Privacy policy

Last updated: December 4, 2025

1) Introduction and contact details of the controller

We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data refers to all data that can be used to personally identify you.

Controller within the meaning of the General Data Protection Regulation (GDPR):

MoringaGarden B.V.
Dr. Nolenslaan 145
6136 GM Sittard
Netherlands
Phone: 0031 475 770099
Fax: 0031 475 770090
Email: service@bacillus-subtilis.eu

2) Data collection when visiting our website
2.1 Server log files

When using our website for informational purposes only, we collect only the data that your browser transmits to our server. This includes in particular:

• visited website
• date and time of access
• amount of data transmitted
• source or referrer
• browser used
• operating system used
• IP address

Processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in ensuring the technical stability and security of the website.

2.2 SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons.

3) Hosting via Shopify

This website is hosted by:

Shopify Inc.
151 O’Connor Street, Ground Floor
Ottawa, ON K2P 2L8
Canada

Shopify processes personal data on our behalf as a data processor. In this context, data may be transferred to third countries, in particular Canada and the United States. Shopify is committed to ensuring an adequate level of data protection.

4) Cookies

This website uses technically necessary cookies that are required for the operation of the online shop. Processing is carried out in accordance with Article 6(1)(f) GDPR.

You can configure your browser to inform you about the use of cookies or to disable cookies completely. Disabling cookies may limit the functionality of the website.

5) Contact

If you contact us by email, your data will be processed exclusively for the purpose of handling your inquiry.
Legal basis: Article 6(1)(f) GDPR.

6) Newsletter

If you subscribe to our newsletter, only your email address will be used for sending it. Subscription takes place using the double opt-in procedure.
Legal basis: Article 6(1)(a) GDPR.

You can unsubscribe from the newsletter at any time.

7) Order processing in the online shop

For the processing of your order, we process the following data:

• name
• billing and delivery address
• email address
• payment data

Legal basis: Article 6(1)(b) GDPR.

Data is disclosed exclusively to:

• shipping service providers
• payment service providers
• where applicable, tax and accounting service providers

8) Payment service providers
8.1 Stripe (credit card)

Payment processing via:

Stripe Payments Europe Ltd.
1 Grand Canal Street Lower
Dublin 2
Ireland

Stripe processes your payment data directly. We do not receive full credit card details.

8.2 Klarna

Provider:

Klarna Bank AB
Sveavägen 46
111 34 Stockholm
Sweden

When using Klarna, personal data is transferred for payment processing and creditworthiness checks.

8.3 Advance payment

For advance payment, bank details are processed exclusively for payment allocation.

9) Rights of data subjects

You have the right at any time to:

• access
• rectification
• erasure
• restriction of processing
• data portability
• withdrawal of granted consents
• lodge a complaint with a supervisory authority

10) Storage period

Personal data is stored only for as long as necessary for the performance of the contract or in accordance with statutory retention obligations.

11) Currency

This privacy policy reflects the current status of the website.
Technical developments or legal changes may require updates.