g., your local Data Protection Authority)

9. Cookies and Tracking

We use cookies to enhance site functionality and for analytics. You can control cookie preferences through our cookie banner or browser settings.

For more information, see our Cookie Policy.

10. Data Security

We implement technical and organizational measures to protect your data, including:

• SSL encryption
• Secure servers
• Limited access to personal data
• Regular security audits

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website with a revised “Effective Date.”