Privacy Policy

TRANSPARENCY ABOVE ALL

In brief

We know that privacy policies can be dense. Before going into the legal detail, here is the essential information:

🔒

Your data, protected

We apply technical and organisational security measures to protect your information at all times.

🛒

Only what is necessary

We collect only the data strictly necessary to manage your order and improve your experience.

🚫

We never sell your data

We do not sell your personal information to third parties for advertising purposes.

✉️

You choose what to receive

The newsletter is always optional and you can unsubscribe with one click, whenever you wish.

🌍

We comply with the GDPR

We operate in accordance with the General Data Protection Regulation and current Spanish law.

🗑️

Full control

You can access, correct or delete your data and your account whenever you wish, without complications.

1. Who we are

The controller of your personal data is Almate — Vitall Bienestar S.L. — CIF: B10793826 — VAT: ES-B10793826 —, with registered address at Carretera de Jaén, 52, 02006 Albacete (Spain), and contact email address hola@almate.shop. Throughout this document we will refer to this entity as «Almate», «we» or «the Controller».

If you have any questions about the processing of your data, you can write to us directly at hola@almate.shop or via our contact form.

2. What data we collect

We collect only the data necessary to provide you with our products and services. Depending on how you interact with almate.shop, we may process the following categories of data:

Identification and contact data: name, surname, email address, telephone and postal addresses for shipping and billing.
Account data: username, password (stored in encrypted form), order history and wish list.
Payment data: we do not store your full card details. Payments are processed through certified external payment gateways (e.g. Stripe, PayPal or Redsys), which comply with the PCI-DSS security standard.
Browsing data: IP address, device type and browser, pages visited and cookies (see section 8).
Communications: messages you send us via the contact form, email or social media.
Newsletter: your email address, only if you subscribe voluntarily.

3. How we use your data

We process your personal data for the following purposes:

Managing, processing and shipping your orders, including invoicing and handling returns or complaints.
Creating and managing your customer account, including your wish list and purchase history.
Responding to your enquiries via the contact form or email.
Sending you our newsletter with news, recipes and offers, only if you have given your express consent.
Analysing and improving the functioning of the website, our products and the shopping experience.
Preventing fraud and ensuring the security of our platform.
Fulfilling our legal, tax and accounting obligations.

4. The legal basis for these processings

The legal basis that allows us to process your personal data depends on the specific purpose:

Performance of a contract (Art. 6.1.b GDPR): to manage your order, your customer account and to handle your return or guarantee requests.
Consent (Art. 6.1.a GDPR): for sending the newsletter and using non-essential cookies, which you can always withdraw.
Legitimate interest (Art. 6.1.f GDPR): to ensure website security, prevent fraud and improve our services, without disproportionately affecting your rights.
Legal obligation (Art. 6.1.c GDPR): to comply with applicable tax, commercial and consumer regulations, such as the retention of invoices.

5. How long we retain your data

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, and thereafter for the periods required by applicable regulations:

Customer account data: for as long as your account remains active. If you request its deletion, the data will be erased or anonymised, except information we must retain by legal obligation.
Order and billing data: a minimum of 6 years, in accordance with Spanish commercial and tax regulations (Art. 30 of the Commercial Code and the General Tax Law).
Newsletter: until you unsubscribe, which you can do at any time via the link included in each communication.
Contact form: the time necessary to resolve your enquiry and, at most, an additional 12 months for follow-up and quality purposes.
Cookies: depending on their purpose, from the duration of your session to a maximum of 24 months (see section 8).

6. With whom we share your data

We do not sell or transfer your personal data to third parties for advertising purposes. However, to provide you with our services, we share certain information with trusted providers who act as data processors, subject to contracts that guarantee the confidentiality and security of your data:

Hosting and maintenance providers of the web platform.
Payment gateways (such as Stripe, PayPal or Redsys), to process your purchases securely.
Transport and courier companies (such as Correos, SEUR or similar), only with the data necessary to deliver your order.
Email marketing tools, for sending the newsletter to subscribers.
Web analytics tools, which help us understand how the website is used and improve it.
Public authorities and regulatory bodies, when there is a legal obligation to do so.

7. International data transfers

Some of the providers mentioned above may be located, or process data, outside the European Economic Area (EEA) — for example, in the United States. In such cases, we ensure that the transfer is subject to appropriate safeguards, such as adequacy decisions by the European Commission or the signing of Standard Contractual Clauses (SCCs) approved by the European Commission, which require these providers to offer a level of protection equivalent to that required by the GDPR.

8. Cookies

Our website uses cookies and similar technologies to improve your browsing experience. We distinguish the following types:

Technical or necessary cookies: essential for the functioning of the website, such as keeping your session active or your shopping cart contents. They do not require consent.
Preference cookies: allow us to remember your choices (language, recently viewed products) to offer you a more personalised experience.
Analytical cookies: help us understand how users navigate the website, in aggregated and anonymous form where possible, in order to improve it.
Marketing cookies: used, where applicable, to show you more relevant content and advertising.

You can accept, reject or configure the use of non-essential cookies at any time from your browser's cookie settings panel, where you can also delete already stored cookies. Please note that blocking certain cookies may affect the functioning of the website.

9. Data security

We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk of the processing, including:

Encrypted connection using HTTPS/SSL protocol throughout the website.
Encrypted storage of passwords and sensitive data.
Restricted access to personal data, limited to staff who need it to perform their work.
Regular backups and security updates for the software and platform.
Periodic review of our providers and the security measures implemented.

Despite these measures, no system is completely infallible. If a security breach were to occur that could pose a risk to your rights and freedoms, we will notify you, together with the competent supervisory authority, as required by the GDPR.

10. Minors

The products and services offered on almate.shop are directed at persons over 18 years of age. We do not knowingly collect personal data from minors. If you are a parent or legal guardian and believe that a minor in your care has provided us with their personal data without your consent, please contact us at hola@almate.shop so that we can delete it as soon as possible.

YOUR RIGHTS

11. You are in control of your data

The GDPR grants you a series of rights over your personal data, which you can exercise at any time free of charge:

👁

Access

Know what data of yours we process, for what purpose and for how long.

✏️

Rectification

Correct inaccurate or incomplete data, such as your address or telephone number.

🗑️

Erasure

Request the deletion of your data when it is no longer necessary (“right to be forgotten”).

⏸️

Restriction

Ask us to restrict the processing of your data in certain circumstances.

📦

Portability

Receive your data in a structured, commonly used format, or transfer it to another provider.

✋

Objection

Object to the processing of your data based on legitimate interest or for direct marketing purposes.

You can also withdraw at any time the consent you have given — for example, to receive our newsletter — without this affecting the lawfulness of processing prior to its withdrawal. We also do not subject you to decisions based solely on automated processing that produce significant legal effects on you.

How can you exercise your rights?

You can exercise any of these rights free of charge by writing to us at hola@almate.shop or by post to Carretera de Jaén, 52, 02006 Albacete (Spain), stating the right you wish to exercise and enclosing a copy of a document proving your identity. We will respond within a maximum period of one month.

If you consider that the processing of your personal data does not comply with current regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), at www.aepd.es.

12. Changes to this policy

We may update this Privacy Policy occasionally to reflect changes in our practices, the products and services we offer, or applicable regulations. The date of the last update always appears at the beginning of this document. If we introduce substantial changes, we will notify you via a visible notice on the website or, where possible, by email. We recommend reviewing this page periodically.

13. Contact

If you have any question, doubt or suggestion about this Privacy Policy or about how we process your personal data, write to us — we will be delighted to help you:

Email: hola@almate.shop
Postal address: Carretera de Jaén, 52, 02006 Albacete, Spain
Contact form: almate.shop/en/contact-us

Write to us →