Privacy Policy

Raiz Andina S.r.l. (VAT/Tax ID IT14463550963), based at Via Francesco Tamagno 5, 20124 Milan, Italy (the "Controller", "we" or "our"), is responsible for processing your personal data when you visit raizandina.com or contact us through our contact or wholesale forms. This Privacy Policy describes what information we collect, for what purpose and legal basis, how long we keep it, and what rights you have over it.

Personal information we collect

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone and some of the cookies installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages you view, what websites or search terms referred you to the Site and information about how you interact with the Site.

We also record clicks on our direct contact buttons (WhatsApp, phone and email), together with the page they were pressed from, the language, the campaign source, the approximate country and the device type. This measurement is first-party, uses no cookies or browser storage, and your IP address is not retained: it is used only at the moment of the click to derive the country and generate a pseudonymous identifier that expires daily. The legal basis is our legitimate interest in understanding which content generates commercial contact.

Categories of personal information

• Contact form data: name, company, email, phone, country, inquiry type and message you voluntarily provide on /contacto or /mayoristas
• Technical metadata: IP address (retained truncated, at subnet level), user-agent, approximate country-level geolocation and device type, for security and fraud-prevention purposes
• Marketing attribution data: UTM parameters, referrer and landing page, stored temporarily in your browser to identify which campaign referred your visit
• Browsing data (only with your consent): pages visited and browsing behavior, via Google Analytics and Microsoft Clarity, which only load if you accept analytics cookies

Sources of data collection

We obtain personal information from various sources:

• Directly from you, when you complete our contact or wholesale forms
• Automatically when you visit the Site (technical and attribution data)
• From our technology providers (hosting, email, analytics), only with your consent where applicable

How we use your information

We use the information we collect to:

• Respond to your commercial inquiries and quote requests
• Manage the business relationship with distributors, importers and the food industry
• Prevent fraud, spam and misuse of our forms
• Provide customer support
• Comply with legal and tax obligations
• Measure and improve Site performance (only with your consent)

Sharing information with third parties

To operate the Site and respond to your requests, we share information with the following data processors:

• Vercel Inc.: hosts the website and processes requests to our API (US, EU-US Data Privacy Framework)
• Web3Forms: relays contact and wholesale form messages by email
• Airtable Inc.: stores lead data in our commercial CRM (US, EU-US Data Privacy Framework)
• Hostinger: hosts the database where inquiries and contact clicks are recorded
• Google LLC: Google Analytics 4, to measure Site usage, only with your analytics cookie consent
• Microsoft Corporation: Microsoft Clarity, for heatmaps and anonymized session recording, only with your analytics cookie consent
• Meta Platforms Ireland Ltd.: Meta Pixel, to measure advertising campaigns, only with your explicit marketing cookie consent
• Telegram: receives a summarized internal notification of each new inquiry, so our commercial team can respond quickly

Protection of minors

Our services are not directed at minors. We do not intentionally collect personal information from children under the legal age applicable in your jurisdiction. If we discover that we have collected information from a minor, we will take steps to delete it.

Data security and retention

We implement reasonable technical and organizational security measures to protect your personal information (encrypted HTTPS transmission, data minimization, restricted access). We retain your commercial inquiry data for 24 months from the last contact; technical metadata from the submission (IP, user-agent) for 12 months; and contact-click data, already pseudonymized, for 24 months in aggregate form. After these periods, data is deleted or anonymized, unless the law requires a longer retention period.

Your rights

Depending on your location, you may have the following rights, which we will address within one month:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Deletion: Request deletion of your data
• Restriction: Request that we temporarily limit the processing of your data
• Portability: Receive your data in structured format
• Objection: Object to the processing of your data
• Withdraw consent: Withdraw your consent at any time, without affecting processing carried out before the withdrawal

Additional rights for EU/UK residents

If you reside in the European Union or the United Kingdom, you have the right to lodge a complaint with the data protection authority of your country. In Italy, the competent authority is the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it).

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. We will notify you of any material changes by posting the new policy on this page.

Contact

For more information about our privacy practices, or if you have questions or wish to exercise your rights, contact us:

Last updated: September 2026