GDPR
Our Approach to Personal Data Protection
At Boltenelise, we recognize that personal information deserves careful handling and transparent management. When you visit boltenelise.com, place an order, communicate with our customer support team, or interact with our online services, certain information may be collected and processed to support our business operations and provide requested services.
This GDPR Information page explains the circumstances in which European data protection requirements may apply, the principles governing our handling of personal information, and the rights available to individuals under applicable data protection laws.
Scope of Data Protection Requirements
The General Data Protection Regulation (GDPR) applies to the processing of personal data when the relevant legal conditions are met. Its application depends on factors such as the individual's location, the activities involved, and the circumstances of the processing.
Although our business is based in the United States, GDPR obligations may apply to certain processing activities involving individuals in the European Economic Area (EEA), where the requirements established by the regulation are satisfied. We also take applicable United States federal and state privacy laws into account when handling personal information.
Information That May Be Processed
Depending on how you use our website and services, the information processed may include:
Identification and Contact Details
Information such as your name, email address, telephone number, billing address, and delivery address when provided during an order or customer service interaction.
Order and Transaction Records
Details relating to products purchased, order status, payment confirmation, delivery arrangements, refund requests, and relevant transaction records. Payment card details are handled through the applicable payment processing arrangements.
Website and Technical Information
Information such as browser type, device characteristics, IP address, access times, and interactions with website features may be processed for technical operation, security, troubleshooting, or performance assessment.
Communications and Customer Requests
Information contained in messages, inquiries, complaints, and other communications you send to us, to the extent necessary to respond and maintain relevant service records.
We do not assume that every category of information is collected from every visitor. The information involved depends on the features used and the circumstances of each interaction.
Purposes and Legal Grounds for Processing
Personal information is processed only for purposes relevant to the applicable service or business activity. Depending on the circumstances and applicable law, the legal basis may include:
Performance of a Contract
Processing necessary to accept and manage orders, arrange delivery, administer returns, issue refunds, and provide customer support related to a purchase.
Compliance with Legal Obligations
Processing necessary to satisfy applicable accounting, tax, recordkeeping, consumer protection, or other legal requirements.
Legitimate Interests
Processing reasonably necessary for purposes such as maintaining website security, preventing fraudulent activity, handling service disputes, and improving operational reliability, provided that the individual's rights and interests do not override those interests where required by law.
Consent
Processing based on your consent where consent is required, including certain uses of non-essential cookies or similar technologies. You may withdraw consent at any time for future processing based on that consent. Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.
The applicable legal basis depends on the specific processing activity. Where required by GDPR, we will provide relevant information about the basis for processing.
Data Sharing and Service Providers
Personal information may be disclosed to service providers when reasonably necessary to operate the website and fulfill requested services. Depending on the transaction, these providers may include payment processors, shipping and delivery companies, website hosting providers, technical support providers, and other operational partners.
Information may also be disclosed where required by law, in response to valid legal requests, or when necessary to establish, exercise, or defend legal claims.
We do not describe all such disclosures as unrestricted sharing. Information provided to a service provider should be limited to what is appropriate for its relevant function, subject to applicable legal requirements and the arrangements governing that service.
International Data Transfers
As our business operates from the United States, personal information may be processed or accessed in the United States or other countries where our service providers operate.
Where GDPR applies and personal data is transferred outside the EEA to a country without an applicable adequacy decision, the transfer must comply with the relevant GDPR requirements. Depending on the circumstances, this may involve appropriate safeguards, such as approved Standard Contractual Clauses, and supplementary measures where necessary.
Information about the applicable transfer safeguards can be requested through our customer support contact.
How Long Information Is Retained
Personal information is retained only for as long as reasonably necessary to fulfill the relevant purpose, subject to applicable legal requirements.
The retention period may depend on the nature of the information, the status of an order, customer service needs, legal recordkeeping obligations, dispute resolution, and the need to establish or defend legal claims. When information is no longer required, it will be deleted, anonymized, or otherwise handled in accordance with applicable law.
Your Rights Under the GDPR
Where GDPR applies to the processing of your personal data, you may have the following rights, subject to the conditions and exceptions established by law:
Right of Access: Request confirmation of whether your personal data is being processed and obtain access to that data, together with relevant information about the processing.
Right to Rectification: Request correction of inaccurate personal data or completion of incomplete information.
Right to Erasure: Request deletion of personal data where the legal requirements for erasure are met.
Right to Restriction: Request that certain processing activities be restricted in the circumstances specified by the GDPR.
Right to Data Portability: Receive certain personal data you have provided in a structured, commonly used, machine-readable format and, where technically feasible and legally applicable, request its transmission to another controller.
Right to Object: Object to processing based on legitimate interests where the GDPR provides this right. You also have an unconditional right to object to the processing of personal data for direct marketing purposes where applicable.
Right to Withdraw Consent: Withdraw consent where processing relies on consent. Withdrawal does not invalidate processing carried out lawfully before the withdrawal.
Rights Regarding Automated Decision-Making: Where applicable, request the protections provided by the GDPR concerning decisions based solely on automated processing that produce legal effects or similarly significant effects.
These rights are not absolute in every situation. Certain requests may be subject to lawful exceptions, verification requirements, or restrictions. We will assess each request according to the applicable legal requirements.
Submitting a Data Protection Request
If you wish to exercise a data protection right, please contact us using the contact information provided below. Describe the nature of your request and include sufficient information for us to understand and verify it.
We may request reasonable additional information to confirm your identity and protect personal data against unauthorized disclosure. We will respond within the time limits required by applicable law. Where a lawful extension or refusal applies, we will provide the relevant explanation as required.
There is no requirement to waive any legal right as a condition of submitting a valid request.
Right to Lodge a Complaint with a Supervisory Authority
If you believe that our processing of your personal data violates the GDPR, you have the right, where GDPR applies, to lodge a complaint with a competent data protection supervisory authority. You may generally contact the authority in the EEA country where you habitually reside, work, or where the alleged infringement occurred.
You may also have the right to seek an effective judicial remedy in accordance with applicable law. Contacting us directly is an available way to raise a concern, but it does not remove your right to lodge a complaint with a competent supervisory authority.
Complaints to United States Authorities
Individuals who have concerns about privacy practices or consumer protection issues may also have options under applicable United States law. Depending on the nature of the concern and the relevant jurisdiction, you may submit a complaint to the Federal Trade Commission (FTC) or the consumer protection office or Attorney General in your state.
These United States complaint channels are separate from the GDPR supervisory authority process. The availability and scope of a complaint or remedy depend on the applicable law and the authority's jurisdiction.
Security and Responsible Handling
We take reasonable measures appropriate to the nature of the information and the risks involved to help protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. Such measures may include access controls, operational safeguards, and the use of service providers with relevant security practices.
No method of online transmission or electronic storage can be guaranteed to be completely secure. We therefore encourage customers to avoid sending sensitive payment credentials through ordinary email or other unsecured communication channels.
Changes to This Information
This GDPR Information page may be updated to reflect changes in our data handling practices, website functions, or applicable legal requirements. The revised version will be published on this page.
Contact Information
For questions about personal data processing or to submit a privacy-related request, please contact us.
Address: 2932 Pine Tree Dr, Edgewater, FL 32141, United States
Email: info@boltenelise.com
Phone: +1 (386) 428-6732
Customer Support Hours: Monday–Friday, 9:00 AM–6:00 PM Eastern Time (ET)