What we store, why, and for how long.

Data controller: NostraMareFoods. Corporate office: Valencia Region, Spain · Logistics hub: Stockholm, Sweden. Contact for privacy questions: sales@nostramarefoods.com.

• Form submissions. Only what you type — name, company, email, country, product interest, volume, message. Used to answer wholesale enquiries.
• Request metadata. A one-way hashed fingerprint of your IP address (never the raw IP), coarse country/city from Cloudflare, browser user-agent, referring page, and the paths you visit. Used to prevent abuse, size the audience, and — if a lawyer or law-enforcement request arrives — provide an audit trail.
• Download log. When you download our catalog PDF we record the filename, timestamp, the same hashed-IP metadata, and the page you started from.

• Phone numbers, social-media handles, real names, or home addresses beyond what you type.
• Tracking cookies, ad-network identifiers, or third-party analytics beacons.
• Cross-site behaviour on other websites.
• Precise (GPS-level) location.

A web browser physically cannot reveal a visitor's phone, social profiles, or home address — anyone claiming otherwise is misinforming you.

• Form data: Art. 6(1)(b) — steps to enter into a business relationship at your request.
• Access log & download audit: Art. 6(1)(f) — legitimate interest in securing our site, preventing abuse, and preserving evidence for lawful claims. Data is minimised (hashed IP, coarse geo) and never sold.

• Leads: kept while you remain a prospective business contact, up to 3 years after last activity.
• Access log & page views: 90 days rolling.
• Download audit: 12 months rolling.

We do not sell your data. We share it only with (a) our infrastructure providers (Cloudflare edge, Supabase-hosted database, email service) acting under strict processor agreements, and (b) authorities where compelled by valid legal process (court order, prosecutor's request). Anything shared with authorities is limited to the exact rows requested and preserved as read-only evidence.

You can request access, correction, or erasure of your personal data at any time by emailing sales@nostramarefoods.com from the same address you used. We reply within 30 days. You may also lodge a complaint with the Spanish AEPD or the Swedish IMY.