Privacy Policy

1. Data Controller
In compliance with the General Data Protection Regulation (EU GDPR 2016/679) and the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the Data Controller for the information collected on this website is Warren Paull (trading as Jararosa), registered as an Autónomo in Spain with NIF/NIE Y6556451-Q. Registered address: C.Negocios Tembo, Urbanización Alhambra del Mar, Bloq A 1º9, 29602 Marbella, Málaga, Spain. Email: hello@jararosa.com.

2. Purpose of Data Collection
We collect and process personal data (name, email, shipping address, phone number) exclusively for: fulfilling batch commitments, managing invoicing, and shipping Jararosa products; sending product or batch availability notifications and the Campo Dispatch (newsletter), only if explicitly consented to by the user; responding to inquiries sent via hello@jararosa.com.

3. Legal Basis and Retention
The legal basis for processing your data is the execution of a contract (purchasing a product) and your explicit consent (product notifications, newsletter and contact). Data related to purchases will be retained for the time required by Spanish commercial and tax law (typically 4 to 6 years). Product notification and newsletter data is retained until you withdraw your consent, the notification purpose has been fulfilled, or the data is no longer necessary.

4. Data Sharing and Transfers
Your data is treated with the utmost confidentiality and is shared only with strictly necessary third-party service providers (Data Processors): Stripe (Secure Payment Processing), Courier Services (e.g., Correos, DHL for fulfillment), Vercel/Supabase (Hosting and Database infrastructure). We do not sell your personal data to any third parties.

5. Your Rights (ARCO)
Under GDPR and LOPDGDD, you have the right to Access, Rectify, Cancel, or Oppose the processing of your data, as well as the right to data portability and the right to be forgotten. To exercise these rights, please email hello@jararosa.com with a copy of your ID or passport. If you believe your data protection rights have been violated, you have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) at www.aepd.es.