Privacy & security

Data controller: OX Istra d.o.o., Ferrarska ulica 8, 6000 Koper, info@biogeabravo.com.

Data collected

• Purchase data: name, address, email, phone (for fulfilment and invoicing)
• Payment data: handled directly by Stripe, never stored on our servers
• Browsing data: essential cookies and, with consent, analytics
• Newsletter: email and language preferences (if subscribed)

Legal basis

Contract performance (purchases), consent (newsletter, analytics), legal obligation (invoicing).

Retention

Tax data 10 years. Newsletter data until unsubscribe. Analytics cookies 12 months.

Your rights

Access, rectification, erasure, portability, objection: email info@biogeabravo.com.

Transfers

No non-EU transfers, except Stripe (which uses EU Standard Contractual Clauses).