Privacy Policy
Last updated: 18 July 2026.
1. Data controller
- Controller: Candy Ana Manzano Colmenares (La Ceiba Real Food)
- Tax ID (NIF): Y2645786H
- Address: Av. Tomé Cano, 14, Edificio Atlántico, Local 3, 38450 Garachico, Santa Cruz de Tenerife, Spain.
- Contact email: info@laceibarealfood.es
This policy is drafted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
2. What data do we collect?
Through the Site's contact form we only collect the data you choose to provide voluntarily:
- Name
- Email address
- Phone number (optional field)
- The content of your message or order
The Site has no user registration, requires no account creation, and does not collect special categories of data (health, beliefs, etc.), unless you voluntarily include such information in the message field, which we recommend avoiding.
3. Purpose of processing
Data provided through the contact form is used exclusively to:
- Respond to your enquiries, bookings, or orders (for example, custom gluten-free cakes or desserts).
- Contact you by phone, email, or WhatsApp regarding your request.
We do not use your data for marketing or advertising purposes, we do not build profiles, and we do not make automated decisions. We do not transfer, sell, or share your data with unrelated third parties, except with the strictly necessary providers described in section 5, needed for the technical operation of the Site.
4. Legal basis for processing
The legal basis is the data subject's consent, expressly given by ticking the acceptance box for this policy before submitting the form (Art. 6(1)(a) GDPR), and, where applicable, the performance of pre-contractual steps requested by the data subject (Art. 6(1)(b) GDPR) when the contact is made to arrange an order or booking.
5. Recipients and data processors
To provide the contact form service, we use the following providers, which act as data processors and only access the data strictly necessary to deliver their service:
- Resend, Inc. (USA) — used exclusively to technically deliver the contact form's content by email to our address info@laceibarealfood.es.
- Cloudflare, Inc. (USA, with globally distributed infrastructure) — the Site's hosting and content delivery network (CDN) provider, which may process technical connection data (IP address, browser type) for security and performance purposes.
As these providers are based, or have infrastructure, outside the European Economic Area, any international data transfer relies on the safeguards adopted by those providers (Standard Contractual Clauses approved by the European Commission or other equivalent adequacy mechanisms). We do not share your data with any other third party, and we never sell it or use it for advertising purposes.
6. Retention period
Data submitted through the contact form is kept only for as long as necessary to handle your enquiry or order, and afterwards for the period during which legal liabilities could arise, after which it will be deleted or anonymised.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability at any time by emailing info@laceibarealfood.es, specifying the right you wish to exercise and enclosing a copy of an identity document.
If you believe that the processing of your data does not comply with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
8. Security
We adopt reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration, including encrypted communications (HTTPS) and hosting the Site on infrastructure with industry-standard security measures.
9. Minors
The contact form is not directed at children under the age of 14. If you are under 14, please do not provide us with your data without the authorisation of your parent or legal guardian.
10. Changes to this policy
We may update this Privacy Policy to reflect legislative changes or changes to the Site. We recommend reviewing it periodically; the date of the last update appears at the top of this document.