Privacy Policy

Data Controller: [Austrian Poppy Pods],[Märzstraße 168/3 1140 Wien Austria.], Austria. Email:Austrianpoppypods@gmail.com
Wien Austria WhatsApp: +43 67840897024

We respect your privacy and comply with the EU General Data Protection Regulation (GDPR).

  1. What Data We Collect
    | Data Type|Why We Collect It| Legal Basis|
    | Order Info: Name, address, email, phone | To ship Papaver rhoeas products + send tracking | Contract fulfillment |
    | Payment Info: Last 4 digits, billing address | Process payment, fraud prevention. Full card data handled by Stripe/Apple Pay only | Contract fulfillment |
    | Website Data: IP, browser, cookies | Site security, analytics, improve UX | Legitimate interest |
    | Support Emails| Answer questions, resolve issues | Legitimate interest |
    | Age Confirmation| Verify 18+ for botanical products | Legal obligation |
    We DO NOT collect: Health data, consumption habits, or any info about Papaver somniferum use.
  2. How We Use Your Data
  3. Fulfill orders: Ship from Austria, create customs docs, send phytosanitary certs
  4. Legal compliance: Age checks, VAT invoices, customs declarations for Papaver rhoeas
  5. Customer service: Reply to emails/WhatsApp about your order
  6. Marketing: Only if you opt-in. We send max 1 email/month about farm updates. Unsubscribe anytime.

We NEVER sell your data. We NEVER share customer lists with third parties except shipping carriers.

  1. Who We Share Data With
  2. Shipping: DHL, Austrian Post, FedEx
  3. Payments: Stripe, Apple Pay and other payment options – for transaction processing
  4. Hosting: [Hostinger], EU servers
  5. Legal: If required by Austrian authorities or EU customs

All partners are GDPR compliant. No data leaves EU unless shipping to your country.

  1. Cookies
    We use:
  • Essential: Cart, checkout, age gate – cannot be disabled
  • Analytics: Google Analytics 4, anonymized IP – you can opt-out
  • No advertising cookies – we don’t run retargeting ads for botanical products
  1. Data Retention
  • Orders: 10 years for Austrian tax law
  • Support emails: 3 years
  • Marketing: Until you unsubscribe
  • Analytics: 14 months
  1. Your GDPR Rights
    Email austrianpoppypods@gmail.com to:
    Access, correct, delete, export, or restrict your data. You can also lodge a complaint with the Austrian Data Protection Authority: http://dsb.gv.at
  2. Age Restriction
    Site is 18+. We do not knowingly collect data from minors. If you believe a minor provided data, contact us for deletion.
  3. International Transfers
    Non-EU orders: Your name/address is transferred to DHL for delivery only. Protected by EU Standard Contractual Clauses.
Scroll to Top