Last updated: November 1, 2026
The protection of your personal data is important to us. This Privacy Policy explains what personal data we collect when you visit www.ice-strains.com or place an order, what we use it for, how long we keep it and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Data controller
| Company | COSTA SELECT TRADING COMPANY SL |
|---|---|
| VAT ID (CIF) | B05611157 |
| Registered office | Avenida Al Vedat, 57, piso 5, puerta 15, 46900 Torrent (Valencia), Spain |
| info@ice-strains.com | |
| Phone | +34 643 492 358 |
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). For any questions about your data, you can write to us at info@ice-strains.com.
2. Personal data we collect
- Identity and contact data: name, email address, phone number, billing and delivery address.
- Order data: products purchased, order amounts, payment method, order and shipping status, invoices.
- Account data: login details and order history, if you create a customer account.
- Payment data: confirmation of payment. Card payments are processed directly by the payment provider; we never see or store your full card details.
- Communication data: messages you send us via the contact form, email, phone or WhatsApp.
- Newsletter data: your email address and subscription preferences, only if you subscribe.
- Technical data: IP address, browser and device type, pages visited and cookies (see section 9).
We do not deliberately collect special categories of data (such as health data). Please do not send us this type of information.
3. Purposes and legal bases
| Order management, delivery, invoicing and customer account | Performance of a contract – Art. 6(1)(b) GDPR |
|---|---|
| Handling enquiries, returns, complaints and warranty claims | Performance of a contract and our legitimate interest – Art. 6(1)(b) and (f) GDPR |
| Accounting, tax and legal obligations, age verification | Legal obligation – Art. 6(1)(c) GDPR |
| Newsletter and marketing emails | Your consent – Art. 6(1)(a) GDPR, which you can withdraw at any time |
| Website security, fraud prevention, statistics | Our legitimate interest – Art. 6(1)(f) GDPR, or your consent for non-essential cookies |
We do not make automated decisions or create profiles that produce legal effects concerning you.
4. Who receives your data
We never sell your personal data. We only share it with the service providers we need to run the shop, and only to the extent necessary. They act as data processors on our behalf under written contracts and confidentiality obligations:
- Shipping companies (for example SEUR, Correos, GLS) – name, address and phone number to deliver your parcel;
- Banks and payment providers – to process card payments and bank transfers;
- Hosting and security – our web hosting provider (Ginernet, Spain), Cloudflare (content delivery and protection) and our website security service;
- Email and communication – Google Workspace (customer service email) and Brevo (contact form, transactional emails and newsletter);
- Accounting and tax advisors and public authorities – where required by law.
5. International data transfers
Some providers (for example Google or Cloudflare) may process data outside the European Economic Area. In those cases, the transfers are covered by an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework) or by the European Commission’s Standard Contractual Clauses.
6. How long we keep your data
| Order and invoice data | For the period required by Spanish commercial and tax law (generally 6 years) |
|---|---|
| Customer account | Until you delete your account or ask us to delete it |
| Contact form and customer service messages | Up to 2 years after the last contact, unless needed for a claim |
| Newsletter | Until you unsubscribe |
| Cookies | As described in the cookie settings |
After these periods, the data is deleted or anonymised.
7. Your rights
You have the right to:
- access the personal data we hold about you;
- rectify inaccurate or incomplete data;
- erase your data (the “right to be forgotten”) where there is no legal reason to keep it;
- restrict or object to the processing of your data;
- data portability – receive your data in a structured, machine-readable format;
- withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise your rights, write to info@ice-strains.com. We will respond within one month. We may ask you to verify your identity.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or with the data protection authority of your country of residence.
8. Newsletter
If you subscribe to our newsletter, we use your email address to send you offers and news about our products. Every email includes an unsubscribe link and you can also unsubscribe at any time by writing to us. Our newsletter is sent via Brevo, which may record opens and clicks to help us improve our emails.
9. Cookies
We use cookies and similar technologies:
- Necessary cookies – essential for the shop to work (cart, checkout, login, language and currency selection, security). They do not require consent.
- Marketing cookies – only with your consent, to measure the effectiveness of our advertising and show you relevant offers.
On your first visit you can accept, reject or customise cookies in the cookie banner. You can change your choice at any time using the cookie settings link, and you can delete cookies in your browser settings. For details, see our Cookie Policy.
10. Data security
Our website uses encrypted HTTPS connections. We apply appropriate technical and organisational measures – such as access restrictions, firewalls, regular updates and backups – to protect your data against loss, misuse and unauthorised access.
11. Minors
Our shop is aimed exclusively at adults over 18. We do not knowingly collect personal data from minors. If we learn that a minor has provided us with personal data, we will delete it.
12. Changes to this Privacy Policy
We may update this Privacy Policy when our services or the law change. The current version is always available on this page, with the date of the last update shown at the top.