Privacy policy

Privacy policy

This page explains what personal data we process when you use cbdgreen420.es, why, and what rights you have, under the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controllers

  • Online shop and website: Víctor Manuel Rodríguez Sánchez (CBD Green 420), NIF 25736360G, Pje. Río Mundo, 1, 29620 Torremolinos (Málaga), Spain. Email: hola@cbdgreen420.es.
  • Club members' area (membership applications and members): Asociación Loco Haze, CIF G70946462, Plaza de Andalucía, Pje. de Pizarro, nº 7, local 14 B, 29620 Torremolinos (Málaga), Spain. Email: clubsocios420@gmail.com.

2. What data we process and why

  • Customer account and orders: name, email, phone, addresses, date of birth and order history. To create your account, prepare, ship and charge your orders, handle returns and issue invoices. Legal basis: the purchase contract and our legal obligations (tax and consumer law).
  • Age check: date of birth, to confirm you are 18 or over. Legal basis: legal obligation and legitimate interest.
  • Contact (form, email or WhatsApp): the data you send us, to reply to you. Legal basis: your consent and, if it concerns an order, the contract.
  • Newsletter: your email, to send you news and offers, only if you subscribe and confirm. You can unsubscribe at any time from the link in each email. Legal basis: your consent.
  • Club membership application: first name, surname, date of birth, type and number of ID document, photo of the document (front and back), signature, contact details and sponsoring member number. To check your identity and age (21 or over), manage your membership and member card and send you club notices. Legal basis: your application and your membership of the Association. Document photos and signature are stored encrypted.
  • Statistics and advertising: browsing data through cookies, only if you accept them. See the Cookie policy.

Fields marked as required in each form are needed to provide the service; without them we cannot help you.

3. How long we keep it

  • Order and invoice data: as long as the law requires (generally 6 years for tax and commercial obligations).
  • Customer account: while you keep it open; you can ask us to delete it.
  • Newsletter: until you unsubscribe.
  • Enquiries: as long as needed to reply and at most one year.
  • Club: while you are a member. If an application is rejected, it is deleted with its photos and signature. If you leave, document photos and signature are deleted and only your name and member number are kept.

4. Who we share it with

We do not sell your data. We only share it with those who need it to provide the service: the carrier delivering your order, the payment provider (Redsys and your bank; your card details never pass through our website), our tax advisers and public authorities when required by law. Our technology providers (web hosting, email, WhatsApp) also access it, under contracts that guarantee its protection. If you accept statistics or marketing cookies, Google and Meta (Facebook) may process browsing data, including outside the European Union, with the safeguards provided by the GDPR.

5. Your rights

You can ask us for access, rectification, erasure, objection, restriction of processing and portability of your data, and withdraw your consent at any time. Write to hola@cbdgreen420.es (shop) or clubsocios420@gmail.com (club), stating which right you want to exercise. We will reply within one month. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

6. Minors

The shop is only for people aged 18 or over and the club for people aged 21 or over. We do not knowingly process data of minors; if we detect any, we delete it.

7. Security

The whole website uses an encrypted connection (HTTPS), and we apply technical and organisational measures to protect your data against unauthorised access, loss or alteration.

Last updated: October 2026.

Product added to wishlist