Privacy Policy

10. Cookies

We use cookies to improve your experience on our website. Essential cookies are necessary for the site to function, while analytics cookies (such as Google Analytics) help us understand how visitors use our site.

You can manage your cookie preferences at any time through our cookie banner or browser settings. For detailed information, see our Cookie Policy.

2. What Data We Collect

When you book an experience with us, we collect:

• Contact Information: Name and email address
• Booking Details: Selected session date, number of guests, booking timestamp
• Payment Information: Processed securely by Stripe (we do not store credit card details)
• Correspondence: Any emails or messages you send to mystery@poshpork.com
• Marketing Preferences: If you express interest in future Posh Pork products

3. Why We Collect This Data (Legal Basis)

We process your personal data on the following legal bases:

• Contract Performance: To process your booking and provide the virtual experience you purchased
• Legal Obligation: To comply with tax and accounting requirements (we must retain transaction records for 7 years under Spanish law)
• Legitimate Interest: To respond to your inquiries, improve our services, and assess demand for future Posh Pork branded products
• Consent: To send you updates about future experiences, online versions, or Posh Pork branded products (only with your explicit permission)

4. How We Use Your Data

We use your personal data to:

• Process your booking and send confirmation emails
• Provide you with session details and access to the virtual experience
• Respond to your questions or requests
• Improve our services based on trial feedback
• Assess interest and demand for future online experiences and Posh Pork branded products in supermarkets
• Comply with legal and regulatory obligations
• Send you updates about future experiences, online versions, or product launches (only if you opt in)

5. Who We Share Your Data With

We share your data only with trusted service providers necessary to deliver our service:

• Stripe: Payment processing (Stripe is GDPR-compliant and based in the EU)
• Vercel: Website hosting (cloud infrastructure provider)
• Email Service Providers: To send booking confirmations and correspondence

We do not sell your personal data to third parties. When we launch Posh Pork branded products in supermarkets, we may share aggregated, anonymized demand data with retail partners, but never your personal information without explicit consent.

6. International Data Transfers

Some of our service providers (such as Vercel and Stripe) may process data outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as:

• EU-approved Standard Contractual Clauses
• Service providers certified under the EU-U.S. Data Privacy Framework
• Adequacy decisions by the European Commission

7. How Long We Keep Your Data

We retain your personal data for the following periods:

• Booking and payment records: 7 years (required by Spanish tax law)
• Marketing consent records: Until you withdraw consent, or 3 years of inactivity
• Correspondence: 3 years from last contact

After these periods, we securely delete or anonymize your data.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Correct any inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data (subject to legal retention requirements)
• Right to Restriction: Request we limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise any of these rights, contact us at mystery@poshpork.com. We will respond within 30 days.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

• SSL/TLS encryption for data transmission
• Secure payment processing through Stripe (PCI-DSS compliant)
• Access controls and authentication
• Regular security assessments

10. Cookies

Our website currently uses minimal cookies necessary for functionality. We do not use tracking or marketing cookies at this time. If we introduce analytics in the future, we will update this policy and obtain your consent where required.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have collected such data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Contact Us & Complaints

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

Email: mystery@poshpork.com
Address: Posh Pork, Mallorca, Spain

If you are not satisfied with our response, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos - AEPD):

Website: www.aepd.es
Phone: +34 901 100 099