Privacy Policy

1. Introduction
   Welcome to potbasehub.

This Privacy Policy explains how potbasehub, which is legally owned and operated by Central Garden NY GmbH (“we,” “us,” or “our”), collects, uses, stores, and discloses personal information when you visit www.potbasehub.com, place an order, or contact us.

Central Garden NY GmbH acts as the Data Controller for the personal information collected through this website. This Privacy Policy is strictly intended to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR), relevant German data protection legislation, and applicable privacy laws within the United States.

2. Information We Collect
   Depending on your interaction with our website, we may collect the following information:

Name;

Billing address;

Delivery address;

Email address;

Telephone number;

Order information;

Payment-related information processed securely during checkout;

Communications submitted through our contact channels;

Device, browser, and website usage information collected through cookies where applicable.

We collect only information that is strictly relevant and necessary for the purposes described in this Privacy Policy.

3. How We Use Your Information
   Your personal information may be used for the following purposes:

processing and managing orders through our internal fulfillment systems;

communicating regarding enquiries or orders;

providing dedicated customer support;

processing payments securely;

complying with applicable regional legal obligations;

detecting and preventing fraudulent or unauthorized activity relating to our website and transactions;

improving the secure operation and administration of our website.

4. Payment Processing & Security
   Payments made through this website are processed securely by Stripe, an independent, industry-leading payment service provider.

When you choose to complete a purchase, certain personal information necessary for payment processing, fraud prevention, and identity verification—such as your payment details, billing information, and transaction information—is processed directly by Stripe in accordance with its own strict privacy practices and applicable legal requirements. potbasehub does not store or have access to your full payment card numbers or card security codes.

5. Legal Basis for Processing
   Where the GDPR or similar legislation applies, personal information is processed on one or more of the following legal bases:

performance of a contract (e.g., fulfilling your order);

compliance with legal obligations;

legitimate interests where permitted by law (e.g., fraud prevention);

your explicit consent where consent is required.

6. Sharing of Personal Information
   Because we maintain direct inventory ownership and manage our operations internally, we limit data sharing to ensure your privacy. Personal information may be shared only where strictly necessary with:

Stripe, for secure payment processing and fraud mitigation;

direct logistics and shipping carriers supporting our in-house order fulfillment and delivery;

public authorities or regulatory bodies where disclosure is legally required by applicable law.

Information is never disclosed, sold, or shared for purposes unrelated to the direct operation of our business unless explicitly required by law.

7. Data Retention
   Personal information is retained only for as long as necessary for the purposes for which it was collected or as required by applicable law. Typical retention periods include:

Customer enquiries: up to 24 months after the final correspondence.

Customer account information (where applicable): until the account is closed, followed by a reasonable retention period where required by law.

Order records and related business documentation: generally up to 10 years, in strict compliance with German commercial and tax legislation.

Cookie preferences: generally up to 12 months.

Analytics information collected through optional cookies: generally up to 13 months, where applicable.

When retention is no longer legally required or necessary, personal information will be permanently deleted or anonymized in accordance with applicable legal requirements.

8. International Transfers
   Where personal information is transferred outside the European Economic Area, such transfers are carried out securely using recognized and approved legal mechanisms where required by applicable data protection laws.
9. Your Rights
   Subject to applicable law, you may have the right to:

request access to your personal information;

request correction of inaccurate information;

request deletion where applicable;

request restriction of processing in certain circumstances;

object to particular processing activities where permitted by law;

withdraw consent where processing is based on consent;

request data portability where applicable.

Requests regarding your privacy rights may be submitted securely using the contact details below.

10. Cookies
    Our website uses cookies and similar technologies to ensure core functionality and security. Where required by law, non-essential cookies are used only after your explicit consent has been provided through our Cookie Banner. Further information is available in our dedicated Cookie Policy.
11. Changes to This Privacy Policy
    This Privacy Policy may be updated from time to time to reflect legal, operational, or website changes. The current, legally binding version will always be available on this website together with its effective date.
12. Contact Information
    If you have any questions or concerns regarding this Privacy Policy or how your data is handled, please contact the Data Controller:

Central Garden NY GmbH
Cargo City Süd Gebäude 639 C
60549 Frankfurt
Germany
Website: www.potbasehub.com
Email: potted@potbasehub.com
Telephone: +49 69247453230