Privacy Policy

This Privacy Policy aims to inform users about how RASSA BOTANICALS collects, protects, and uses personal information provided through our website www.rassabotanicals.com and our social media.

1. Data Controller

In accordance with Spanish regulations, the contact details of the controller are:

  • Owner/Company Name: RASSA BOTANICALS S.L.
  • NIF/CIF: B67259630
  • Postal Address: Travesía de la Plaza 6, L1, 08338, Premiá de Dalt, Spain
  • Contact Email: hello@rassabotanicals.com
  • Registration Data: Sheet B-524756 Volume 46589 Folio 61

2. Information We Collect

At RASSA BOTANICALS, we process the data you voluntarily provide to us. This includes:

  • Contact details: Name, surname, email, shipping and billing address, and phone number.
  • Account data: If you create a profile, we store your credentials and your order history.
  • Technical and browsing data: IP address, browser type, operating system, and website behavior through the use of cookies (you can consult our Cookie Policy for more details).

3. Purpose and Legal Basis for Processing

We process your data under the following legal bases of the General Data Protection Regulation (GDPR):

  • Performance of a Contract: To process your orders, manage shipping, and send you updates on the status of your purchase.
  • Data Subject's Consent: For sending newsletters, commercial communications, and marketing (provided you have voluntarily subscribed).
  • Legitimate Interest: To conduct market research, data analysis to help us improve our products, and ensure website security.
  • Legal Obligation: To comply with our tax and accounting responsibilities with the Spanish administration.

4. Who we share your data with

We do not sell your data to third parties. However, for RASSA BOTANICALS to function correctly, we share information with:

  1. Logistics Companies: So the package reaches your door.
  2. Payment Gateways: To securely process your transactions (Visa, Mastercard, Apple Pay, Google Pay, Shop Pay, Klarna, and Paypal).
  3. Marketing Services: Email sending platforms (such as Mailchimp and Shopify).
  4. Legal and Accounting Advice: To comply with our tax obligations in Spain.
  5. Web Hosting: Server providers.

5. Data Retention Period

Your personal data will be retained as long as the business relationship is maintained or for the time necessary to comply with legal obligations.

  • Billing data will be retained for at least 5 or 6 years as required by law (Tax Agency).
  • Marketing data will be retained until you withdraw your consent (by clicking "unsubscribe").

6. Your Rights (ARCO+ Rights)

You have full control over your data. At any time, you can write to us at hello@rassabotanicals.com to:

  • Access your personal data.
  • Rectify inaccurate data.
  • Delete your data (Right to be forgotten) when it is no longer necessary.
  • Object to receiving advertising.
  • Portability: Request that we send you your data in a digital format.

If you believe that we have not handled your rights correctly, you can file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Information Security

Security is our priority. At RASSA BOTANICALS, we use SSL encryption protocols so that your data travels securely over the internet. Although no system is 100% impregnable, we apply all necessary technical and organizational measures to prevent theft or unauthorized access to your information.

8. Minors

Our products are intended for individuals over 18 years of age. If you are a minor, please obtain permission from your parents or guardians before providing us with any data.

9. Updates to this Policy

We reserve the right to modify this policy to adapt it to new legislative or jurisprudential developments. We recommend that you review this page periodically.

Contact: If you have any questions, please write to us at hello@rassabotanicals.com 

Last updated: 1/06/2026