In this policy we explain what personal data we process when you visit naturcera.com, buy from the store or contact us, what we use it for, who we share it with and how you can exercise your rights. We comply with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR; Reglamento General de Protección de Datos, RGPD), Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales, LOPDGDD) and Law 34/2002 on Information Society Services (Ley 34/2002 de Servicios de la Sociedad de la Información, LSSI-CE).
1. Data controller
- Company name: PRODUCTES QUIMICS NATURALS SL (trade name Naturcera)
- Tax ID (NIF): B60896743
- Address: Pol. Ind. La Bóbila, Carrer Indústria, 6, 2.ª planta, 08320 El Masnou (Barcelona)
- Email: contacto@naturcera.com
- Phone: (+34) 618 08 43 43
2. What data we process
- Identification and contact data: first name, surname, email, phone number and shipping and billing addresses.
- Company data, if you buy as a professional: company name and tax ID (NIF/CIF).
- Order data: products, amounts, chosen payment method, shipments, returns and incidents. We do not store your full card details: they are processed directly by the payment gateways.
- Customer account data, if you create one.
- Communications you have with us by email, phone, forms, WhatsApp, Instagram or the website chat.
- Browsing data: IP address, device, browser, pages visited and data collected through cookies, according to your choice in the cookie banner.
- Reviews you publish about our products.
We do not process special categories of data. This website is not aimed at minors under 18, who should not provide us with personal data.
3. What we use your data for and on what legal basis
| Purpose | Legal basis | Retention period |
|---|---|---|
| Managing your orders: payment, shipping, invoicing, returns, warranties and after-sales service. | Performance of the contract (art. 6.1.b GDPR) and legal tax and commercial obligations (art. 6.1.c). | For the duration of the relationship and, afterwards, for the legal periods (6 years for commercial and accounting records; 4 years for tax purposes). |
| Managing your customer account. | Performance of the contract. | Until you ask us to close it. |
| Answering your enquiries and quote requests (forms, email, phone, chat, WhatsApp, Instagram). | Pre-contractual measures at your request (art. 6.1.b) or legitimate interest in assisting you (art. 6.1.f). | For as long as needed to resolve the enquiry and up to 1 year afterwards. |
| Sending you the newsletter and commercial communications if you subscribe (for example, when you request the discount coupon or the free course). | Your consent (art. 6.1.a), which you can withdraw at any time. | Until you unsubscribe. |
| Emailing you information about products similar to those you have already bought. | Legitimate interest, in accordance with art. 21.2 of the LSSI-CE. You can object in every email. | Until you object. |
| Asking for your review after your purchase and publishing the reviews you leave us. | Legitimate interest in knowing customer satisfaction; publication with your consent when you submit the review. | While the review is published or until you ask us to remove it. |
| Analysing website use and showing personalised advertising through cookies. | Your consent in the cookie banner. | As indicated in the Cookie Policy. |
| Preventing fraud and ensuring the security of the store and payments. | Legitimate interest (art. 6.1.f). | For as long as needed for that purpose. |
| Handling requests to exercise your rights and any complaints. | Legal obligation (art. 6.1.c). | During the limitation periods for legal actions. |
We do not make decisions based solely on automated processing that produce legal effects on you. We may group subscribers by interests or purchase history to send them more relevant communications.
4. Who we share your data with
We do not sell your data. We only disclose it to third parties when necessary to provide the service or when required by law:
-
Providers that process data on our behalf (data processors):
- Shopify (online store platform and payments with Shopify Payments and Shop Pay).
- Payment gateways and methods: PayPal, Bizum and Google Pay.
- Klaviyo (email sending, subscription forms and review management).
- Botpress (chat assistant on the website, WhatsApp and Instagram).
- Sendcloud and the transport and courier companies that deliver your order.
- Providers of invoicing, accounting, advisory, email and cloud storage services.
- Advertising and analytics platforms (Google and Meta), only if you accept the corresponding cookies.
- Review platforms such as Trustpilot, if you choose to leave a review there.
- Public authorities, courts and law enforcement, where there is a legal obligation.
5. International transfers
Some of these providers (for example, Shopify, Klaviyo, Botpress, Google, Meta or PayPal) may process data outside the European Economic Area, mainly in the United States or Canada. In such cases, the transfer is based on an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework, for participating companies, or the decision on Canada) or on the standard contractual clauses approved by the European Commission.
6. Your rights
You can exercise the following rights at any time:
- Access: find out what data about you we process.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data when it is no longer necessary.
- Objection: object to processing based on legitimate interest, including the sending of commercial communications.
- Restriction: ask us to keep your data only for the purpose of claims.
- Portability: receive your data in a structured format or have us send it to another controller.
- Withdraw the consent you have given us, without affecting prior processing.
To exercise them, write to us at contacto@naturcera.com or by post to the address in section 1, stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you for additional information to verify it. We will reply within one month. To unsubscribe from the newsletter, you can also use the link at the bottom of every email.
If you believe we have not processed your data correctly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the supervisory authority of your country of residence in the European Union.
7. Security
We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or alteration: encrypted connection (HTTPS), access to data restricted to authorised staff, and providers that offer sufficient guarantees under the GDPR.
8. Accuracy of data
You undertake to provide us with truthful and up-to-date data. If you give us another person's data (for example, the recipient of an order), you guarantee that you have informed them and that you are entitled to provide it.
9. Cookies
We use first-party and third-party cookies. You can find the details and how to manage them in our Cookie Policy.
10. Changes to this policy
We may update this policy to adapt it to legal changes or changes in our services. We will always publish the current version on this page, with its update date.
Last updated: 29 October 2026
