Legal

Privacy & Cookies

We only collect what we need to answer you and fulfil your order, and we never sell your data.

Last updated: June 2026

Who we are

This website is operated by Sara Adele Harris ("we", "us"), trading as Olive & Almond Woodcraft, based in Huércal-Overa, Andalucía, Spain. We are the data controller for the personal data described here. You can reach us at hello@oliveandalmondwood.com.

What we collect

When you contact us: your name, email address and the content of your message.
When you create an account: your name, email and a securely hashed password (never stored in plain text). You can ask us to delete your account at any time.
When you place an order: your name, delivery address, email and order details. Card payments are processed securely by our payment provider Stripe. We never see or store your full card details.
When you type a delivery address: to help you enter it accurately, our checkout offers address suggestions powered by Google Maps Platform. What you type into the address field is sent to Google to return those suggestions. You can ignore the suggestions and type the address in full instead.
When you subscribe or ask us to email you: your email address (and name, if given) is stored with our email provider Brevo so we can send the updates you asked for. Every marketing email includes a one-click unsubscribe.
Automatically: basic technical data (such as IP address and browser type) kept by our web host in standard server logs.

How and why we use it

To reply to your enquiries (our legitimate interest in responding to you).
To process and deliver your order and provide support (to perform our contract with you).
To meet our legal obligations, such as keeping tax and order records.

Who we share it with

We share data only with the providers that help us run the shop, each acting under its own privacy terms: Stripe (payments), our delivery carrier, our web and email hosts, Google Maps Platform (checkout address suggestions), and Brevo (email updates you've opted into). Where you buy through our Etsy shop, Etsy processes your data under its own privacy policy. We do not sell your personal data.

How long we keep it

We keep enquiry emails only as long as needed to help you, and order records for as long as the law requires (typically several years for tax purposes).

Your rights

Under the GDPR you have the right to access, correct, delete or restrict your data, to object to certain processing, and to data portability. To exercise any of these, email us at hello@oliveandalmondwood.com. You also have the right to complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es).

International transfers

Some of our providers may process data outside the EEA. Where they do, they rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Cookies

This site sets just two small cookies of its own, both only for things you ask it to do:

Session cookie · keeps your basket and sign-in working as you move between pages. Because it is essential to a service you asked for, it does not require consent.
oa_lang · remembers your language choice when you pick one, for a year. Set only when you use the language switcher.

We use no advertising or tracking cookies, and no third-party trackers or analytics services. To understand how the shop is used, we count visits ourselves, on our own server, without cookies: pages viewed and an anonymous, one-day visitor code that cannot identify you and is never linked across days. No IP addresses are stored and nothing is shared with anyone. Our payment and address-suggestion providers (Stripe and Google) may set their own cookies only on the checkout page, where they are needed to take payment and offer address suggestions. If we ever add analytics, we will update this policy and ask for your consent first.