Privacy policy

The Verdinova shop is operated by Verdinova, an activity dedicated to growing and selling fresh microgreens in Madrid. We are responsible for the personal data collected when you browse tienda.verdinova.es, create an account, place an order, use the loyalty programme or contact our team.

For any question about your personal data, you can contact us at verdinovamadrid@gmail.com.

We collect only the information needed to operate the shop, prepare orders and manage customer relationships.

• Identity and contact details: first name, last name, email address, phone number and company where relevant.
• Customer account: identifier, login history, language preferences, delivery and billing addresses.
• Orders: purchased products, quantities, prices, discounts, order status, delivery notes and invoices.
• Payment: information strictly required for payment, processed by Stripe. Verdinova does not store full card numbers.
• Loyalty: points balance, referrals, redeemed rewards and loyalty plan membership.
• Technical data: IP address, device, browser, cookies, security logs and browsing statistics.

Your data is used to provide a clear, reliable and personalised service. We never sell it.

• Create and secure your customer account.
• Record, prepare, deliver and track your microgreens orders.
• Manage payments, refunds, invoices and subscriptions.
• Apply discounts, loyalty benefits and referral codes.
• Respond to support requests and keep you informed about your orders.
• Improve the website, measure performance and prevent abuse or fraud.
• Comply with accounting, tax and legal obligations.

Depending on the context, processing is based on contract performance when you place an order, our legal obligations for accounting and invoicing, our legitimate interest in securing the shop and improving the service, or your consent for certain cookies and marketing communications.

We share certain data with providers that are strictly necessary for the shop to function. These providers act on our behalf or as independent controllers depending on their role.

• Supabase for authentication, database hosting and account management.
• Stripe for payments, subscriptions, refunds and payment methods.
• Vercel for hosting the shop and technical logs.
• Cloudinary for hosting and optimising certain images.
• Resend or an equivalent provider for transactional emails.
• Delivery partners when needed to ship your order.

We keep your data for as long as necessary for the purposes described above. Account data is kept while your account remains active. Orders, invoices and accounting data may be retained for the periods required by law. Technical data and security logs are kept for a limited period proportionate to service security.

The shop uses essential cookies to maintain your session, secure your account, keep your cart and remember certain preferences. Technical measurements may also help us understand site performance. Where required by law, we ask for your consent before using non-essential cookies.

We apply reasonable measures to protect your data: encrypted connections, access controls, specialised payment services, separation of administrative roles and technical monitoring. No system is infallible, but we work to limit the risks of unauthorised access, loss or alteration.

Under the GDPR, you may request access to your data, rectification, erasure, restriction of processing, objection to certain processing, data portability and withdrawal of consent where processing is based on consent.

You can exercise these rights by contacting us at verdinovamadrid@gmail.com. To protect your account, we may ask you to confirm your identity before processing the request.

The shop is not intended for children. If we learn that data from a child has been collected without appropriate authorisation, we will take the necessary steps to delete it.

We may update this policy to reflect changes to the shop, our providers or our legal obligations. The update date shown at the bottom of the page identifies the most recent version.