Privacy Policy of NATURAL de Costa Rica

Last updated: 16 June 2026

Data Controller

This website is operated by:

NATURAL de Costa Rica S.L.

  • VAT/NIF: ESB44708071
  • Address: Calle Almería 6, 41980 La Algaba, Sevilla, Spain
  • EU Sanitary Registration: 25.00445/SE
  • Email: info@naturaldecostarica.com

NATURAL de Costa Rica S.L. is responsible for the processing of personal data collected through this website in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Spanish data protection legislation.

Personal Data We Collect

We may collect and process the following categories of personal data:

  • Name and surname
  • Billing and shipping address
  • Email address
  • Telephone number
  • Order and purchase information
  • Payment-related information (processed securely by payment providers)
  • Customer account information
  • Communications submitted through our contact forms or email
  • Technical and usage data collected through cookies and analytics tools

We only collect personal data that is necessary for the purposes described in this Policy.

How We Use Your Data

We process personal data for the following purposes:

  • To process and fulfil orders
  • To deliver products purchased through our website
  • To manage customer accounts
  • To communicate regarding orders, deliveries, returns or customer service requests
  • To comply with legal, accounting and tax obligations
  • To improve website performance, functionality and user experience
  • To protect the security and integrity of our website and services

We do not sell personal data to third parties.

Legal Basis for Processing

We process personal data on one or more of the following legal bases:

  • Performance of a contract when processing orders and providing services
  • Compliance with legal obligations, including tax and accounting requirements
  • Legitimate interests in operating, improving and securing our website and business
  • Consent, where required, including certain cookies and similar technologies

Where processing is based on consent, you may withdraw your consent at any time.

Sharing of Personal Data

We may share personal data with trusted third parties when necessary to operate our business and provide our services.

These may include:

· Payment providers
  • Stripe
  • PayPal
  • Redsys
  • Banking institutions for bank transfer payments
· Shipping and logistics providers
  • Correos
  • DHL
  • GLS
  • MRW
  • Other logistics providers used to fulfil orders
· Technical and website service providers
  • Hosting providers
  • Website maintenance providers
  • Security and backup providers
· Analytics providers
  • Google Analytics

These third parties only receive the information necessary to perform their services and are required to process data in accordance with applicable data protection laws.

International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA).

Where such transfers occur, we take appropriate measures to ensure that personal data remains protected in accordance with applicable data protection laws, including the use of Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms where required.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy.

In particular:

  • Order and transaction records may be retained for the period required by tax and accounting regulations.
  • Customer service communications may be retained for as long as necessary to resolve inquiries and protect legitimate business interests.
  • Cookie-related data is retained according to the periods specified in our Cookies Policy.

Different retention periods may apply where required by applicable tax, accounting or legal obligations.

When data is no longer required, it will be securely deleted or anonymised.

Your Rights

Under applicable data protection laws, you may have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete personal data
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to certain processing activities
  • Request data portability where applicable
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact: info@naturaldecostarica.com

Complaints

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority, without prejudice to any other administrative or judicial remedy available under applicable law.

For Spain, this authority is:

Agencia Española de Protección de Datos (AEPD)

Website: https://www.aepd.es

Customer Accounts

If you create an account on our website, we will process the information necessary to manage your account, provide access to order history, facilitate future purchases and improve your customer experience.

You are responsible for maintaining the confidentiality of your account credentials.

Contact Forms and Communications

When you contact us through our website, email or other communication channels, we process the information you provide solely for the purpose of responding to your inquiry, providing assistance or managing our relationship with you.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to ensure proper functionality, improve user experience and analyse website performance.

For detailed information, please consult our Cookies Policy.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements or website functionality.

Any updates will be published on this page together with the revised update date.