FOR INDIVIDUALS RESIDING IN THE EUROPEAN ECONOMIC AREA (EEA ) 

Legal Basis for Processing Your Personal Data  

If you are an individual from the EEA, our legal basis for collecting and using Personal Data will depend on the Personal Data concerned and the specific context in which we collect it. However, we will normally collect Personal Data from you only where: (a) we have your consent to do so; (b) where we need the Personal Data to perform a contract with you (e.g., to deliver products or services you have requested); or (c) where the processing is in our or a third party’s legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect Personal Data from you or may otherwise need the Personal Data to protect your vital interests or those of another person.

If we ask you to provide Personal Data to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and will advise you whether or not the provision of your Personal Data is mandatory, as well as of the possible consequences if you do not provide your Personal Data. Similarly, if we collect and use your Personal Data in reliance on our or a third party’s legitimate interests that are not already described in this Privacy Policy, we will make clear to you at the relevant time what those legitimate interests are.

If you have any questions about or need further information concerning the legal basis on which we collect and use your Personal Data, please contact us using the contact details provided further below provided below under “Contact Us.”

Your Data Protection Rights  

You have the following data protection rights if you are a resident of the EEA:

• If you wish to access, correct, update or request deletion of your Personal Data, you can do so at any time by visiting your Company account or contacting us at privacy@dherbs.com.
• You can object to the processing of your Personal Data, you can ask us to restrict processing of your Personal Data, and you can request portability of your Personal Data. You can exercise these rights by visiting your Company account or contacting us at privacy@dherbs.com
• If we have collected and processed your Personal Data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent.
You have the right to complain to a data protection authority about our collection and use of your personal data. For more information please contact your local data protection authority.

Your California Privacy Rights 

Under the California Consumer Privacy Act of 2018 (“CCPA”), California residents have additional rights with regard to their Personal Information. The right to know and the right to request deletion are subject to certain exceptions and subject to our ability to verify your identity. We have provided a summary of those rights below:

Right to Know. You have a right to access any of the following information for the 12-month period prior to the date of your request: (a) the categories of Personal Information we collected from you, (b) the categories of sources from which the Personal Information was collected, (c) the business or commercial purpose for collecting or selling your Personal Information, (d) the categories of third parties with whom we shared your Personal Information, (e) the specific pieces of Personal Information we collected from you (i.e. “data portability”), and (f) a list of categories of Personal Information which were subject to a Sale or disclosed for a Business Purpose in the last 12 months. This request may be made no more than twice in a 12-month period.

Right to Request Deletion. You have a right to request that we delete Personal Information we collected from you. We will comply with such request, and direct our service providers to do the same, subject to certain exceptions permitted by applicable law.

Right to Opt-Out of Sale of Personal Information to Third Parties. You have the right to direct us not to sell your Personal Information at any time. You may submit your opt-out request following the process described below.

Right to Non-Discrimination. We will not discriminate against you for exercising your rights under the CCPA by charging you different pricing or providing a different quality of products.

How to Exercise Your Rights Under CCPA 

To exercise your rights under the CCPA, you may submit a request to us by contacting us at any of the following:

• By email to privacy@dherbs.com
• Write us at DHERBS, 2734 Fletcher Drive, Los Angeles, CA 90039, USA

Please include the phrase “California Privacy Request” in the subject line of any email request or in your letter. Please include your name, email address, and mailing address in any request. We reserve the right not to respond to requests submitted in ways other than those specified above.

Who May Exercise Your Rights. You may only make a request to exercise your rights on behalf of yourself. A parent or legal guardian may make a request on behalf of their child. If you are a California resident, only you or a person you authorize to act on your behalf may make a request related to your Personal Information.

Authorized Agents. You may designate an authorized agent to make a request on your behalf to exercise your rights under the CCPA by doing the following: (1) provide the authorized agent written permission to do so; and (2) verify your own identity (per the process stated above), as well as the identity of the authorized agent directly. We may deny a request from an authorized agent if we do not have proof that they are authorized by you to act on your behalf.

Verifiable Consumer Request. In order to verify your request, you must provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information. You must describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

When and How Will We Respond. We will try to respond to your request within 45 days. If we require additional time, we will inform you of the reason and extension period. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. For data portability requests, we will select a format to provide your Personal Information to you. We may charge a fee to process or respond to your request if it is excessive, repetitive, or manifestly unfounded.

How to Opt-Out of Sale of Personal Information 

You may submit your opt-out request by following this link: https://www.dherbs.com/contact

To opt-out online, please send us an e-mail to: privacy@dherbs.com, or send a mail request to Dherbs, 2734 Fletcher Dr., Los Angeles 90039. However, if you opt-out of a “Sale” of your Personal Information, ads you view may not be as tailored to your Interests.

California’s “Do-Not-Track” Requirement 

We currently do not honor “do not track” requests.

Dherbs. Dherbs does not share Personal Information as defined by California Civil Code Section 1798.83 (“Shine the Light”) with third parties for their direct marketing purposes absent your consent. If you are a California resident, you may request information about our compliance with Dherbs by contacting us by email privacy@dherbs.com or by sending a letter to Dherbs, 2734 Fletcher Dr., Los Angeles 90039. Any such request must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each year pursuant to this provision, and we are not required to respond to requests made by means other than through this email address or mail address.