Privacy Policy

1. Data Controller

Verde Origen ("we", "us", "our") is the controller of personal data collected through this website. We are based in Ecuador and comply with the Ley Orgánica de Protección de Datos Personales (LOPDP) and its regulations, as well as the EU General Data Protection Regulation (GDPR) for visitors from the European Economic Area.

Contact for privacy matters: privacy@verdeorigen.com.

2. Data We Collect

Contact data you submit (name, email, phone, message) via our contact form or waitlist.

Order & delivery data if you place an order (shipping address, city, payment status).

Technical data collected automatically (IP address, browser, device, pages visited) via cookies and analytics.

3. Legal Basis & Purposes

Consent (Art. 7 LOPDP / Art. 6.1.a GDPR) — for newsletters, marketing communications and non-essential cookies.

Contract performance (Art. 7 LOPDP / Art. 6.1.b GDPR) — to fulfil orders, deliveries and customer support.

Legal obligation (Art. 7 LOPDP / Art. 6.1.c GDPR) — tax, accounting and consumer-protection records.

Legitimate interest (Art. 7 LOPDP / Art. 6.1.f GDPR) — site security and aggregated analytics.

4. Cookies

We use strictly necessary cookies plus, with your consent, analytics cookies (Google Analytics 4) and marketing cookies. You can change your choice anytime by clearing site data or contacting us. See the cookie banner shown on your first visit.

5. Sharing & Transfers

We share data only with processors who help us operate the service: hosting, analytics, email delivery and payment providers. When data is transferred outside Ecuador or the EEA, we rely on adequacy decisions or standard contractual clauses as required by the LOPDP and GDPR.

6. Retention

Contact form messages: up to 24 months. Order records: 7 years (tax law). Analytics: up to 14 months. Newsletter data: until you unsubscribe.

7. Your Rights

Under the LOPDP and GDPR you have the right to access, rectification, deletion ("right to be forgotten"), opposition, restriction, portability, and to withdraw consent at any time. You may also lodge a complaint with the Superintendencia de Protección de Datos Personales del Ecuador. To exercise your rights, write to privacy@verdeorigen.com.

8. Security

We apply technical and organizational measures (encryption in transit, access control, least privilege) to protect your data against unauthorized access, loss or alteration.

9. Children

Our service is not directed at children under 15 years of age (the age of digital consent under the LOPDP). We do not knowingly collect data from minors without parental consent.

10. Changes

We may update this policy. Material changes will be notified on this page with a new "Last updated" date.