Privacy Policy
Last update: March 24, 2025
This Privacy Policy describes how GustoPharma Consumer Health S.L. (“Site”, “we”, “us” or “our”) collects, uses and discloses your personal information when you visit or use our services or otherwise communicate with us with respect to the Site (collectively, the “Services”). For purposes of this Privacy Policy, the terms “you” and “your” refer to you as a user of the Services, whether as a customer, a visitor to the Site or as any other individual whose information we have collected in accordance with this Privacy Policy.
Please read this Privacy Policy carefully.
Changes to this Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in our practices or for any other operational, legal or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last Updated” date, and take any other action that may be required by applicable law.
Collection and use of your personal information
To provide the Services, we collect personal information about you from a variety of sources, as set forth below. The information we collect and use varies depending on how you interact with us.
In addition to the specific uses set forth below, we may use the information we collect to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce applicable terms of service, and protect or defend the Services, our rights, those of our users and others.
Personal information we collect
The types of personal information we collect about you depend on how you interact with our Site and how you use our Services. The term “personal information” is used to refer to information that individually identifies or describes you, as well as information that can be linked or associated with you. The following sections describe the specific categories and types of personal information we collect.
Information we collect directly from you
Information you submit directly to us through our Services may include the following:
Contact details: include your name, address, telephone number and e-mail address.
Order information: includes your name, billing address, shipping address, payment confirmation, email address and phone number.
Account Information: includes your username, password, security questions and other information used for account security purposes.
Customer Service Information: includes information that you choose to include in communications with us, such as, for example, when you send a message through the Services.
Some features of the Services may require you to provide us with certain information about yourself directly. You may choose not to provide this data; however, this may prevent you from using or accessing these features.
Information we collect about your use
We may also automatically collect certain information about your interaction with the Services (“Usage Data”). To do so, we may use cookies, pixels and similar technologies (“Cookies”). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information about your interaction with the Services.
Information we obtain from third parties
Finally, we may obtain information about you from third parties, including vendors and service providers who may collect information on our behalf, such as:
Companies that support our Site and Services.
Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to prepare your orders and provide the products or services you have requested so that we can fulfill our contract with you.
When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information through online tracking technologies, such as, for example, pixels, web beacons, software developer kits, external libraries and cookies.
Any information we obtain from third parties will be treated in accordance with this Privacy Policy. Please also see the following section, Third Party Websites and Links.
Use of your personal information
Provision of Services and Products. We use your personal information to provide the Services to you and thereby fulfill our contract with you, including processing your payments, preparing orders, sending notifications related to your account, as well as your purchases, returns, exchanges or other transactions, in order to create, maintain and administer your account, arrange for shipping, facilitate returns or exchanges, and other features and functionality related to your account. We may also enhance your shopping experience by allowing Shopify to link your account to other Shopify services that you choose to use. In this case, Shopify will process your information as set forth in its Privacy Policy and Consumer Privacy Policy.
Marketing and Advertising. We may use your personal information for marketing and promotional purposes, such as sending you marketing, advertising and promotional communications by email, text message or postal mail, as well as to show you advertisements for products or services. This may include using your personal information to better tailor the Services and advertising both on our Site and on other websites. If you are an EEA resident, the legal basis for these data processing activities is our legitimate interest in selling our products, in accordance with Art. 6 (1) (f) of the GDPR.
Security and Fraud Prevention. We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity. If you choose to use the Services and register an account, you are responsible for keeping your account credentials secure. We strongly recommend that you do not share your username, password or other details with anyone. If you believe your account has been compromised, please contact us immediately. If you are an EEA resident, the legal basis for these data processing activities is our legitimate interest in maintaining the security of our website, both for you and for other customers, in accordance with Art. 6 (1) (f) of the GDPR.
Communications and Service Improvement. We use your personal information to provide you with customer services and to improve our Services. This is in our legitimate interest in order to be able to respond to you, as well as to provide effective services and maintain our business relationship with you in accordance with art. 6 (1) (f) of the GDPR.
Cookies
As with many other websites, our Site also uses cookies. For specific information about the Cookies we use in connection with the operation of our Shopify store, see https://www.shopify.com/legal/cookies. We use Cookies to operate and improve our Site and our Services (including to remember your actions and preferences), as well as for reporting and statistical purposes and to better understand user interaction with the Services (in our legitimate interest to administer, improve and optimize the Services). We may also allow third parties and service providers to use Cookies on our Site to better customize the services, products and advertising on our Site and other websites.
Most browsers automatically accept Cookies by default, but you can choose to set your browser to delete or reject Cookies through your browser controls. Please note that deleting or blocking Cookies may adversely affect your user experience and may cause some of the Services, including certain features and general functionality, to function improperly or become unavailable. In addition, blocking Cookies may not completely prevent information from being shared with third parties, such as our advertising partners.
Disclosure of your personal information
In certain circumstances, we may disclose your personal information to third parties for contract performance, legitimate purposes or other reasons under this Privacy Policy. Such circumstances may include the following:
With vendors or other third parties who provide services on our behalf (e.g., IT management, payment processing, reporting and data statistics, customer support services, cloud storage, preparation and shipping).
With business and marketing partners to display advertising and provide services to you. Our business and marketing partners will use your information in accordance with their own privacy notices.
When you indicate, request or otherwise consent to our disclosure of certain information to third parties, such as, for example, to send you products or through the use of social media widgets or login integrations with your consent.
With our affiliates or otherwise within our corporate group, in our legitimate interest to conduct a successful business.
In connection with business transactions, such as, for example, mergers or bankruptcies, to comply with applicable legal obligations (including responding to subpoenas, search warrants and similar requests), to enforce applicable terms of service, and to protect or defend the Services, as well as our rights, those of our users and others.
We disclose the following categories of personal information and sensitive personal information about users for the purposes described above in “Collection and Use of Your Personal Information” and “Disclosure of Your Personal Information”:
Category
Categories of recipients
Identifiers such as basic contact details and specific order and account information.
Business information, such as order data, purchase information and customer service information.
Internet or other similar network activity, such as usage data.
Geolocation data, such as locations determined by IP address or other technical measures.
Vendors and third parties who provide services on our behalf (such as Internet service providers, payment processors, fulfillment partners, customer service partners, and data reporting and statistics providers).
Business and marketing partners.
Affiliates
We do not use or disclose sensitive personal information without your consent or for the purpose of inferring characteristics about you.
With your consent, we share personal information for the purpose of engaging in advertising and marketing activities as indicated below.
Third-party websites and links
Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to unaffiliated sites or sites that are not under our control, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of the information found there. Information you provide on public or semi-public sites, including information you share on external social media platforms, may also be visible to other users of the Services and/or users of such external platforms, without limitation as to its use by us or any third party. Our inclusion of such links does not, by itself, imply any endorsement of the content of such platforms or their owners or operators, except as disclosed on the Services.
Children’s data
The Services are not intended for use by children, so we do not intentionally collect any personal information about children. If you are a parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details below to request deletion.
As of the effective date of this Privacy Policy, we have no actual knowledge that we “share” or “sell” (as such terms are defined under applicable law) personal information of children under the age of 16.
Security and retention of your information
Please note that no security measures are perfect or impenetrable, so we cannot guarantee “perfect security”. In addition, the information you send us may not be secure while in transit. Therefore, we recommend that you do not use insecure channels to communicate sensitive or confidential information.
How long we keep your personal information depends on a number of factors, such as whether we need the information to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.
Your rights
Depending on where you live, you may have some or all of the rights listed below with respect to your personal information. However, such rights are not absolute and may apply only in certain circumstances, which would allow us to refuse your request in certain cases and as permitted by law.
Right of access/knowledge: You may have the right to request access to the personal information we have about you, including details regarding the ways in which we use and share your information.
Right of Deletion: You may have the right to request deletion of personal information we hold about you.
Right to Correction: You may have the right to request correction of inaccurate personal information we hold about you.
Right of portability: You may have the right to receive a copy of the personal information we maintain about you and to request its transfer to a third party, under certain circumstances and with certain exceptions.
Right to Opt-Out of Selling, Sharing or Targeting: You may have the right to request that we not “sell” or “share” your personal information or opt-out of processing your personal information for the purposes of sending “targeted advertising” as defined in applicable privacy laws. Please note that if you visit our Site with the Global Privacy Control opt-out opt-out signal enabled, depending on where you are located, this will be treated as a request to opt-out of “selling” or “sharing” information for the device and browser you use to visit the Site.
Restriction of Processing: You may have the right to request that we stop or restrict the processing of personal information.
Revocation of Consent: Where we rely on your consent to process your personal information, you may have the right to withdraw such consent.
Appeal: You may have the right to appeal our decision if we refuse to process your request. To do so, you may respond directly to our denial.
Managing Communication Preferences: We may send you promotional emails and you may unsubscribe at any time through the unsubscribe option available in the emails we send. If you unsubscribe, we may still send you non-promotional emails, such as those related to your account or orders you have placed.
You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below.
Please be aware that exercising any of these rights will not be grounds for any discrimination on our part. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request. In accordance with applicable law, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting requests from an agent, we will require you to provide proof that you have authorized the agent to act on your behalf. We may also require you to verify your identity directly with us. We will respond to your request in a timely manner as required by applicable law.
Claims
If you have any complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with the response we have provided to your complaint, depending on where you live, you may have the right to appeal our decision by contacting us via the contact details provided below, or to lodge your complaint with your local competent data protection authority. For the EEA, you will find a list of the authorities responsible for data protection supervision here.
International users
Please note that we may transfer, store and process your personal information outside the country in which you live. Your personal information will also be processed with staff and service providers of third parties and partners in those countries.
If we transfer your personal information outside of Europe, we will use recognized transfer mechanisms, such as the European Commission’s Standard Contractual Clauses or any equivalent contract issued by the UK competent authority, as applicable, unless the data transfer is to countries that provide an adequate level of protection.
Contact
If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your rights, you may call us by phone or send an e-mail to info@gustopharma.es.
For the purposes of applicable data protection laws, and unless explicitly stated otherwise, we are the data controllers of your personal information.
