Privacy policy

This policy explains how we collect and use your personal data when you use our website, buy from us or contact us, and the rights you have.

1. Who is responsible for your data

The controller is Hifas da Terra S.L. , Quinta das Cabadas, Portamuiños 7, Bora, 36154 Pontevedra, Spain. Email: lopd@hifasdaterra.com. Telephone: +34 986 861 087.

For orders delivered to the United Kingdom, Hifas da Terra UK Ltd actúa como representante en el Reino Unido de Hifas da Terra S.L. (art. 27 UK GDPR)}}: Hifas da Terra UK Ltd (company number 11884717), 19 The Circle, Queen Elizabeth Street, London SE1 2JE, United Kingdom, hello@hifasdaterra.co.uk.

Orders delivered to other countries are processed by the group company listed in our Terms and Conditions, together with Hifas da Terra S.L.

2. Data we collect

• Identity and contact details: name, email address, telephone number, delivery and billing address.
• Order details: products bought, amounts, delivery and returns. Payments are processed by our payment providers; we do not store full card details.
• Account and subscription details, and your marketing preferences.
• Messages you send us and information you give in forms, including the product finder quiz.
• Technical data: IP address, device and browser information and how you use our website, collected through cookies with your consent where required.

3. Why we use your data and our lawful basis

Purpose	Lawful basis
Processing orders, subscriptions, deliveries, returns and payments; managing your account	Performance of a contract
Answering your enquiries and complaints	Performance of a contract or our legitimate interest in providing good customer service
Sending marketing emails and newsletters	Your consent (or, for existing customers in the UK, the "soft opt-in" for similar products, with an easy way to opt out in every message)
Personalised product suggestions from the product finder quiz	Your consent
Analytics and advertising cookies	Your consent
Preventing fraud and keeping our website secure	Our legitimate interests
Accounting, tax and product safety obligations	Legal obligation

We do not ask you to share health information. If you choose to include any in a message or in the quiz, we will use it only to answer you and will not use it for marketing. The quiz suggests products based on your answers; it does not make decisions with legal or similarly significant effects on you.

4. Who we share your data with

• Hifas da Terra group companies, to process your order and provide customer service.
• Service providers acting on our instructions: our e-commerce platform (Shopify), delivery companies, payment providers, email marketing and customer service tools, and IT providers.
• Klarna, if you choose to pay with Klarna, to assess and offer its payment options. See Klarna's privacy notice at https://www.klarna.com/uk/privacy/.
• Trusted Shops GmbH (Cologne, Germany), to display our reviews and, if you choose, to offer buyer protection and invite you to leave a review, based on our legitimate interest.
• Public authorities, where the law requires it.

We do not sell your personal data.

5. International transfers

Our group companies are in the UK and the European Union. The UK and the EU recognise each other's data protection standards as adequate. Some service providers may process data in other countries, such as the United States. Where this happens we use recognised safeguards, such as the UK International Data Transfer Agreement or Addendum, the EU standard contractual clauses or adequacy regulations (including the UK–US data bridge and the EU–US Data Privacy Framework).

6. How long we keep your data

We keep order and invoice data for as long as tax and accounting laws require (generally 6 years). We keep account data while your account is open, and marketing data until you unsubscribe. After that we delete or anonymise it.

7. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its use (including at any time to direct marketing), to data portability and to withdraw your consent at any time. To exercise your rights, email lopd@hifasdaterra.com (UK customers may also write to hello@hifasdaterra.co.uk). We may ask for information to confirm your identity, and we will reply within one month.

If you are unhappy with how we have used your data, please contact us first. You also have the right to complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk, 0303 123 1113); in Ireland, the Data Protection Commission (dataprotection.ie); in Spain, the Agencia Española de Protección de Datos (aepd.es).

8. Cookies

We use strictly necessary cookies to make our website work. We only use analytics, personalisation and advertising cookies if you agree. You can change your choices at any time using the "Consent preferences" button or your browser settings. Details of the cookies we use are set out in the cookie policy below.

9. Children

Our website and online shop are intended for adults. We do not knowingly collect personal data from children under 13 (UK) or under the minimum age set in your country.

10. Security

We use appropriate technical and organisational measures to protect your data. If a data breach is likely to put you at risk, we will tell you and the relevant authority as required by law.

11. Changes to this policy

We may update this policy. The date of the latest version is shown below.

Last updated:

Cookie Policy

What are cookies?

How do we use cookies?

Types of cookies we use

Manage cookie preferences

Consent Preferences