Privacy policy
This site collects two pieces of personal data — a name and a phone number — for one purpose: so that a consultant can call you back and confirm an order. This page explains what happens to that data, who receives it, how long it is kept and how to have it deleted.
What is collected
- Name and phone number, entered by you in the order form.
- Technical data that any web server receives: IP address, user agent and the page the request came from. The IP address is passed to the order-processing partner because partner systems require it for fraud prevention.
- Campaign parameters present in the URL you arrived with (utm_source and similar), so that the source of an order can be attributed.
No payment data is collected. There is no card form anywhere on this site, because payment happens on delivery.
Why, and on what legal basis
The purpose is to process your order request: to call you back, confirm the address and quantity, and arrange delivery. The legal basis is the taking of steps at your request prior to entering into a contract (GDPR Art. 6(1)(b)).
Who receives it
Your name and phone number are transmitted to the affiliate network and the fulfilment partner responsible for order processing and delivery in your country. They act as separate controllers for the purposes of contacting you and delivering the goods. No data is sold, and none is used for advertising profiles.
The site itself is served from Cloudflare infrastructure; Cloudflare processes technical request data as part of delivering the page.
Cookies and tracking
This site sets no advertising or analytics cookies and embeds no third-party trackers. It uses browser sessionStorage for two functional purposes only: remembering that the order form has already been shown so it is not shown again, and preserving campaign parameters between pages of the same visit. That data never leaves your browser and is discarded when you close the tab. Details are on the cookies page.
How long it is kept
Order data is retained by the fulfilment partner for as long as required to complete the order and to satisfy accounting and consumer-protection obligations in your country. This site itself does not maintain a customer database.
Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with your national supervisory authority.
To exercise any of these, write to info@mikoherb.farm from the address you want to use for the reply, including the phone number you provided and the country you ordered from so that the record can be located. Requests are answered within one month.
Children
This site is not directed at children and orders are not knowingly accepted from anyone under 16.
Changes
If this policy changes, the updated version is published on this page and the modification date in the page’s structured data is updated with it.