Privacy Policy
Last updated: 29 July 2026
This Privacy Policy explains how SeedSender collects, uses, and protects your personal data when you visit seedsender.com, submit a form, or use the platform. We follow the EU General Data Protection Regulation (GDPR) and applicable Portuguese data-protection law.
Who we are (Data Controller). SeedSender is operated by Giselle Cordova Molon Sociedade Pessoal, Lda. (trading as Quinta dos Ouriques), Rua de Cedofeita, 455, Sala 32, 4050-181 Porto, Portugal — VAT PT516067494. For any privacy request, contact us at [email protected].
Contents
1. What data we collect
Information you give us
- Account / signup form: name, email, phone (optional), address, country, and business details you choose to provide (e.g. whether you already sell, sales channels, number of species).
- Contact form: name, email, subject, and message.
- Platform account (if you register): the data above plus order, catalogue, and payment information needed to operate the service.
Information collected automatically
- Usage analytics: page views, clicks on the signup button (and which button), and form submissions. We store a random, anonymous visitor identifier in your browser's local storage only to count unique visitors — it is not linked to your identity.
- Technical data: IP address, browser/device type, and timestamps recorded in server logs for security and to keep the service running.
Information entered but not submitted
If you type your email into the signup form and move on without submitting, we may record that email as a potential lead so we can follow up. The forms display a notice about this when you use them, and this is done under our legitimate interest and/or your consent (see Legal bases). You can ask us to delete it at any time (see Your rights).
2. How and why we use your data
- To respond to your enquiries and contact you about SeedSender.
- To create and manage your account, and to operate the platform (orders, catalogue, payments, shipping).
- To understand how the website is used and improve it (analytics).
- To follow up with people who showed interest (leads), where permitted.
- To keep the service secure, prevent abuse, and comply with legal obligations.
3. Legal bases (GDPR Art. 6)
| Purpose | Legal basis |
|---|---|
| Replying to your messages / contacting you after you filled a form | Consent, and our legitimate interest in responding |
| Creating and running your account and orders | Performance of a contract (or steps prior to a contract) |
| Website analytics and improving the service | Legitimate interest (privacy-friendly, no advertising profiling) |
| Following up with leads (email entered but not submitted) | Consent / legitimate interest |
| Security, fraud prevention and legal compliance | Legitimate interest and legal obligation |
Where we rely on consent, you can withdraw it at any time. Where we rely on legitimate interest, you can object (see Your rights).
4. Cookies & local storage
We do not use advertising or third-party tracking cookies. Our analytics is first-party: we store a single anonymous identifier in your browser's local storage to count unique visitors. Essential technical storage may be used to keep the site working. You can clear this at any time from your browser settings.
5. Who we share data with
We do not sell your personal data. We share it only with service providers (processors) who help us run the platform, under appropriate data-processing terms:
- Hosting / infrastructure: our cloud hosting provider (Railway).
- Payments: Stripe and Revolut, when you make a payment.
- Email delivery: our email/SMTP provider, to send and receive messages.
- Supplier: Quinta dos Ouriques, as the seed supplier that fulfils orders.
We may also disclose data where required by law or to protect our legal rights.
6. International transfers
Some providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
7. How long we keep your data
- Contact / enquiry messages: for as long as needed to handle your request and a reasonable period afterwards.
- Leads (unsubmitted emails): until you ask us to delete them, or until they are no longer useful.
- Account and order data: for the life of your account and as required by tax/accounting law.
- Analytics: in aggregated/anonymous form; the anonymous visitor id is not tied to you.
8. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate data;
- Erase your data ("right to be forgotten");
- Restrict or object to processing;
- Data portability;
- Withdraw consent at any time;
- Lodge a complaint with a supervisory authority — in Portugal, the CNPD (Comissão Nacional de Proteção de Dados, www.cnpd.pt).
To exercise any of these, email [email protected]. We will respond within the time limits set by the GDPR (generally one month).
9. Security
We use technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), access controls, and two-factor authentication for platform accounts. No system is perfectly secure, but we work to protect your information and to notify you and the authorities of any breach as required by law.
10. Children
SeedSender is a business-to-business platform and is not directed to children. We do not knowingly collect personal data from anyone under 16.
11. Changes to this policy
We may update this policy from time to time. We will change the "Last updated" date above and, where appropriate, notify you. Please review it periodically.
12. Contact
Questions or requests about your data? Email [email protected] or write to Giselle Cordova Molon Sociedade Pessoal, Lda. (Quinta dos Ouriques), Rua de Cedofeita, 455, Sala 32, 4050-181 Porto, Portugal.