Privacy Policy

---

Last updated: 29/09/2025

Vetiver Spain (“we,” “our,” “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website www.vetiverspain.com (the “Site”) or purchase our products.

1. Data Controller

Vetiver Spain acts as the data controller for all personal data collected via the Site.

If you have questions regarding this Privacy Policy, you can contact us at:

Email: info@vetiverspain.com

2. Information We Collect

We may collect the following categories of information:

• Personal identification data: name, email address, phone number, billing and shipping address.
• Transaction data: payment information, order details, invoices.
• Technical data: IP address, browser type, operating system, pages visited, and cookies (see Section 6).
• Communication data: any messages or inquiries you send us.

3. How We Use Your Information

We process your personal data for the following purposes:

• To process and deliver your orders.
• To manage payments and invoicing.
• To provide customer service and respond to inquiries.
• To send updates about your order and, if opted in, marketing communications.
• To improve our Site and user experience.
• To comply with legal and regulatory obligations (e.g., invoicing, EU phytosanitary documentation).

4. Legal Basis for Processing

We process your data under the following legal bases:

• Contractual necessity: to fulfill your order.
• Legal obligation: to comply with tax, customs, and plant health regulations.
• Legitimate interests: to improve services and prevent fraud.
• Consent: when you subscribe to our newsletter or accept cookies.

5. Data Sharing

We do not sell your personal data. We may share information only with:

• Shipping and logistics providers (for delivery of your order).
• Payment processors (to handle secure payments).
• Professional service providers (accountants, IT, website hosting).
• Public authorities when legally required (e.g., customs, plant health authorities).

All third parties are bound by confidentiality and GDPR compliance.

6. Cookies

Our Site uses cookies and similar technologies to:

• Ensure the proper functioning of the Site.
• Analyze traffic and improve performance.
• Personalize your experience.

You may disable cookies in your browser, but some features may not function correctly.

7. Data Retention

We keep your personal data only as long as necessary for the purposes described above:

• Order and invoicing data: retained for 6 years in compliance with Spanish tax law.
• Customer inquiries: retained for up to 2 years.
• Marketing subscriptions: retained until you unsubscribe.

8. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: to request a copy of your personal data.
• Rectification: to correct inaccurate data.
• Erasure: to request deletion of your data (“right to be forgotten”).
• Restriction: to limit processing of your data.
• Portability: to request your data in a portable format.
• Objection: to object to processing for marketing purposes.

To exercise these rights, contact us at [insert email].

9. Data Security

We use technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. However, no system is completely secure, and we cannot guarantee absolute security.

10. International Transfers

We primarily store and process data within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure adequate safeguards (e.g., EU Standard Contractual Clauses).

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated “Last updated” date. Continued use of the Site after changes indicates your acceptance of the updated Policy.

12. Complaints

If you believe your data protection rights have been violated, you may lodge a complaint with the Spanish Data Protection Authority (AEPD) or your local supervisory authority.