QUINTANA GOURMET · PRIVACY & DATA PROTECTION

Privacy policy

Quintana Gourmet — INTERDEHESA S.L.

Last updated: 10 November 2026

At Quintana Gourmet, we respect your privacy and are committed to processing your personal data transparently, responsibly and in accordance with applicable legislation.

This Privacy Policy explains what personal data we may collect, why we use it, who we may share it with, how long we retain it and how you can exercise your rights.

It applies to the processing of personal data in connection with our online store, quintanagourmet.com, our marketing communications, contact forms and other services offered under the Quintana Gourmet brand.

1. Data Controller

In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD), we provide the following information regarding the processing of personal data through our store.

Data Controller: INTERDEHESA S.L.

Trading Name: Quintana Gourmet

Spanish Tax Identification Number (NIF): B56570070

Registered Address: Plaza Creu de Quintana 10, 1st Floor, Door 1, 46113 Moncada, Valencia, Spain.

Email: info@quintanagourmet.com

Website: https://quintanagourmet.com

INTERDEHESA S.L. is responsible for the processing of personal data carried out by Quintana Gourmet in connection with its commercial activities, without prejudice to any processing that Shopify or other service providers may carry out as independent data controllers under their own privacy policies.

2. Personal Data We Collect

Depending on how you interact with our store, we may process the following categories of data:

Identification and contact details: first name, surname, postal address, email address, telephone number and professional contact details.

Purchase and billing information: products purchased, amounts, orders, invoices, delivery addresses and information required to manage shipments.

Payment information: payment method, transaction confirmations and transaction references. Payment information is processed through the payment providers enabled in our store, in accordance with their security systems.

Customer account information: identification details, email address, order history and preferences associated with your account.

Returns and cancellations information: products concerned, reasons provided, request status, reported issues and refunds.

Communication information: enquiries, requests, complaints and messages submitted through forms, email or other customer support channels.

Business and celebration enquiries: company or establishment name, contact person, type of event, quantities, dates, personalisation preferences and other information provided to prepare quotations.

Browsing and technical data: IP address, browser information, device information, identifiers, cookies and interaction data relating to our store, depending on the technologies used.

Marketing preferences: email address, subscription status, communication preferences and records of consent, where applicable.

Advertising campaign data: information about interactions, visits and purchase or conversion events, where advertising tools are used and a valid legal basis exists.

We do not request special categories of personal data for ordinary purchases of our products.

We recommend that you do not include sensitive or unnecessary personal information in contact or personalisation forms.

3. Purposes and Legal Bases for Processing

A. Order and Purchase Management

We process the data necessary to fulfil orders, manage payments, prepare shipments, issue confirmations, handle returns and meet our obligations arising from the sale of products.

Legal basis: performance of a contract or steps taken prior to entering into a contract, Article 6(1)(b) of the GDPR.

B. Invoicing and Legal Obligations

We process personal data to issue and retain invoices, maintain legally required records and comply with tax, accounting and administrative obligations.

Legal basis: compliance with legal obligations, Article 6(1)(c) of the GDPR.

C. Customer Support

We process personal data to respond to enquiries, information requests, complaints and issues relating to our products and services.

Legal basis: performance of a contract or pre-contractual measures where an enquiry relates to a purchase; in other cases, our legitimate interest in responding to communications received, depending on the circumstances.

D. Customer Accounts, Returns and Cancellations

We process personal data to enable access to customer accounts, allow customers to view their orders and manage return or cancellation requests through the features available on Shopify.

These activities may include sending access codes, notifications, return instructions and updates on the status of requests.

Legal basis: performance of a contract, pre-contractual measures or compliance with legal obligations, as applicable.

E. Marketing Communications and Newsletter

When you voluntarily subscribe, we may send you communications about news, launches, products, promotions, gourmet selections and special offers from Quintana Gourmet.

These communications may be managed using Shopify's marketing tools enabled at any given time.

Legal basis: consent of the data subject, Article 6(1)(a) of the GDPR, without prejudice to communications to existing customers permitted under Article 21(2) of Spanish Law 34/2002, where its requirements are met.

F. 10% Welcome Discount

We may offer the promotional code BIENVENIDO10 to new customers, subject to the promotion's terms and conditions.

Where the discount is communicated through a promotional subscription, we will process the data necessary to manage the subscription and deliver the communication.

Applying the discount to a purchase may require processing order information to verify the promotion's conditions and prevent misuse.

Subscription to marketing communications is not mandatory for making ordinary purchases in our store.

Legal basis: consent for marketing communications; performance of the promotional terms and, where applicable, legitimate interest in preventing fraudulent use.

G. Business and Celebration Enquiries

Through our "Corporate Gifts" and "Celebration Favours" forms, we may collect information to prepare quotations, respond to enquiries and manage personalised proposals.

The information will be used to respond to the request, prepare offers and, where applicable, manage the contract and delivery.

We will not automatically use information submitted through these forms to send unrelated advertising without a valid legal basis.

Legal basis: pre-contractual measures, performance of a contract or legitimate interest in responding to professional enquiries, as applicable.

H. Waiting Lists and Availability Notifications

Where we offer registration forms to receive updates about upcoming launches or product availability, we will process the information provided to manage these communications.

If registration also involves receiving general marketing communications, we will request the appropriate consent where necessary.

Legal basis: consent of the data subject or management of the request submitted, depending on its nature.

I. Security and Fraud Prevention

We process personal data to protect our store, prevent unauthorised access, detect fraudulent transactions and ensure transaction security.

Legal basis: legitimate interest in protecting our business and users, Article 6(1)(f) of the GDPR, or compliance with legal obligations where applicable.

J. Store Operation, Analytics and Improvement

We process data to manage the technical operation of our store, analyse commercial performance and improve the shopping experience through Shopify tools and other features that are actively enabled.

Legal basis: performance of a contract, legitimate interest or consent, depending on the specific processing activity.

Non-essential cookies and technologies requiring consent will not be used before valid consent has been obtained.

K. Advertising Measurement and Personalisation

Our store has advertising integrations with Meta and TikTok.

These integrations may use browsing data, interactions and purchase-related events to measure campaigns, attribute conversions and, where applicable, personalise advertising communications.

Their operation is subject to privacy settings, user preferences and applicable legal bases.

Legal basis: consent where required for accessing or storing information on a device and for associated processing activities. Any additional processing must have its own valid legal basis.

4. Newsletter and Marketing Consent

Subscription to the Quintana Gourmet newsletter is voluntary.

Where required, consent will be requested through appropriate mechanisms, without pre-ticked boxes.

We may use an email subscription confirmation procedure to verify the email address provided.

Subscribers may withdraw their consent at any time by using the unsubscribe link included in our communications or by writing to info@quintanagourmet.com.

Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal, nor will it prevent communications necessary to manage orders or comply with legal obligations.

Accepting marketing communications is not required to make an ordinary purchase.

5. Sources of Personal Data

Personal data may be obtained:

Directly from customers when making a purchase, creating an account, subscribing or contacting us.
Through our business, celebration and waiting list forms.
Through return requests, cancellation requests or customer support enquiries.
Through the technical operation of our store and the technologies used in accordance with applicable legislation.
From providers involved in processing payments, orders, deliveries and returns.
From Shopify and its services, depending on the features used and applicable privacy settings.

6. Data Recipients and Service Providers

To carry out our business activities, certain personal data may be processed by providers offering services necessary for the operation of our store.

These include:

Shopify

The e-commerce platform used to manage orders, payments, customer accounts, forms, communications and other store features.

Shopify Collective and Partner Suppliers

Certain products from Quintana's Pantry are prepared and dispatched directly by partner suppliers, such as Sal Ancestral, through Shopify Collective.

To fulfil these orders, it may be necessary to share information such as the recipient's name, delivery address, telephone number where applicable, products purchased and other information strictly necessary to prepare shipments, manage issues or process returns.

Suppliers must process personal data in accordance with their applicable legal obligations and contractual arrangements.

Payment Providers

Entities and platforms required to authorise and process transactions.

Transport and Logistics Companies

Carriers and logistics operators involved in preparing, distributing, delivering and returning orders.

Communication and Customer Support Providers

Services used to send confirmations, notifications, authorised marketing communications and responses to enquiries.

Meta Platforms

Our store has an integration with Facebook and Instagram that includes both web-based and server-side event connections.

Depending on the applicable configuration, this integration may be used for campaign measurement, conversion analysis and other advertising features.

TikTok

Our store has a web event integration with TikTok, which may be used to measure interactions and advertising conversions in accordance with privacy preferences and applicable legislation.

Accounting, Tax and Administrative Advisers

Where necessary to comply with tax, accounting or legal obligations.

Public Authorities

Where disclosure is required by law.

Personal data will only be shared where there is a legitimate purpose and an appropriate legal basis.

We do not directly sell our customers' personal data databases to third parties.

Certain providers may act as data processors, while others may act as independent or joint data controllers, depending on the specific processing activities and applicable agreements.

7. Shopify and Shopify Network Intelligence

Our store uses Shopify as its e-commerce platform.

Shopify processes information relating to browsing, orders, transactions and user interactions to provide its services and, in certain circumstances, for its own purposes, in accordance with the applicable terms and settings.

Shopify Network Intelligence

Quintana Gourmet has enabled the Shopify Network Intelligence feature.

This feature allows Shopify to use certain data and information about interactions with our store and its network of services to provide analytics, improvement, personalisation and advertising features, subject to the applicable terms.

The scope of processing depends on the features enabled, agreements with Shopify and relevant privacy preferences.

Where these activities involve processing that requires consent or another specific legal basis, the applicable legal requirements must be respected.

Our store's data hosting location is configured within the European Union. This configuration does not exclude the possibility that certain providers may carry out processing or international data transfers in accordance with their services and the safeguards required by law.

For further information, please consult:

Shopify Privacy Policy:
https://www.shopify.com/legal/privacy

Shopify Privacy Portal:
https://privacy.shopify.com/

Where applicable, users may exercise their rights directly with Shopify in relation to processing activities for which Shopify acts as the data controller.

8. Cookies, Pixels and Similar Technologies

Our website uses cookies and similar technologies to enable the operation of our store and, where applicable, to carry out analytics, personalisation and advertising measurement.

Essential Cookies

These cookies are used for essential functions, such as:

Browsing and store operation.
Shopping cart and checkout management.
Security and fraud prevention.
Session management and technical preferences.
Recording privacy choices.

Non-Essential Cookies and Technologies

Where enabled, these may be used for:

Browsing statistics and analytics.
Commercial performance measurement.
Personalisation of the shopping experience.
Advertising campaign measurement.
Conversion attribution and personalised advertising.

Meta and TikTok

Our store has the following event integrations:

Facebook & Instagram (Meta): web-based and server-side integration.

TikTok: web-based integration.

These tools may process information about visits, interactions and purchase events, depending on their configuration and applicable privacy preferences.

Server-side integrations may also involve data transfers that do not take place directly through browser cookies.

Their use must comply with the relevant legal bases and transparency obligations.

Consent Management

Our store provides a cookie banner that allows users to:

Accept non-essential cookies and technologies.
Reject non-essential cookies and technologies.
Manage preferences and configure the available options.

You can change your preferences through the cookie settings link available in our store.

Non-essential cookies and technologies requiring consent must only be used after valid consent has been obtained.

Detailed information about the cookies used, their providers, purposes and duration is available in our Cookie Policy.

9. International Data Transfers

Although our store's data hosting location is configured within the European Union, certain technology, advertising or logistics providers may process personal data outside the European Economic Area (EEA).

This may occur, among other circumstances, in connection with services provided by Shopify, Meta, TikTok or other providers used to operate our store.

Where an international transfer of personal data takes place, the legally required mechanisms will be applied, such as European Commission adequacy decisions or Standard Contractual Clauses, as appropriate.

Where necessary, appropriate supplementary measures will be adopted.

Data subjects may request additional information about the safeguards applicable to international transfers carried out by us.

10. Data Retention

We will retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations.

In particular:

Orders, invoices and commercial documentation: for the periods legally required under tax, commercial and liability regulations.

Customer accounts: while they remain active or for as long as certain information must be retained to comply with legal obligations or address outstanding liabilities.

Returns, cancellations and complaints: for the time necessary to manage them and subsequently for any applicable liability periods.

Business and celebration enquiries: for the time necessary to respond to the request and, where applicable, manage the contractual relationship and resulting liabilities.

Waiting lists: until consent is withdrawn, the purpose has been fulfilled or retaining the data is no longer necessary, as applicable.

Subscriptions and marketing communications: until consent is withdrawn, a valid objection is made or the purpose ends, while retaining evidence of consent and unsubscribe requests where necessary.

Technical, browsing and advertising data: according to their purpose, the settings of the services used and the applicable retention periods.

Where appropriate, personal data will be deleted or retained in a restricted form for the periods required by law.

11. Data Protection Rights

Data subjects may exercise the following rights, where applicable:

Right of access to their personal data.
Right to rectification of inaccurate data.
Right to erasure of personal data.
Right to object to processing.
Right to restriction of processing.
Right to data portability.
Right to withdraw consent at any time.
Right not to be subject to decisions based solely on automated processing, including profiling, where the conditions established by the GDPR apply.

To exercise these rights, please contact:

info@quintanagourmet.com

We may request reasonable information to verify the applicant's identity where necessary.

We will respond within one month of receiving the request, without prejudice to any extensions permitted by law.

Data subjects also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, AEPD):

https://www.aepd.es

12. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or improper disclosure.

Our store uses the infrastructure and security mechanisms provided by Shopify and the relevant service providers.

Access to personal data is restricted to individuals and providers who need to process it to perform their duties, in accordance with applicable obligations.

However, no technological system can guarantee absolute security.

13. Minors

Our store is intended for individuals who have the legal capacity to enter into contracts.

We do not specifically target our marketing communications at minors, nor do we intend to collect their personal data without the legally required authorisation.

If we become aware that a minor's personal data has been provided without a valid legal basis, we will take the appropriate measures.

14. External Links and Third-Party Platforms

Our website may contain links to third-party platforms or websites, including social networks, payment services and other websites related to our products or partners.

Each third party is responsible for its own privacy practices where it acts as an independent data controller.

We recommend reviewing their privacy policies before providing personal information.

15. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical or organisational changes, or changes to the services we use.

The current version will be available on our website, indicating the date of its latest update.

Where required by law, we will communicate significant changes through appropriate channels.

16. Contact

For any enquiries relating to this Privacy Policy or the processing of personal data:

INTERDEHESA S.L. — Quintana Gourmet