GDPR Policy

This GDPR Policy explains how OutbackNest ("we," "us," "our") processes personal data belonging to individuals located in the European Union (EU) and European Economic Area (EEA), in accordance with the General Data Protection Regulation (GDPR).

Data Controller OutbackNest 131 Marcellin Dr #65972806 City of Industry, California 91789, United States Email: support@outbacknest.garden Phone: (205) 342-2850

What Personal Data We Collect

  • Name, email address, shipping and billing address, phone number
  • Payment information (processed securely by our payment provider; we do not store full card details)
  • Order history and communication records
  • Technical data such as IP address and browser information, collected via cookies

Legal Basis for Processing We process personal data under the following legal bases:

  • Contractual necessity — to process and fulfill your orders
  • Consent — for marketing emails and non-essential cookies, which you can withdraw at any time
  • Legitimate interests — to improve our website, prevent fraud, and maintain security
  • Legal obligation — to comply with tax, accounting, and other applicable laws

Your Rights Under GDPR If you are located in the EU/EEA, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data ("right to be forgotten"), subject to legal exceptions
  • Restrict or object to certain processing
  • Data portability — receive your data in a structured, commonly used format
  • Withdraw consent at any time where processing is based on consent
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at support@outbacknest.garden. We will respond within the timeframe required by law (typically within one month).

International Data Transfers As a US-based company, personal data from EU/EEA visitors may be transferred to and processed in the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) with our service providers to protect data transferred outside the EU/EEA.

Data Retention We retain personal data only as long as necessary to fulfill the purposes described in this policy, meet legal or tax obligations, and resolve disputes.

Third-Party Processors We work with third-party service providers — such as payment processors, shipping carriers, and analytics/marketing tools — who may process personal data on our behalf, under their own privacy and security obligations.

Data Security We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

Children's Data Our website is not directed at children, and we do not knowingly collect personal data from individuals under 16.

Changes to This Policy We may update this GDPR Policy periodically to reflect changes in our practices or legal requirements. The most current version will always be posted on this page.

Contact Us / Data Protection Queries For any questions or requests related to this policy or your personal data, contact us at support@outbacknest.garden or (205) 342-2850.