Privacy Policy

This Privacy Policy explains how we collect, use, and protect your personal data when you visit or make a purchase on gardigen.com (the “Site”).

1) Who we are (Data Controller)

The data controller is:

SIA ESP GROUP
Registration number: 45403037881
Email: info@gardigen.com

2) What personal data we collect

• Contact and order details: name, email address, phone number, billing/shipping address, order notes.
• Payment information: payments are processed by secure payment providers (e.g., PayPal / card processors). We do not store full card details.
• Account information (if you create an account): login details and order history.
• Customer support: messages you send to us.
• Technical data: IP address, browser/device data, and cookies/analytics data.

3) Why we use your data (purposes)

• process and deliver your orders;
• communicate with you about your order (confirmation, shipping updates, support);
• handle returns, refunds, and warranty issues;
• prevent fraud and keep the Site secure;
• comply with legal obligations (accounting/tax);
• improve the Site and customer experience (analytics and cookies, where applicable).

4) Legal bases (GDPR)

• Contract performance (to fulfill your order);
• Legal obligation (tax/accounting requirements);
• Legitimate interests (fraud prevention, security, improving services);
• Consent (for optional cookies/marketing communications, if used).

5) Sharing your data

We only share personal data when necessary, for example with:

• Shipping/carrier providers (to deliver your order and provide tracking);
• Payment providers (to process payments securely);
• IT and hosting providers (to run the Site);
• Accounting and legal services (when required).

We do not sell your personal data.

6) International transfers

We mainly operate within the EU/EEA. If any service providers process data outside the EU/EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses), where required.

7) Data retention

• Order and invoice data is kept as required by applicable accounting/tax laws.
• Customer support messages are kept as needed to resolve issues and for record-keeping.
• Cookie/analytics data is retained according to the cookie settings and provider retention periods.

8) Your rights

Under GDPR, you may have the right to:

• access your personal data;
• correct inaccurate data;
• request deletion (where applicable);
• restrict or object to processing (in certain cases);
• data portability (for data processed by consent or contract);
• withdraw consent at any time (if processing is based on consent).

To exercise your rights, contact us at info@gardigen.com.
You also have the right to lodge a complaint with your local data protection authority.

9) Cookies

We use cookies and similar technologies to operate the Site and (optionally) for analytics/marketing.

You can manage cookie preferences through your browser settings and/or the cookie banner (if enabled on the Site).

10) Security

We take reasonable technical and organizational measures to protect your data. However, no method of transmission over the internet is 100% secure.

11) Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when changes were made.

12) Contact

For privacy-related questions, contact: info@gardigen.com

Last updated: December 30, 2025