Privacy policy

Privacy Policy

Last Updated: June 18, 2026

1. Data Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

MoringaGarden B.V.
Dr. Nolenslaan 145
6136 GM Sittard
The Netherlands

Phone: +31 6 498 19202

Email: service@vidabioma.shop
Alternative contact address: service@bacillus-subtilis.eu

2. Collection of Data When Visiting Our Website

2.1 Server Log Files

When you access our website, information is automatically collected and stored in server log files by the hosting provider. This information may include:

  • Visited pages

  • Date and time of access

  • Amount of data transferred

  • Referring URL

  • Browser type and version

  • Operating system used

  • IP address

The processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in ensuring the technical stability and security of the website.

2.2 SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption.

3. Hosting and Shop Platform

This website is hosted and operated using Shopify.

Provider:

Shopify International Limited
Victoria Buildings
2nd Floor
1–2 Haddington Road
Dublin 4, D04 XN32
Ireland

Shopify processes personal data on our behalf. Data may be transferred to affiliated Shopify companies in Canada, the United States, and other countries. Shopify relies on appropriate safeguards pursuant to Article 46 GDPR, including Standard Contractual Clauses.

4. Cookies and Consent Management

Our website uses cookies and similar technologies.

Technically necessary cookies are used on the basis of Article 6(1)(f) GDPR.

Analytics and marketing cookies are only used with your explicit consent in accordance with Article 6(1)(a) GDPR.

You may withdraw or modify your consent at any time through the cookie settings.

5. Contacting Us

If you contact us by email or through a contact form, the information you provide will be used solely to process your request.

The legal basis is Article 6(1)(b) GDPR for contractual inquiries and Article 6(1)(f) GDPR for other inquiries.

6. Newsletter

If you subscribe to our newsletter, your email address will be used exclusively for sending information about our products, services, and content.

Subscription is carried out using a double opt-in procedure.

The legal basis is your consent pursuant to Article 6(1)(a) GDPR.

You may withdraw your consent at any time with future effect.

6.1 Newsletter Service Provider CleverReach

We use CleverReach to send newsletters.

Provider:

CleverReach GmbH & Co. KG
Schafjückenweg 2
26180 Rastede
Germany

When subscribing to our newsletter, your data, particularly your email address, is transmitted to and stored by CleverReach.

CleverReach enables us to organize newsletter campaigns and analyze whether newsletters have been opened and which links have been clicked.

Processing is based solely on your consent pursuant to Article 6(1)(a) GDPR.

You may unsubscribe at any time via the unsubscribe link included in every newsletter.

A Data Processing Agreement pursuant to Article 28 GDPR has been concluded with CleverReach.

Further information:
https://www.cleverreach.com

7. Order Processing

To process and fulfill orders, we may collect and process the following data:

  • First and last name

  • Billing address

  • Shipping address

  • Email address

  • Telephone number (if provided)

  • Payment information

The legal basis is Article 6(1)(b) GDPR.

Data may be shared with:

  • Shipping providers

  • Payment providers

  • Tax and accounting service providers

  • IT and hosting service providers

8. Payment Providers

8.1 Stripe

Provider:

Stripe Payments Europe Ltd.
1 Grand Canal Street Lower
Dublin 2
Ireland

The payment information required to process transactions is transmitted to Stripe.

Further information:
https://stripe.com/privacy

8.2 Klarna

Provider:

Klarna Bank AB
Sveavägen 46
111 34 Stockholm
Sweden

If Klarna is selected as a payment method, personal data required for payment processing may be transferred to Klarna. Klarna may conduct credit assessments where legally permitted.

Further information:
https://www.klarna.com

8.3 Bank Transfer

If payment is made via bank transfer, the submitted data will only be used for payment allocation and processing.

9. Google Services

9.1 Google Analytics 4

Subject to your consent, we use Google Analytics 4.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics enables us to analyze visitor behavior on our website.

The legal basis is Article 6(1)(a) GDPR.

Further information:
https://policies.google.com/privacy

9.2 Google Tag Manager

We use Google Tag Manager.

Google Tag Manager itself does not generally process personal data but serves solely to manage website tags.

9.3 Google Ads Conversion Tracking

Subject to your consent, we use Google Ads Conversion Tracking.

This service allows us to measure whether users perform certain actions after clicking on a Google advertisement.

The legal basis is Article 6(1)(a) GDPR.

Further information:
https://policies.google.com/privacy

9.4 Google Search Console

We use Google Search Console to monitor and optimize our website’s visibility in Google Search.

The legal basis is Article 6(1)(f) GDPR.

9.5 Google Merchant Center

We use Google Merchant Center to manage and provide product information for Google services, including Google Shopping.

The legal basis is Article 6(1)(f) GDPR.

9.6 Withdrawal of Consent

Any consent given may be withdrawn at any time through the cookie settings.

10. Shopify Inbox and AI-Powered Customer Chat

We use Shopify Inbox with an AI-powered assistant to handle customer inquiries.

Provider:

Shopify International Limited
Victoria Buildings
2nd Floor
1–2 Haddington Road
Dublin 4, D04 XN32
Ireland

When you use the chat on our website, the information you provide (such as chat messages and any personal data you voluntarily submit), as well as technical connection data, will be processed to handle your inquiry and provide automated responses.

Chat communications are processed by Shopify. Chat histories are accessible to us within Shopify Inbox. According to Shopify, chat data may also be processed to improve the functionality and quality of its AI-powered services. Shopify states that customer data processed through Shopify Inbox is not shared between different Shopify stores.

Processing is carried out on the basis of Article 6(1)(b) GDPR where your inquiry relates to the initiation or performance of a contract, and on the basis of Article 6(1)(f) GDPR based on our legitimate interest in providing efficient and modern customer communication.

For more information about Shopify's processing of personal data, please visit:

https://www.shopify.com/legal/privacy

11. YouTube

Our website may contain embedded YouTube videos.

Provider:

YouTube LLC
901 Cherry Avenue
San Bruno, CA 94066
USA

YouTube is a company of Google Ireland Limited.

When visiting pages containing embedded YouTube videos, personal data such as your IP address may be transmitted to YouTube.

If you are logged into a Google or YouTube account, YouTube may associate your browsing activity with your profile.

The legal basis is your consent pursuant to Article 6(1)(a) GDPR where applicable.

Further information:
https://policies.google.com/privacy

12. Data Retention

Personal data is stored only for as long as necessary for the respective purposes or as required by applicable legal retention obligations.

13. Rights of Data Subjects

You have the following rights:

  • Right of access

  • Right to rectification

  • Right to erasure

  • Right to restriction of processing

  • Right to data portability

  • Right to object

  • Right to withdraw consent

14. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority regarding our processing of your personal data.

Competent supervisory authority:

Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
Postbus 93374
2509 AJ The Hague
The Netherlands

15. Updates to This Privacy Policy

This Privacy Policy reflects the current status of our website.

We reserve the right to amend this Privacy Policy if required due to technical developments or changes in applicable laws.