Privacy Policy
Last updated: March 2026
1. Who We Are
Carob Trading ("we", "us", "our") is a Portugal-based wholesale carob supplier operating the website carobtradingsupplier.com. We can be reached at [email protected] or by phone at +1 (301) 672-8359.
We are committed to protecting the personal data of everyone who contacts us through this website, and we process that data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Portuguese data protection law.
2. What Personal Data We Collect
When you submit a wholesale quote request through our contact form, we collect the following personal data:
| Data Field | Required | Purpose |
|---|---|---|
| Full name | Yes | To address you in correspondence |
| Company name | Yes | To identify the business enquiring |
| Email address | Yes | To send you our quote and follow up |
| Phone number | No | To contact you directly if needed |
| Country | No | To provide relevant pricing and logistics information |
| Product interest | Yes | To prepare an accurate quote |
| Order volume | No | To tailor pricing tiers |
| Message | No | To understand your specific requirements |
We do not collect sensitive personal data (e.g., health, financial, or government ID data), and we do not use cookies for tracking beyond the anonymous analytics described in Section 5.
3. Legal Basis for Processing
We process your personal data on the basis of your explicit consent, which you provide by ticking the consent checkbox on the quote request form (Article 6(1)(a) GDPR). You may withdraw this consent at any time by contacting us at [email protected].
Where we enter into a business relationship following your enquiry, we may also process your data on the basis of contract performance (Article 6(1)(b) GDPR).
4. How We Use Your Data
We use the personal data you provide solely to:
- Respond to your wholesale quote request
- Follow up on your enquiry and manage the business relationship
- Send you relevant product and pricing information you have requested
We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for automated decision-making or profiling.
5. Analytics
This website uses Umami Analytics, a privacy-focused, cookie-free analytics tool. Umami collects only anonymous, aggregated data (page views, approximate geographic region, device type) and does not track individual users or store personally identifiable information. No consent is required for this analytics tool under GDPR.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law. In practice, enquiry data is retained for up to 3 years from the date of submission to allow for follow-up and business record-keeping. After this period, your data is securely deleted.
You may request deletion of your data at any time (see Section 8).
7. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encrypted data transmission (HTTPS/TLS)
- Access controls — only authorised administrators can view submitted data
- HTTP security headers (X-Frame-Options, Content-Security-Policy, etc.)
- Rate limiting to prevent automated abuse of the contact form
- Input validation and sanitisation on all form fields
8. Your Rights
Under GDPR, you have the following rights regarding your personal data:
| Right | What it means |
|---|---|
| Right of access | Request a copy of the personal data we hold about you |
| Right to rectification | Ask us to correct inaccurate or incomplete data |
| Right to erasure | Ask us to delete your personal data ('right to be forgotten') |
| Right to restriction | Ask us to limit how we use your data |
| Right to data portability | Receive your data in a structured, machine-readable format |
| Right to object | Object to processing based on legitimate interests |
| Right to withdraw consent | Withdraw consent at any time without affecting prior processing |
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically.
10. Contact Us
For any questions about this Privacy Policy or your personal data, please contact: