Privacy Policy

Last Effective Date: April 3rd, 2025

Who we are

Welcome to Waterloo General Market, Inc. Your privacy is important to us, and we are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website https://wgmwholesale.com/. By using our website, you agree to this Privacy Policy. If you do not agree, please do not use our website.

If you have any questions about our privacy practices, please contact us as set forth in the “Contact Information” section below.

What Personal Data We Collect

Waterloo General Market, Inc., processes your personal data because you use our services and supply data to us. We collect only the information necessary to provide and improve our services:

Personal Information (Collected When You Place an Order or Register an Account)

For purposes of this Privacy Policy, “personal information” means information that relates to an identified or identifiable individual, household, and/or, depending on your state of residence, device. Depending on how you interact with our Service, this may include collection and processing of personal information including, but not limited to, the categories and types of personal information listed below.

The categories of personal information we collect include the following:

Contact Data: We may collect your first and last name, email address, postal address, phone number, and similar contact data.

Account login credentials: When you register for an account with us, we may collect passwords, password hints, and related information for authentication and account access.

Payment Data: We use payment processors to collect personal information necessary to process your payment if you make a purchase with us, including your payment instrument number (such as a credit or debit card number), and the security code associated with your payment instrument. We do not directly collect or maintain full payment card information.

Automatically Collected Information

When you visit our website, we and other parties use a variety of technologies that automatically collect information about your device and how your device interacts with our Service, including cookies, pixels, device IDs, local Storage, and other similar technologies. Some of these technologies store data that may be considered personal information in the browser or on your device. Other technologies may use network-related or other information to recognize your device (e.g., IP address). The categories of information we automatically collect include the following:

IP address

Device and browser type

Website usage data (pages visited, time spent, interactions)

Referral source (how you found our website)

Cookies and Tracking Technologies

We use cookies to:

Improve your browsing Experience

Track website performance and analytics

Provide personalized content and advertisements

For further details, please refer to our [Cookie Policy].

Cookies

If you leave a comment on our site, you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

Why We Collect Your Data (Legal Basis for Processing)

We process your personal data under the following legal bases as required by the GDPR:

Contractual Necessity: To process your orders and payments, and to send service-related emails such as order confirmations and delivery updates.

Legitimate Interest: To improve our website, analyze your behavior, and tailor our products and services to your preferences.

Consent: For sending marketing communications (only if you have opted in).

Legal Obligation: To comply with legal requirements, such as tax and financial reporting.

Note: We do not use your personal data for automated decision-making that produces legal effects or significantly affects you.

How We Protect Your Data

We implement strict security measures to safeguard your data, including:

Secure Sockets Layer (SSL) encryption for all transactions.

Restricted access controls to ensure only authorized personnel can access sensitive data.

Regular security audits and updates to maintain the integrity of our systems.

If you believe your data is not secure, please contact us at stars5int@gmail.com.

How Long We Retain Your Data

We retain your personal data only as long as necessary to fulfill the purposes for which it is collected or as required by law.

Order and Transaction Data: Retained for up to 7 years (in compliance with tax regulations).

Customer Service Interactions: Retained for 1 year.

Marketing Communications Data: Retained until you withdraw your consent.

Account Data: Retained until you request account deletion.

After the applicable retention period, your data will be securely deleted or anonymized.

Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right to Access: Request a copy of your personal data.

Right to Rectification: Request corrections to inaccurate or incomplete data.

Right to Erasure (“Right to be Forgotten”): Request deletion of your data under certain conditions.

Right to Restriction of Processing: Request a temporary halt to data processing.

Right to Data Portability: Request a copy of your data in a structured, commonly used format.

Right to Object: Object to the processing of your data for direct marketing or legitimate interests.

Right to Withdraw Consent: Withdraw consent for data processing at any time.

To exercise any of these rights, please contact us at stars5int@gmail.comwith the subject line “GDPR Data Request.” We will respond within one month. If you are dissatisfied with our response, you have the right to file a complaint with your local Data Protection Authority.

Who We Share Your Data With

We do not sell your personal data. However, we may share your data with trusted third parties under strict confidentiality agreements for the following purposes:

Third-Party Service Providers:

Payment Processors: (e.g., Stripe, PayPal) for secure transaction processing.

Shipping Partners: (e.g., DHL, FedEx) for delivery of goods

Email Service Providers: For sending order confirmations and marketing communications.

Legal Compliance:

We may disclose your data if required by law, a court order, or law enforcement agencies.

International Data Transfers:

If we transfer your data outside the European Economic Area (EEA), we ensure it is adequately protected by:

Standard Contractual Clauses (SCCs)

Adequacy decisions by the EU Commission

Binding Corporate Rules (BCRs)

Cookies & Marketing Preferences

We use cookies for website functionality, analytics, and marketing. You can manage your cookie preferences via our Cookie Settings or your browser settings. To opt out of marketing emails, click the “Unsubscribe” link in our emails or contact us at stars5int@gmail.com.

Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. If we make changes, we will revise this Privacy Policy to reflect such changes and revise the effective date included at the beginning of this policy. We may provide you with additional notice if the changes are material. Your use of the Service following any such notice will signify and constitute your assent to and acceptance of such revised Privacy Policy.

Contact Information

If you have any questions about this Privacy Policy, including our compliance with applicable law, please feel free to contact us.

Email: stars5int@gmail.com

Phone: +1319 290 3405

Address: Cedar Rapids African & Oriental Market, 2000 Wiley Blvd SW Cedar Rapids, IA 52404

This Privacy Policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679. If you are a resident of the United Kingdom, this policy also aligns with the UK GDPR and the Data Protection Act 2018.