Privacy Policy - Massa's Haven

This Privacy Policy explains how Massa's Haven collects, uses, and protects your personal information in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws. Massa's Haven, located in Barcelona, Spain, is the data controller responsible for your personal information.

Information We Collect

We collect personal information such as your name and contact details when you make a purchase or create an account, billing and shipping addresses for order processing, your email address for communications and newsletters (with consent), and payment information processed securely by Stripe. We also collect technical information including website usage data and analytics, cookies, and device and browser information.

Legal Basis for Processing

We process your personal data based on contract performance (to fulfill orders), legitimate interests (business operations, fraud prevention, website improvement), consent (marketing communications and non-essential cookies), and legal obligation (accounting and tax requirements).

Data Sharing and Processors

We share your data only when necessary with trusted processors: Supabase for database hosting and authentication, Stripe for secure payment processing, Google Analytics for anonymized website analytics, Google Ads for marketing analytics with consent, and shipping providers for order delivery.

Data Retention

We retain order information for 7 years for accounting and tax purposes, marketing communications until you unsubscribe, website analytics for 26 months, and account information until you request deletion.

Your GDPR Rights

Under GDPR you have the right to access, rectification, erasure, portability, restriction, objection, and withdrawal of consent. To exercise these rights, contact us through our website. You also have the right to lodge a complaint with your local data protection authority.

Cookies, Security and Children's Privacy

We use essential, analytics, and marketing cookies, and our cookie banner lets you control non-essential cookies. We implement encryption, access controls, and regular security assessments to protect your data. Our services are not directed to children under 16.