This Privacy Policy (“Policy”) describes how ChocoChip.com (“we,” “us,” or “our”) collects, uses, and discloses your information when you visit our website (the “Website”) and use our services (collectively, the “Services”). This Policy applies specifically to users located in the European Economic Area (“EEA”).

We are committed to protecting the privacy of our users and complying with all applicable data protection laws and regulations, including the General Data Protection Regulation (“GDPR”).

1. Information We Collect
We collect several types of information for various purposes to provide and improve our Services to you.  

Information you provide directly: We collect information you provide directly when you use our Services. This may include:

Personal data such as your name, email address, and IP address (when necessary)
Information you submit through contact forms or comments sections
Data collected during account creation (if applicable)
Information collected automatically: When you use our Services, we may automatically collect certain information about your device and browsing activity. This may include:

Device information such as your browser type, operating system, and IP address
Usage data such as the pages you visit, the links you click, and the searches you conduct
Cookie data (see below)

2. Use of Information
We use the information we collect for several purposes, including:

To provide and operate the Services
To personalize your experience on the Website
To respond to your inquiries and requests
To send you marketing and promotional communications (with your consent)
To analyze how you use our Services
To improve the content and functionality of the Website
To comply with legal and regulatory obligations

3. Legal Basis for Processing
We process your information based on several legal grounds under the GDPR:

Consent: We may process your information based on your specific consent for a particular purpose.
Contract: We may process your information to fulfill our contractual obligations to you.
Legitimate Interests: We may process your information for our legitimate interests, such as improving our Services, providing customer support, and preventing fraud. However, we will only do so where your interests and rights do not override these legitimate interests.

4. Data Retention
We will retain your information for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal and regulatory obligations. When no longer needed, we will delete your information securely.  

5. Sharing of Information
We may share your information with third-party service providers who help us operate the Website and provide the Services. These service providers are bound by contractual obligations to keep your information confidential and secure.

We may also share your information with third-party advertisers who use non-personally identifiable information to deliver targeted advertising to you. However, we will only do so with your consent, which you can withdraw at any time.

We will not share your information with any other third party without your consent, except as required by law or to protect our rights and interests.

6. Your Rights
Under the GDPR, you have certain rights regarding your personal data. These rights include:

The right to access your data: You have the right to request a copy of the information we hold about you.  
The right to rectification: You have the right to request that we correct any inaccurate information we hold about you.  
The right to erasure: You have the right to request that we delete your information.
The right to restrict processing: You have the right to request that we restrict the processing of your information.
The right to data portability: You have the right to request that we transfer your information to another controller.
The right to object to processing: You have the right to object to the processing of your information.
You can exercise these rights by contacting us using the contact information provided below.  

7. Security
We take reasonable precautions to protect your information from unauthorized access, disclosure, alteration, or destruction. However, no website or internet transmission is completely secure. We cannot guarantee the security of your information.  

8. Children’s Privacy
Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us. We will take steps to remove the information from our systems.  

9. Adsense Compliance
We are committed to complying with Adsense policies for Europe. This includes:

Obtaining user consent for the collection and use of personal data for advertising purposes.
Providing users with clear and concise information about how their data is collected, used, and shared.
Offering users control