Privacy policy

Last updated: June 3, 2026

Herbolario Salcedo operates this store and website, including all related content, features, tools, products and services (the "Services"). Our store is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy explains how we collect, use, and share your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us. If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy applies with respect to your personal information.

Please read this policy carefully. By using the Services, you acknowledge that you have read and understood how we handle your information as described here. For the purposes of the EU General Data Protection Regulation (GDPR), Herbolario Salcedo is the data controller of your personal information.

Information we collect

Depending on how you interact with us, we may collect or process the following, including any inferences we draw from it:

Contact details such as your name, billing and shipping address, phone number, and email address. Payment information such as your payment card details, transaction details, payment method, and payment confirmation. Account information such as any username, password, preferences and settings. Transaction information such as the items you view, add to your cart, purchase, return or cancel, and your order history. Communications such as the information you include when you contact our customer support. Device information such as your device, browser, network connection, IP address, and similar identifiers. Usage information such as how and when you interact with the Services.

Where the information comes from

We collect personal information directly from you, for example when you place an order, create an account, or contact us. We also collect it automatically through your device and through cookies and similar technologies, from our service providers who process information on our behalf, and from our partners or other third parties.

How we use your information

We use your personal information to provide and improve the Services, which includes fulfilling your orders, processing payments, arranging shipping, handling returns and exchanges, managing any account you create, enabling product reviews, and tailoring your shopping experience. We use it for marketing, such as sending you promotional emails where you have agreed to receive them and showing you relevant online advertising. We use it for security and fraud prevention, to keep your account and payments secure and to detect and act on suspicious activity. We use it to communicate with you and provide customer support. And we use it to meet our legal obligations and to enforce our terms and policies.

Under GDPR we rely on one or more of the following legal bases: performance of our contract with you when we process your orders; your consent, for example for marketing emails or non essential cookies; our legitimate interests, such as improving our Services and preventing fraud; and compliance with legal obligations.

How we share your information

We may share your personal information with Shopify and other vendors who perform services for us, such as IT, payment processing, analytics, customer support, cloud storage, fulfilment and shipping. We may share it with marketing partners to advertise to you, who use your information in line with their own privacy notices. We may share it where you ask or consent, such as to ship your order. We may share it in connection with a business transaction such as a merger, to comply with legal obligations, to respond to lawful requests, and to protect our rights and the rights of our users.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes information about your use of the Services to provide and improve them for us. Information you submit may be transmitted to Shopify and to third parties that may be located in countries other than where you live. For some enhanced features, Shopify may use information about your interactions with our store, other merchants, and Shopify itself, and in those cases Shopify is responsible for that processing. To learn more, you can review the Shopify Consumer Privacy Policy.

Third party links

Our Services may link to websites operated by others. If you follow those links, you should review their own privacy and security policies. We are not responsible for the privacy practices or content of third party sites, and including a link does not mean we endorse them.

Children

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority where you live. If you are a parent or guardian and believe your child has given us their information, please contact us using the details below and we will delete it.

Security and retention

No security measures are perfect, and information sent to us may not be secure while in transit, so please do not use unsecure channels to send us sensitive information. How long we keep your personal information depends on factors such as whether we need it to provide the Services, maintain your account, comply with legal obligations, or resolve disputes.

Your rights

Depending on where you live, you may have some or all of the following rights regarding your personal information. These rights are not absolute and may apply only in certain circumstances.

The right to access the personal information we hold about you. The right to ask us to delete it. The right to correct inaccurate information. The right to receive a copy of your information and, in certain cases, have it transferred to a third party. The right to opt out of the sale or sharing of your information for targeted advertising. You can opt out of promotional emails at any time using the unsubscribe link in our emails, though we may still send you non promotional messages about your account or orders.

If you are in the United Kingdom or the European Economic Area, you also have, subject to local law, the right to object to or restrict our processing of your information, and the right to withdraw consent at any time where we rely on consent. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

To exercise any of these rights, contact us using the details below. We may need to verify your identity first. You may use an authorised agent to make a request on your behalf, in which case we will require proof of their authorisation. We will not discriminate against you for exercising your rights and will respond within the time required by law.

Complaints

If you have a complaint about how we handle your personal information, please contact us first using the details below. If you are in the EEA, you also have the right to lodge a complaint with your local data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

International transfers

We may transfer, store and process your personal information outside the country where you live. If we transfer it out of the European Economic Area or the United Kingdom, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses, unless the destination country has been recognised as providing an adequate level of protection.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. We will post the updated version here, update the "Last updated" date, and provide notice where the law requires it.

Contact

If you have any questions about this Privacy Policy or your personal information, or you would like to exercise any of your rights, please email us at info@herbolariosalcedo.es. For the purposes of applicable data protection law, Herbolario Salcedo is the data controller of your personal information.