Privacy Policy

Who is responsible

Herbarica Plante S.R.L., Str. Johann Heinrich Pestalozzi, Nr. 22, 300115 Timișoara, România. Data protection officer: [email protected].

Legal framework

Data is handled in accordance with the General Data Protection Regulation (GDPR) and the legal requirements of Romania. The provisions of the law take precedence over this text.

What we collect

When placing an order, we only request the details needed for shipping: name, address, email, phone number, and selected blends. We do not ask for or store card details. When visiting the website, we record technical data: IP address, browser, and viewed pages, through cookies.

• Identification and contact details: first name, last name, delivery address in Romania, email address, and phone number required by the courier.
• Order history: details about the teas ordered, chosen payment method (cash on delivery or bank transfer), and order-related correspondence.
• Technical browsing data: IP address, session identifiers, and type of browser used to access the store.
• Information provided voluntarily during communications with customer service.

Why we use it

• To prepare orders, deliver them, and manage returns.
• To answer questions and send updates about your package.
• For the security of the online store and monitoring its use.
• For herbal updates, only with your consent. Each message allows simple unsubscription.

Cookies and browser data

We store small files in your browser. Essential cookies keep items in your cart and enable checkout; these remain active at all times. Analytics cookies show visited pages without directly identifying you. Marketing cookies only run if you accept them from the banner. You can withdraw your consent at any time. The complete list is available in our Cookie Policy.

Data recipients

The courier receives the delivery details. The payment processor receives transaction data. Hosting and analytics services operate under contract. We never sell or transfer personal data.

Herbarica Plante S.R.L. operates commercially exclusively in Romania and adheres to strict European privacy standards. Your personal data is not transferred, rented, or sold to third parties in any form and is only used to fulfill orders and internal tax obligations.

Retention period

Order details remain archived for the period required by accounting law. They are then deleted. Account information remains active until the account is closed. Browsing statistics are retained for 14 months.

Your rights

In accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679) applicable in Romania, you have the following rights: right of access to stored data, right to rectification of inaccurate data, right to erasure (right to be forgotten), right to restriction of processing, right to data portability, and right to object. To exercise these rights, send an email to [email protected].

Security

The Herbarica store does not collect, process, or store bank card data. The only accepted payment methods are cash on delivery (cash paid to the courier upon parcel receipt) and direct bank transfer initiated by the buyer from their own banking app to the Herbarica Plante S.R.L. account, which is why PCI-DSS standards do not apply to our infrastructure.

Questions about this policy

You can email us at [email protected] or call +40 719 111 796 between Mon-Thu 09:15 - 17:00, Fri 09:15 - 16:00, Sat 09:30 - 14:00. We respond within one business day at most.