Privacy Policy – Easy Grow Seed
This Privacy Policy informs you how Easy Grow Seed (hereinafter referred to as “Easy Grow Seed” or “the Company”), as Data Controller, processes your personal data in compliance with the Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, and Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).
This document explains how we collect, use, and store personal data in accordance with data protection laws, and applies to users and customers who browse our website, create an account, place orders, or otherwise interact with Easy Grow Seed.

1. DATA CONTROLLER
   Company name: Easy Grow Seeds
   NIF:
   Registered Office:
   Mercantile Registry Data:
   IRUS:
   Email:
2. CATEGORIES OF PERSONAL DATA
   We collect only the data that is adequate, relevant, and necessary for the purposes described herein. Providing personal data is voluntary; however, failure to provide certain information may affect the provision or quality of our services.
   If you provide personal data of third parties, you must have obtained their prior consent and informed them of this Privacy Policy. The Company is not liable for any breach of this obligation.
   The categories of data we may process include:
   • Identification and contact data: full name, postal address (country, city, ZIP code, street, house and apartment number), telephone number, and email address.
   • Billing and payment data: billing address (if different from the shipping address), VAT number, and payment details. For payment execution, only essential data are transmitted securely to our payment service providers.
   • Connection, navigation, and usage data: IP address, browser information, date of visit, accessed content, links, and geolocation data (if expressly authorized).
   For details on cookies and tracking technologies, please refer to our Cookies Policy.
3. MINORS
   The Easy Grow Seed website is intended exclusively for persons over 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently obtained personal data from a minor, such data will be promptly deleted.
4. PURPOSE AND LEGAL BASIS FOR PROCESSING
   Easy Grow Seed processes personal data for the following purposes and on the following legal bases:
   (a) Order processing and customer service:
   To manage orders, respond to inquiries or complaints, and create user accounts.
   Legal basis: Execution of a contract or pre-contractual measures (Art. 6.1(b) GDPR).
   (b) Compliance with legal obligations:
   To comply with billing, accounting, and tax requirements.
   Legal basis: Compliance with legal obligations (Art. 6.1(c) GDPR).
   (c) Commercial communications:
   To send communications regarding products or services similar to those previously purchased.
   Legal basis: Legitimate interest (Art. 6.1(f) GDPR) for existing customers; consent (Art. 6.1(a) GDPR) for non-customers. Consent or objection can be withdrawn at any time via [email protected].
   (d) Newsletters and promotional updates:
   To send information about new products, offers, and discounts.
   Legal basis: Consent (Art. 6.1(a) GDPR). Consent may be revoked at any time via [email protected].
   (e) Advertising personalization via Meta Platforms:
   To use Meta’s “Custom Audiences” tool, which allows us to display relevant ads to consenting users. Data (such as email or phone number) is hashed and encrypted before transfer. Meta processes such data solely for audience creation and not for its own commercial purposes.
   Legal basis: Consent (Art. 6.1(a) GDPR).
   (f) Profiling and personalization:
   To analyze user behavior and customize offers accordingly.
   Legal basis: Consent (Art. 6.1(a) GDPR).
   (g) Quality and satisfaction surveys:
   To assess customer satisfaction with our services.
   Legal basis: Legitimate interest (Art. 6.1(f) GDPR). Participation is voluntary.
5. DATA RETENTION PERIODS
   Personal data will be retained only for the time necessary to fulfill the purpose for which it was collected and to comply with applicable legal obligations.
   Once data are no longer necessary, they will be securely blocked and retained only for the duration of applicable limitation periods to respond to potential legal claims or administrative requirements.
   Retention periods include:
   • 10 years (Art. 25 Law 10/2010 – Prevention of Money Laundering)
   • 6 years (Art. 30 Commercial Code)
   • 5 years (Art. 1964.2 Civil Code)
   • 4 years (Art. 66 General Tax Law 58/2003)
   User account data will be retained for as long as the account remains active. Users may request account deletion at any time by contacting [email protected]. Financial records will be retained for the legally required minimum period.
   Inquiries received through any communication channel will be retained for the duration of the inquiry and for two (2) years thereafter.
6. DATA RECIPIENTS
   Personal data will not be shared with third parties except:
   • When legally required, or
   • When expressly authorized by the data subject.
   We may engage third-party service providers (e.g., hosting, analytics, email delivery) acting as data processors under contracts ensuring compliance with GDPR requirements.
   Where data transfers occur outside the European Economic Area (EEA), they will comply with GDPR Chapter V, using either:
   • Adequacy decisions by the European Commission, or
   • Standard Contractual Clauses or equivalent safeguards ensuring adequate protection.
7. DATA PROTECTION RIGHTS
   You may exercise your rights under data protection law by sending a written request to:
   Easy Grow Seeds
   address
   Email: [email protected]
   Your rights include:
   • Right of access to your personal data;
   • Right to rectification or erasure;
   • Right to object to processing;
   • Right to restrict processing;
   • Right to data portability;
   • Right not to be subject to automated decision-making, including profiling.
   Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
   If you believe your rights have been violated, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) via www.aepd.es.
8. SOCIAL NETWORKS
   Easy Grow Seed maintains official profiles on Facebook, Instagram, X (Twitter), TikTok, Pinterest, LinkedIn, Reddit, and YouTube. Users may follow these profiles or interact through them voluntarily.
   Please note that personal data shared through these platforms is governed by each platform’s own privacy policy. We recommend reviewing their terms and adjusting your privacy settings accordingly.
9. SECURITY MEASURES
   Easy Grow Seed is committed to safeguarding your personal data. Appropriate technical and organizational security measures are implemented to prevent unauthorized access, alteration, loss, or disclosure.
   Access to personal data within Easy Grow Seed is restricted to employees who require it for their specific duties.
   Security procedures are regularly reviewed and updated to comply with current regulations and best practices. A designated Security Officer supervises compliance and continuous improvement.
   Our website and databases are hosted on secure servers located within the European Economic Area (EEA).
10. MODIFICATIONS TO THIS PRIVACY POLICY
    Easy Grow Seed reserves the right to modify this Privacy Policy to comply with new legal requirements or to reflect changes in our data processing practices.
    Any updates will be published on this page. We encourage users to review the Privacy Policy periodically.
    For questions or clarifications regarding this Policy, please contact us at [email protected].