Privacy Policy

Last updated: September 9, 2026

harvenza (“harvenza,” “we,” “us,” or “our”) operates https://harvenza.com and the related online store, content, features, purchasing functions, and services (collectively, the “Services”).

Our ecommerce store is hosted by Shopify, which provides the ecommerce platform that enables us to offer our products and Services.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit or use the Services, place an order, create an account, subscribe to communications, contact us, or otherwise interact with harvenza.

It also explains the privacy rights and choices that may be available to you under applicable law.

1. Personal Information We Collect

Depending on how you interact with the Services, we may collect the following categories of personal information.

Contact Information

This may include:

• Your name;

• Email address;

• Telephone number;

• Billing address; and

• Shipping address.

Order and Transaction Information

This may include:

• Products viewed or purchased;

• Shopping-cart activity;

• Order history;

• Purchase amounts;

• Discounts or promotions used;

• Returns;

• Refunds;

• Order status; and

• Communications relating to an order.

Payment-Related Information

Payments are processed through Shopify and authorized third-party payment providers.

harvenza does not ordinarily receive or store complete payment-card numbers.

We may receive limited payment or transaction information necessary to confirm transactions, prevent fraud, process refunds, or maintain legally required business records.

Account Information

If customer-account functionality is available, we may collect information such as:

• Account or login information;

• Saved addresses;

• Saved preferences;

• Order history; and

• Account activity.

Device and Usage Information

When you use the Services, we and our service providers may automatically collect information such as:

• IP address;

• Browser type;

• Device type;

• Operating system;

• Device identifiers;

• Cookie identifiers;

• Network information;

• General location derived from an IP address;

• Referring pages or websites;

• Pages viewed;

• Products viewed;

• Links clicked;

• Shopping-cart activity;

• Session information; and

• Other interactions with the Services.

Marketing and Preference Information

This may include:

• Newsletter subscriptions;

• Marketing preferences;

• Advertising preferences;

• Cookie preferences;

• Responses to promotions;

• Privacy choices; and

• Interactions with marketing communications.

Communications and Customer-Service Information

We may collect information that you voluntarily provide when communicating with us, including:

• Emails;

• Customer-service requests;

• Product reviews;

• Feedback;

• Photographs;

• Videos; and

• Other information you choose to provide.

2. How We Collect Personal Information

We may collect personal information in the following ways.

Directly From You

For example, when you:

• Place an order;

• Create an account;

• Enter billing or shipping information;

• Complete a form;

• Subscribe to marketing communications;

• Request a return or refund;

• Submit a review; or

• Contact customer support.

Automatically

We and our service providers may collect information automatically through technologies such as:

• Cookies;

• Pixels;

• Tags;

• Log files;

• Scripts;

• Local storage;

• Device identifiers; and

• Similar storage, access, or tracking technologies.

From Service Providers and Partners

We may receive information from third parties that help us provide and operate the Services, including:

• Shopify;

• Payment processors;

• Fraud-prevention providers;

• Analytics providers;

• Advertising and marketing providers;

• Fulfillment providers;

• Warehouses;

• Delivery carriers;

• Returns providers; and

• Customer-service or technology providers.

3. How We Use Personal Information

We may use personal information to:

• Provide, maintain, and operate the Services;

• Process payments;

• Confirm and manage orders;

• Fulfill purchases;

• Arrange shipping and delivery;

• Provide tracking information;

• Process returns, replacements, and refunds;

• Provide customer support;

• Create and maintain customer accounts;

• Save customer preferences;

• Send transactional and service-related communications;

• Send order, delivery, security, account, and policy updates;

• Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity;

• Protect our customers, website, systems, and business;

• Analyze how customers use the Services;

• Maintain and improve our website, products, services, and customer experience;

• Personalize content and product recommendations where permitted;

• Measure marketing and advertising performance;

• Provide or evaluate advertising where permitted by applicable law;

• Send promotional communications in accordance with applicable law and your choices;

• Maintain business, accounting, tax, and transaction records;

• Comply with legal, regulatory, contractual, and law-enforcement obligations;

• Establish, exercise, or defend legal claims; and

• Enforce our Terms of Service and other policies.

We seek to collect and use personal information only where reasonably necessary and permitted by applicable law.

4. Legal Bases for Processing

Where the General Data Protection Regulation (“GDPR”) or other applicable data-protection law requires us to identify a lawful basis for processing personal information, we may rely on one or more of the following bases.

Performance of a Contract

We may process personal information where necessary to enter into or perform a contract with you, including to:

• Process an order;

• Accept payment;

• Fulfill a purchase;

• Arrange delivery;

• Provide customer support;

• Process a return; or

• Issue a refund.

Compliance With Legal Obligations

We may process information where necessary to comply with legal obligations, including:

• Tax requirements;

• Accounting requirements;

• Consumer-protection obligations;

• Fraud-prevention requirements;

• Regulatory requirements; and

• Valid legal or governmental requests.

Legitimate Interests

Where permitted by law, we may process personal information where necessary for our legitimate interests or those of another party, provided those interests are not overridden by your rights and interests.

These legitimate interests may include:

• Operating and improving our business;

• Providing customer service;

• Protecting our website and systems;

• Preventing fraud;

• Understanding website performance;

• Maintaining appropriate business records; and

• Establishing, exercising, or protecting legal rights.

Consent

Where required by law, we may rely on your consent for activities including:

• Certain marketing communications;

• Non-essential cookies;

• Certain analytics technologies;

• Advertising technologies; and

• Other processing activities that legally require consent.

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.

5. Cookies and Similar Technologies

harvenza, Shopify, and other service providers may use cookies and similar technologies to:

• Operate the website;

• Maintain shopping-cart and checkout functionality;

• Authenticate accounts;

• Remember customer preferences;

• Protect against fraud;

• Understand website usage;

• Measure website performance;

• Analyze customer interactions;

• Measure marketing effectiveness;

• Personalize content where permitted; and

• Provide or evaluate advertising.

Some cookies and similar technologies are necessary for the Services to function.

Other technologies, including certain analytics, personalization, and advertising technologies, may require consent under applicable law.

Where consent is required, we will seek appropriate consent before placing or using the relevant non-essential cookies or similar technologies.

You may manage available cookie choices through the cookie or privacy controls presented on https://harvenza.com.

You may also manage certain cookies through your browser or device settings.

Blocking certain technologies may affect website functionality, including:

• Account access;

• Shopping carts;

• Personalization; or

• Checkout.

6. Marketing Communications

If you subscribe to promotional emails or other marketing communications, you may unsubscribe at any time by using the unsubscribe option included in the communication.

You may also contact us to object to the use of your personal information for direct marketing.

Where consent is the lawful basis for marketing, you may withdraw that consent at any time.

Opting out of marketing does not prevent us from sending necessary non-promotional communications relating to:

• Orders;

• Payments;

• Shipping;

• Returns;

• Refunds;

• Accounts;

• Security; or

• Customer-service requests.

7. Advertising and Privacy Choices

We may work with advertising, analytics, and marketing providers to understand customer interactions, measure advertising performance, attribute conversions, or deliver advertising where permitted by applicable law.

These activities may involve information such as:

• Cookies;

• Pixels;

• Device identifiers;

• IP addresses;

• Browsing activity;

• Product interactions; and

• Similar technical information.

We do not exchange personal information for money.

However, certain privacy laws outside the European Economic Area may classify some disclosures involving advertising technologies as a “sale,” “sharing,” or use for targeted advertising even when no money is exchanged.

Where applicable law provides an opt-out right, eligible customers may exercise that right using any applicable privacy controls available through our website or by contacting:

leefallegre49@hotmail.com

Where required by applicable law and supported by our website configuration, qualifying browser-based privacy preference signals may also be processed in accordance with applicable requirements.

8. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to the following categories of recipients.

Shopify

Shopify hosts and supports our ecommerce store and processes personal information in connection with providing ecommerce and related services.

Payment and Financial-Service Providers

We may provide necessary information to payment processors, banks, financial-service providers, and fraud-prevention providers for purposes such as:

• Payment authorization;

• Transaction processing;

• Refunds;

• Verification; and

• Fraud prevention.

Fulfillment and Delivery Providers

We may disclose necessary customer and order information to:

• Fulfillment providers;

• Warehouses;

• Logistics providers;

• Delivery carriers; and

• Returns providers.

Technology and Business-Service Providers

We may use service providers supporting:

• Website functionality;

• Information technology;

• Cloud infrastructure;

• Data storage;

• Customer support;

• Email delivery;

• Analytics;

• Fraud prevention; and

• Security.

Advertising and Marketing Providers

Subject to applicable law and your privacy choices, we may disclose certain information to advertising, analytics, or marketing providers for measurement, attribution, personalization, or advertising purposes.

Professional Advisers

We may disclose information where reasonably necessary to:

• Lawyers;

• Accountants;

• Auditors;

• Insurers; and

• Other professional advisers.

Government and Legal Authorities

We may disclose information to courts, regulators, government authorities, law-enforcement agencies, or other authorized parties where:

• Required by applicable law;

• Required by valid legal process;

• Necessary to investigate fraud or unlawful activity;

• Necessary to establish or protect legal rights; or

• Necessary to protect the rights or safety of customers or others.

Business Transactions

If harvenza is involved in a merger, acquisition, financing, restructuring, sale of assets, transfer of business, or similar transaction, relevant personal information may be disclosed to prospective or actual purchasers, advisers, or successors, subject to applicable safeguards.

9. Shopify

Our ecommerce store is powered by Shopify.

Shopify processes personal information in connection with providing ecommerce technology and related services to harvenza.

Depending on the Shopify service involved, Shopify may process certain information on behalf of harvenza and may also process certain information for purposes described in Shopify's own privacy notices.

Customers who use Shopify consumer services such as Shop or Shop Pay may also have a direct relationship with Shopify and may have separate privacy rights and choices concerning information processed directly by Shopify.

We encourage customers to review Shopify's applicable privacy notices for information concerning Shopify's own data-processing practices.

10. International Data Transfers

harvenza is based in Spain.

Shopify and other service providers may process, store, or access personal information in countries outside Spain or the European Economic Area (“EEA”).

As a result, personal information may be transferred to countries whose data-protection laws differ from those applicable within the EEA.

Where the GDPR or other applicable law requires safeguards for an international transfer, we will use or rely on an appropriate lawful transfer mechanism.

Depending on the circumstances, this may include:

• An adequacy decision adopted by the European Commission;

• Standard Contractual Clauses approved by the European Commission;

• Appropriate supplementary safeguards where required; or

• Another lawful international-transfer mechanism available under applicable data-protection law.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and as required or permitted by applicable law.

The appropriate retention period may depend on factors including:

• The type of personal information;

• The purpose for which it was collected;

• The duration of our relationship with you;

• Whether an account remains active;

• Tax and accounting requirements;

• Transaction-record requirements;

• Return and warranty periods;

• Fraud-prevention requirements;

• Legal or regulatory obligations;

• Dispute resolution; and

• The need to establish, exercise, or defend legal claims.

When personal information is no longer reasonably required, we may delete, anonymize, aggregate, or securely dispose of it, subject to applicable legal obligations.

12. Security

We use reasonable administrative, organizational, and technical safeguards designed to protect personal information against:

• Unauthorized access;

• Unauthorized disclosure;

• Loss;

• Misuse;

• Alteration; and

• Destruction.

However, no website, network, internet transmission, database, or electronic storage system can be guaranteed to be completely secure.

Customers are responsible for protecting their passwords, account credentials, and authentication information.

If you believe your account or personal information has been compromised in connection with harvenza, please contact us promptly.

13. Your Privacy Rights

Depending on applicable law and your location, you may have rights concerning your personal information.

Where the GDPR applies, these may include the following rights.

Right to Be Informed

You have the right to receive information about how and why your personal information is processed.

Right of Access

You may request confirmation of whether we process your personal information and obtain access to relevant personal information and related processing information.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

In certain circumstances, you may request deletion of your personal information.

This right is subject to applicable legal exceptions, including circumstances in which information must be retained to comply with legal obligations or establish, exercise, or defend legal claims.

Right to Restriction of Processing

In certain circumstances, you may request that processing of your personal information be restricted.

Right to Data Portability

Where applicable, you may request certain personal information in a structured, commonly used, machine-readable format and, where legally and technically applicable, request its transfer to another controller.

Right to Object

You may object to certain processing based on legitimate interests.

You may also object at any time to processing of your personal information for direct-marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Rights Relating to Automated Decision-Making

Where applicable, you may have rights relating to certain decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

14. How to Exercise Your Privacy Rights

To exercise an applicable privacy right, please contact:

Email: leefallegre49@hotmail.com

Where possible, use the subject line:

Privacy Request

Please describe your request and provide enough information for us to identify the relevant records.

We may request additional information where reasonably necessary to verify your identity and protect personal information against unauthorized access or disclosure.

We will respond within the period required by applicable law.

Where the GDPR applies, requests will generally be addressed without undue delay and within one month, subject to any legally permitted extension based on the complexity or number of requests.

If we do not act on a request, we will provide any explanation and information concerning complaint rights required by applicable law.

Applicable privacy rights are generally available without charge, although the law may permit reasonable measures for requests that are manifestly unfounded, excessive, or repetitive.

15. Privacy Rights Outside the EEA

Customers located outside Spain or the EEA may have additional privacy rights under the laws of their jurisdiction.

Depending on applicable law, these rights may include:

• Accessing personal information;

• Correcting inaccurate personal information;

• Requesting deletion;

• Obtaining a portable copy of certain information;

• Opting out of direct marketing;

• Opting out of targeted advertising;

• Opting out of processing treated as a sale or sharing;

• Limiting certain uses of sensitive personal information;

• Appealing certain privacy-request decisions; and

• Exercising applicable privacy rights without unlawful discrimination.

These rights apply only where the relevant law applies to harvenza and the particular processing activity.

Requests may be submitted using the contact information in Section 14.

16. Children's Privacy

The Services are intended for a general shopping audience and are not specifically directed toward children.

We do not knowingly collect or process children's personal information in circumstances prohibited by applicable law.

Where parental authorization or another lawful basis is required for processing a child's personal information, we will comply with applicable legal requirements.

If you believe that a child has provided personal information to us unlawfully or inappropriately, please contact us so that we can review the matter and take appropriate action.

17. Third-Party Websites and Services

The Services may contain links to websites, applications, platforms, or services operated by independent third parties.

Their privacy and security practices are governed by their own policies.

harvenza does not control and is not responsible for the privacy practices of independent third parties.

We encourage you to review the applicable privacy notice before providing personal information directly to an independent third party.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our operations;

• Our Services;

• Technology;

• Service providers;

• Privacy practices; or

• Legal and regulatory requirements.

When this Policy is updated, we will publish the revised version on https://harvenza.com and update the “Last updated” date.

Where applicable law requires additional notice or consent for a material change, we will provide such notice or obtain consent as required.

19. Complaints

If you have a question or concern about how harvenza handles your personal information, please contact us so that we can review the matter.

Where the GDPR and Spanish data-protection law apply, you also have the right to lodge a complaint with the applicable supervisory authority.

In Spain, the competent supervisory authority is the:

Agencia Española de Protección de Datos (AEPD)
(Spanish Data Protection Agency)

You may also have the right to lodge a complaint with another competent supervisory authority where applicable law permits.

Contacting harvenza first does not prevent you from exercising your right to contact an applicable data-protection authority.

20. Contact Us

harvenza is responsible for personal information under its control where harvenza acts as the applicable data controller.

For privacy questions, requests, or complaints, please contact:

Privacy Contact — harvenza

Website: https://harvenza.com
Email: leefallegre49@hotmail.com
Phone: +34 692 565 672
Business Address:
Calle de San Enrique de Osso, 151
28055, Madrid Province
Spain