Privacy policy

We are pleased to welcome you to our website. First, we would like to introduce ourselves as the data controller in accordance with data protection laws:

Moksha SL
Calle Alqueries 25
07142 Santa Eugènia
Islas Baleares
Spain
NIF: ESB75862938
T: +34 627 28 99 09
T: +34 722 691 509
E: info@moksha-ayurveda.com

General

When you use our website, personal data about you will be collected. This can happen because you enter the data yourself – for example, your email address. But our system also automatically collects data about you, such as your visit to the website. This occurs regardless of which device or software you use to access our site.

Any data you enter voluntarily on our website is optional, and not providing data will not disadvantage you. However, without certain data, it may not be possible for us to provide services or conclude contracts. We will point you to any mandatory fields as necessary.

On this website, personal data is processed only in accordance with applicable data protection law, especially the EU General Data Protection Regulation (GDPR). The technical terms used are defined in Article 4 of the GDPR.

Under the GDPR, data processing is permitted especially in three scenarios:

Art. 6(1)(a) & Art. 7 GDPR: if you have given consent. We will inform you clearly and in advance, in this privacy policy and at the point of consent, in accordance with Art. 4(11) GDPR about how and under what circumstances your data will be processed;
Art. 6(1)(b) GDPR: if processing is necessary for the initiation, performance, or conclusion of a contract;
Art. 6(1)(f) GDPR: if after a balancing of interests we determine that processing is necessary to safeguard our legitimate interests—such as analyzing, optimizing, and securing our website offerings—including user behavior analysis, profiling for advertising, logging access data, or using third-party providers.

Inventory Data, Usage Data, and Advertising

Inventory Data

We collect inventory data (e.g., name, address, email, and any services used) as far as necessary to establish, structure, or modify a contractual relationship between us and the user.

Usage Data

We also collect usage data (e.g., website visits, product interest) to enable and bill for the usage of our services. We only combine usage data to the extent necessary for billing; otherwise, it will remain pseudonymous unless you object. You can object at any time via the address in the imprint or by contacting the data controller named in this privacy policy.

The legal basis for this processing includes our legitimate interests under Art. 6(1)(f) GDPR (website analysis, usage optimization) and, where relevant, Art. 6(1)(b) GDPR (contract fulfilment).

Additionally, our hosting provider logs certain server log file information automatically transmitted by your browser:

IP address
Browser type and version
Hostname
Time of visit
Referrer page
Page accessed
Precise time of request
Data transferred

These are used only for statistical purposes and cannot identify you personally.

Advertising

Before sending any direct marketing (outside of similar products you’ve already purchased), we will ask for your explicit consent under Art. 4(11) GDPR. This typically occurs when you sign up for our newsletter or fill out a contact form.

Consent

If we request your consent for data processing, we will provide clear and accessible information about the purpose. Consent is always voluntary—you can still receive benefits even without granting consent; just ask us.

You have the right to withdraw consent at any time by informal communication (e.g., via contact form, emailing the address in the imprint, or via an unsubscribe link). Withdrawal does not affect the legality of prior processing.

Retention Period

Your data is stored only as long as needed for its purpose. Longer storage may occur if required for legal claims, administrative interests, or mandatory retention (e.g., 6 or 10 years under tax law).

Disclosure to Third Parties

We dislike spam too. We will not share your data with third parties unless legally allowed. Disclosure may be:

Necessary to fulfill a contract (Art. 6(1)(b) GDPR),
Based on our legitimate interest in providing services effectively (Art. 6(1)(f) GDPR),
With your consent,
Or required by law or authority (Art. 6(1)(c) GDPR).

All data-sharing instances are detailed in this privacy policy.

Transfers Abroad, Especially to the USA

Our site may use providers outside the EU. Data may be processed/stored abroad via cookies, scripts, or other technologies. We will not transfer data to third countries unless:

The EU Commission has recognized adequate data protection,
You’ve given informed consent,
Or we’ve signed Standard Contractual Clauses.

For the USA, the Privacy Shield framework currently guarantees adequate safeguards. For more info on your rights, see the EU citizens’ guide.

User Rights

Access: You may request free access to personal data we hold about you. For security, we will require an identity check.
Rectification, Restriction & Deletion: You can request correction, restriction, or deletion of data at any time.
Objection: You can withdraw consent for advertising or other processing anytime.
Data Portability: You can request your data in machine-readable format.
Complaint: You may lodge a complaint with a supervisory authority if you believe your rights have been violated.

Changes to This Privacy Policy

If legal or factual changes arise, we will update this policy accordingly without altering your granted consents.

Encryption of Data Entry

When you enter data (e.g., via contact form, login, payment), the page is encrypted (look for the lock icon and “https”). This prevents third parties from reading your information.

Contact Forms

If you complete a contact form, book a service, email us, or send other messages, your data is stored for query handling, follow-up, or related topics. Entries are encrypted in transit.

This is based on your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time. Data is retained while needed for the inquiry, contract fulfillment, legal needs, or retention requirements.

If you subscribe to our newsletter, we will inform you about content, data usage, and recipients. Data is not shared with third parties and is used only for newsletter distribution. We use a double-opt-in process:

You receive an email with a confirmation link.
Only after confirming will you receive the newsletter.

Under Art. 6(1)(a) GDPR, you can withdraw at any time via contact form, email, or unsubscribe link. Withdrawal does not affect the legality of prior processing.

We use MailChimp (Rocket Science Group LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA). Data is transferred to the USA under Privacy Shield. MailChimp processes data only for sending the newsletter and analyzing our mailings.

MailChimp includes a “web beacon” to track email opens or clicks, sending browser info, location, and IP to them. They use this data pseudonymously to optimize their service.

Social Media Links

Our site contains links to our social media pages. These are ordinary links—not plugins—so platforms won’t learn of your visit unless you click. Once you click, that platform may store cookies or track your behavior if logged in. This may be used for targeted advertising.

Facebook: Link leads to Facebook Inc. (Menlo Park, CA, USA).
YouTube: Links to YouTube LLC (San Bruno, CA, USA), part of Google.
Instagram: Links to Instagram LLC (Menlo Park, CA, USA).

Google

Google Ads

We use Google Ads (Google Ireland Ltd., Dublin) under our legitimate interest (Art. 6(1)(f) GDPR) to run ads in Google’s network. Google may transfer data to the USA under Privacy Shield.

You can manage ad personalization via Google settings or opt-out via aboutads.info.

Google Ads Conversion Tracking

We also use Google Conversion Tracking to measure marketing effectiveness under Art. 6(1)(f). If you complete certain actions (e.g., purchase, form submission), this info is sent to Google.

To opt out, use Google’s ad preferences manager or disable cookies in your browser. See our general cookie policy and Google Analytics section for more detail.