Privacy Policy

1. Data controller

The controller of the personal data collected through this website is:

Caric Safo SL
CIF: B22879795
Address: Av. Manuel Girona 30, 08860 Castelldefels, Barcelona, Spain
Contact email: pedidos@aloeveraymas.com
WhatsApp: +34 691 962 285
Trading name: Aloeveraymas

2. What personal data we may process

Depending on your relationship with Aloeveraymas, we may process the following categories of data:

• Identification data, such as first name and surname.
• Contact data, such as email address, telephone number, postal address, billing details or delivery details.
• Data related to orders, purchased products, incidents, returns or enquiries.
• Payment data, to the extent necessary to manage the purchase, usually processed through secure payment gateways.
• Browsing data, cookies, online identifiers or technical information about the device, depending on the cookie settings accepted by the user.
• Data voluntarily provided through forms, email, WhatsApp or other customer service channels.
• Data related to subscription to newsletters or commercial communications.

3. Purposes of processing

We may process your personal data for the following purposes:

Order management and commercial relationship

We process the data necessary to handle purchases, manage payments, prepare shipments, issue invoices, manage returns, resolve incidents and provide the service requested by the customer.

Customer service

We may process data provided by email, forms, WhatsApp or other channels in order to answer enquiries, manage requests, resolve incidents or provide support related to orders or products.

Creation and management of customer accounts

When a user creates an account, we process the data necessary to keep it active, facilitate future purchases, view previous orders and manage the customer relationship.

Commercial communications and newsletters

We may process email addresses or other contact details to send newsletters, promotions, news, discounts or information about Aloeveraymas products, provided that the user has given consent or there is another legal basis that allows it.

For the management of newsletters and commercial communications, we may use specialised email marketing tools such as Mailjet or other similar providers.

WhatsApp communications

WhatsApp is currently used mainly as a customer service channel. In the future, Aloeveraymas may use this channel for commercial communications only where there is user authorisation or an applicable legal basis, always offering the option to stop receiving such communications.

Analysis, website improvement and advertising

If the user accepts the corresponding cookies, we may process browsing data to analyse website usage, improve the user experience, measure advertising campaigns, analyse conversions or show advertisements related to our products.

Compliance with legal obligations

We may also process data to comply with tax, accounting, administrative, consumer, data protection or any other applicable legal obligations.

4. Legal basis for processing

The legal basis for processing personal data will depend on each purpose:

• Performance of a contract: to manage orders, payments, shipments, returns, customer accounts and purchase-related support.
• User consent: for sending newsletters, certain commercial communications, non-essential cookies or marketing actions that require consent.
• Legitimate interest: to respond to enquiries, improve website security, prevent fraud, handle incidents or send communications about similar products to customers, where permitted by law.
• Compliance with legal obligations: to keep invoices and respond to administrative, tax, accounting or consumer-related requirements.

5. Commercial communications

Aloeveraymas may send commercial communications by email or other electronic means when the user has subscribed, given consent or where there is a previous relationship that allows us to provide information about products or services similar to those purchased.

The user may unsubscribe at any time by following the unsubscribe link included in each commercial communication or by writing to pedidos@aloeveraymas.com.

6. Recipients and service providers

In order to provide our services, Aloeveraymas may share personal data with third parties when this is necessary to manage the relationship with the user or to comply with legal obligations.

These third parties may include, among others:

• Transport and logistics companies for the delivery of orders.
• Payment gateways and payment service providers.
• Technology providers, hosting, website maintenance, security and technical support providers.
• Email marketing and communication automation tools.
• Analytics, advertising measurement or marketing platform providers, where the user has accepted the corresponding cookies.
• Public authorities, courts, official bodies or advisers where there is a legal obligation.

Aloeveraymas will seek to ensure that providers processing data on behalf of the company offer appropriate guarantees of confidentiality, security and regulatory compliance.

7. International data transfers

Some technology providers used by Aloeveraymas may be located outside the European Economic Area or may process data from countries that do not offer a level of protection equivalent to that of Europe.

Where necessary, such providers must apply appropriate safeguards in accordance with applicable data protection regulations, such as standard contractual clauses or other legally established mechanisms.

8. Data retention period

Personal data will be kept for the time necessary to fulfil the purpose for which it was collected and, subsequently, for the applicable legal periods.

• Data related to orders, invoices and purchases will be kept for the applicable tax, accounting and consumer law periods.
• Customer account data will be kept while the user keeps their account active or requests its deletion.
• Data used for newsletters or commercial communications will be kept until the user withdraws consent or requests to unsubscribe.
• Data processed to respond to enquiries or incidents will be kept for the time necessary to manage the request and, where applicable, to deal with possible liabilities.
• Data obtained through cookies will be kept as indicated in the Cookie Policy and in the settings of each tool.

9. Users’ rights

The user may exercise, under the terms provided by the applicable regulations, the following rights:

• Right of access to their personal data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure of their data where applicable.
• Right to object to the processing of their data.
• Right to request restriction of processing.
• Right to data portability.
• Right not to be subject to individual automated decisions, where applicable.
• Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

If the user considers that their rights have not been properly addressed, they may lodge a complaint with the Spanish Data Protection Agency.

10. Data security

Aloeveraymas applies reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

However, no system for transmitting or storing information on the internet can guarantee absolute security, so the user should also take prudent measures when using their devices and credentials.

11. Children’s data

The Aloeveraymas website is not specifically aimed at minors. If we detect that personal data of a minor has been collected without the corresponding authorisation, we will take appropriate measures to delete it or regularise its processing.

12. Changes to the Privacy Policy

Aloeveraymas may modify this Privacy Policy when there are legal, technical, organisational changes or changes related to the data processing carried out through the website.

We recommend reviewing this policy periodically to stay informed about how we process personal data.