Privacy
Information updated on 25 October 2026.
Data controller and contact
Data controller: ANCESTRUM NATURAL S.L. Spanish tax identification number (NIF): B23853047. Registered office: Calle Doce de Octubre, 5, Local, 28009 Madrid, Spain.
You can contact us and exercise your rights at infoancestrum@gmail.com or by post to the address above.
What data is processed and why
The website presents the brand and its products. It has no registration forms, newsletter, user accounts or payments. Your manually selected language is saved in your browser to remember that preference.
If you email us, we process your email address, the information you voluntarily provide and the message content to respond, handle issues and follow up on your enquiry. Contacting us does not add you to advertising lists.
Purchases are made on Amazon. This website does not collect your payment details or the information you provide when placing an order on that service.
Legal bases for processing
Handling and following up on general enquiries is based on our legitimate interest in responding to people who contact the company and keeping the necessary communication history. Where an enquiry relates to a contractual relationship or steps you have requested before entering into one, the basis is managing that relationship or request. Compliance with legal obligations is based on the applicable obligation.
The code of this website does not make automated decisions about you or create marketing profiles.
Hosting and technical data
The website is hosted on ChatGPT Sites, an OpenAI service. When you visit, the infrastructure may process your IP address, browser details, date and time, and requested pages to serve and protect the service and measure its use. Sites provides automatic visitor and page-view counts; Ancestrum has not added its own analytics tools or advertising pixels.
OpenAI's European policy identifies OpenAI Ireland Limited as the controller for the processing it describes for residents of the European Economic Area and Switzerland. This does not mean that all data is stored in Ireland or that a business data-processing arrangement has been contracted.
Provider information on privacy and retention:
https://openai.com/policies/eu-services-privacy-policy/
Information about Sites statistics:
https://learn.chatgpt.com/docs/sites/managing-a-site
The infrastructure uses Cloudflare protection services. A public check on 23 October 2026 observed the __cf_bm security cookie, described in Cookies and storage. These providers may process connection data to deliver their services.
Email and other recipients
The contact email is a free Gmail account used for brand communications; it is not a Google Workspace account. Google provides the service under its terms and privacy policy. For users in the European Economic Area and Switzerland, that policy identifies Google Ireland Limited as the controller for the processing it describes.
https://policies.google.com/privacy?hl=en
In addition to the providers needed to host the website and manage email, data may be disclosed to authorities where legally required. Links to Amazon and Instagram open services with their own policies; content from those platforms is not embedded on this website.
International processing
OpenAI and Google services may process data outside the European Economic Area, including in the United States and other countries. Their policies explain the adequacy decisions, standard contractual clauses or other safeguards they use where applicable. We do not claim that all processing remains within the European Union or that a Google Workspace contract exists.
Google information on transfers:
Retention of enquiries
Email enquiries are archived and are not automatically deleted after a reply. Their purpose is to handle the communication, preserve the context for follow-up and manage related issues or complaints. Retention depends on the need for that history in relation to the enquiry and any applicable responsibilities or obligations, rather than unlimited archiving for any purpose.
You may request erasure or object to retention where applicable. The absence of automatic deletion does not remove those rights. When there is no longer a purpose or obligation justifying retention, keeping the data in an identifiable form must cease.
Hosting technical logs follow the provider's retention criteria published in its policy. We do not assign those logs a fixed number of days that the provider has not specified for this website.
Your rights and complaints
You may request access, rectification, erasure, objection, restriction and portability where applicable by writing to infoancestrum@gmail.com. Where processing is based on consent, you may withdraw it without affecting earlier processing. We may request only the information necessary to verify your identity and handle the request.
You may lodge a complaint with the Spanish Data Protection Agency:
Changes
This information will be reviewed if website functions, providers or processing purposes change. The current version is published on this page.