Privacy Policy

At Bulk Genetics, we take the privacy and protection of our customers' and users' personal data seriously.

This Privacy Policy explains what personal data we process through bulkgenetics.com, what we use it for, the legal basis for the processing, how long we retain it and which third parties may be involved in its processing.

1. Data controller

  • Data controller: GLOBAL WEB MARKT, S.L.
  • Trading name: Bulk Genetics
  • Spanish Tax ID (NIF): B54742531
  • VAT ID: ESB54742531
  • Registered address: Calle Cardenal Benlloch, 11 bajo, 46920 Mislata (Valencia), Spain
  • General email: info@bulkgenetics.com
  • Email for privacy matters: privacy@bulkgenetics.com
  • Commercial Registry: Commercial Registry of Valencia, Sheet V-235718
  • IRUS: 1000167451362

2. Applicable legislation

Personal data processing carried out by GLOBAL WEB MARKT, S.L. is performed in accordance with Regulation (EU) 2016/679 of 27 April 2016, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), and any other applicable legislation.

3. What personal data we process

The data processed will depend on your relationship with Bulk Genetics and the features you use. We may process the following categories:

  • Identification data: first name and surname.
  • Contact data: postal address, email address and telephone number.
  • Account data: information required to create and manage a customer account where the user chooses to register.
  • Contractual data: orders, products purchased, returns, claims, incidents and communications relating to purchases.
  • Delivery data: name, address, telephone number and any other information required to deliver the order to the specified recipient.
  • Billing data: information required to issue invoices and comply with our tax, accounting and commercial obligations.
  • Payment-related data: payment method used, transaction status, transaction references and any other information required to manage payments or refunds.
  • Browsing and technical data: IP address, device type, browser, operating system, connection information, pages visited and other data relating to the use and security of the Website.
  • Marketing communications data: email address, subscription status and data relating to the sending and management of communications.
  • Review-related data: information required to request and manage reviews concerning the purchasing experience or products purchased.
  • Communications: information voluntarily provided by the user when contacting us by email, forms, WhatsApp or other available channels.

We do not intentionally request special categories of personal data, such as information concerning health, ethnic origin, political opinions, religion, sexual orientation or other specially protected data. We ask users not to include this type of information in their communications unless strictly necessary.

4. Why we use personal data and the legal basis for processing

4.1. Order management and contractual relationship

We process the data required to:

  • Process and manage orders placed through the store.
  • Manage payments and, where applicable, refunds.
  • Prepare, manage and deliver orders.
  • Send communications relating to the status of a purchase.
  • Manage returns, claims, incidents and after-sales service.
  • Manage the customer's account where they have chosen to register.

The legal basis is the performance of the contract entered into with the customer and taking steps at the customer's request prior to entering into a contract.

4.2. Payments

We use specialised payment service providers and financial institutions to manage payments.

When a customer makes a card payment, the data required to process the transaction is handled by the relevant payment service provider. Bulk Genetics does not ordinarily receive or store the full bank card details used to authorise the transaction.

The legal basis is the performance of the contract.

4.3. Billing, accounting and legal obligations

We process the data required to issue invoices, maintain our accounts, manage our business activity and comply with applicable tax, commercial and legal obligations.

The legal basis is compliance with legal obligations applicable to GLOBAL WEB MARKT, S.L..

4.4. Customer service and enquiries

When you contact us by email, forms, WhatsApp or other available channels, we will use the information provided to respond to your enquiry, manage a request or resolve an issue.

Depending on the nature of the communication, the legal basis will be taking pre-contractual steps, performance of the contract or our legitimate interest in properly handling communications received and providing customer service.

4.5. Newsletter and marketing communications

Where a user voluntarily subscribes to our newsletter, we will use their email address to send information about Bulk Genetics, news, products, promotions and other communications relating to our activity.

The legal basis for this processing is the user's consent.

Consent may be withdrawn at any time using the unsubscribe link included in each communication or by writing to privacy@bulkgenetics.com.

Withdrawal of consent will not affect the lawfulness of processing carried out before it was withdrawn.

4.6. Analytics and Website improvement

We use analytics tools to understand how the Website is used, obtain statistics, detect technical problems and improve our content, operation and user experience.

We currently use Plausible Analytics, a web analytics service designed to obtain aggregated statistics without placing cookies on the visitor's device and without using persistent identifiers to track individual users.

We do not use Google Analytics or advertising or social media pixels.

The legal basis is our legitimate interest in understanding, in aggregate form, how the Website is used and in improving it.

If we add a tool that requires consent in the future, we will update this Privacy Policy and our Cookie Policy and will only activate it after the user has given their consent.

4.7. Security and fraud prevention

We may process technical data, connection data and information relating to transactions carried out through the store in order to protect our systems and users, detect unauthorised access, prevent abuse or fraud and ensure transaction security.

The legal basis is our legitimate interest in protecting our infrastructure, business activity and customers against security incidents, fraud and abusive use of our services.

4.8. Customer reviews

Following a purchase, we may use certain data relating to the order to ask the customer to review their purchasing experience or the products purchased through our specialist provider eKomi.

The data used will be limited to what is necessary to manage the invitation and verify that the review relates to a genuine purchasing experience.

This processing is based on our legitimate interest in understanding customer satisfaction, obtaining verified reviews and improving our products and services.

The customer may object to this processing at any time by writing to privacy@bulkgenetics.com.

4.9. Artificial intelligence tools

GLOBAL WEB MARKT, S.L. uses artificial intelligence tools to assist with certain internal tasks. These may include services provided by OpenAI and Anthropic.

These tools may be used to assist our team with tasks such as writing, translation, information analysis, programming, technical support, information classification, preparation of responses or management of certain internal processes.

Where a task may involve the processing of personal data, we seek to limit the information provided to what is strictly necessary for the relevant purpose and apply data minimisation or pseudonymisation measures where possible.

We do not use these tools to make decisions based solely on automated processing that produce legal effects concerning our customers or similarly significantly affect them.

The legal basis will depend on the specific purpose for which the tool is used and may be performance of the contract, compliance with a legal obligation or our legitimate interest in improving and making our internal processes more efficient, provided that the rights and freedoms of the data subject do not override those interests.

5. Where we obtain personal data from

Most personal data is provided directly by the user when making a purchase, creating an account, subscribing to communications, contacting us or using any of our services.

We may also receive information generated during the contractual relationship, such as information relating to payment status, shipment tracking, order delivery or the handling of an incident.

Where a purchaser provides another person's details as the recipient of an order, they must ensure that they are entitled to provide the information required to manage the delivery.

6. Service providers and recipients of personal data

To carry out our business activity, we use specialist service providers that may process personal data on behalf of GLOBAL WEB MARKT, S.L. or receive certain data where necessary to provide the relevant service.

Providers and categories of recipients we may use include:

  • Costplus OÜ (Cost+): card payment processing.
  • BBVA and Wise: banking services, transfers and management of financial transactions.
  • Sendcloud: logistics and shipment management.
  • Correos, Nacex and UPS: transport and delivery of orders.
  • MailerLite: newsletter and marketing communications management.
  • Holded: administrative, accounting and billing management.
  • Google: email, storage, document and productivity tools through Google Workspace.
  • Plausible Analytics: web analytics service.
  • eKomi: requesting, verifying and managing customer reviews.
  • Hetzner: infrastructure and hosting of our systems and services.
  • Cloudflare: network services, security, protection against attacks, content delivery and traffic management.
  • Meta / WhatsApp: messaging service used where the user chooses to communicate with us through this channel.
  • Slack: internal communication and coordination tool that may be involved in the management of certain incidents or processes.
  • OpenAI: artificial intelligence tools and services used to support certain internal processes.
  • Anthropic: artificial intelligence tools and services used to support certain internal processes.

Only the data necessary to provide the relevant service will be made available to each provider.

Where a provider acts as a data processor, access to personal data will take place in accordance with applicable data protection obligations and, where required, under an appropriate data processing agreement.

Personal data may also be disclosed to public authorities, tax authorities, law enforcement agencies, courts, tribunals or other bodies where we are required to do so by law or pursuant to a valid request.

7. Systems managed directly by Bulk Genetics

The online store is managed using PrestaShop, and our customer support and communications management system may use FreeScout.

These applications are installed on infrastructure managed by GLOBAL WEB MARKT, S.L.. Their use alone therefore does not mean that the data stored in them is disclosed to the developers of those applications.

8. International data transfers

Some of the providers used by GLOBAL WEB MARKT, S.L. belong to international groups or may process certain data outside the European Economic Area.

Where an international transfer of personal data takes place, GLOBAL WEB MARKT, S.L. will use the mechanisms provided for by the GDPR to ensure an adequate level of protection.

Depending on the provider and destination country, these mechanisms may include:

  • An adequacy decision adopted by the European Commission.
  • The EU-US Data Privacy Framework, where applicable to the recipient.
  • Standard Contractual Clauses approved by the European Commission.
  • Other safeguards provided for under applicable legislation.

You may request further information about international transfers and the applicable safeguards by writing to privacy@bulkgenetics.com.

9. How long we retain personal data

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected and subsequently for any period during which legal obligations or liabilities may arise.

As a general rule:

  • Order and customer data: for the duration of the contractual relationship and subsequently for the applicable statutory limitation periods.
  • Invoices and accounting and tax documentation: for the periods established by applicable tax, accounting and commercial legislation.
  • Enquiry and customer service data: for the time required to deal with the enquiry or issue and subsequently for the period required to address any potential liabilities.
  • Newsletter data: until the data subject withdraws consent or unsubscribes.
  • Review-related data: for as long as necessary to manage and maintain the authenticity of the review and for the applicable periods required to address potential liabilities.
  • Technical and security data: for the period reasonably necessary to ensure the security of our systems, investigate incidents and address potential liabilities.
  • Data obtained through cookies or similar technologies: for the periods stated in our Cookie Policy and in the configuration of each tool.

Where personal data is no longer required for ordinary processing, it may be appropriately restricted for the periods required by law before being permanently deleted.

10. Your rights

Any person has the right to obtain confirmation as to whether GLOBAL WEB MARKT, S.L. is processing personal data concerning them.

Where applicable, data subjects may exercise the following rights:

  • Access: to know what personal data we process and obtain a copy of it.
  • Rectification: to request the correction of inaccurate or incomplete data.
  • Erasure: to request deletion of personal data where the legal requirements are met.
  • Restriction of processing: to request that processing be restricted in the circumstances provided for by law.
  • Objection: to object to processing based on legitimate interests where the circumstances provided for by law apply.
  • Data portability: to receive certain personal data in a structured, commonly used and machine-readable format and, where technically feasible, request its transmission to another controller.
  • Withdrawal of consent: to withdraw consent given for a specific purpose at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please write to:

privacy@bulkgenetics.com

You may also contact us by post at:

GLOBAL WEB MARKT, S.L.
Calle Cardenal Benlloch, 11 bajo
46920 Mislata (Valencia)
Spain

The request must enable us to properly identify the data subject and specify the right they wish to exercise.

Where we have reasonable doubts concerning the identity of the person making the request, we may request additional information strictly necessary to confirm their identity.

11. Right to lodge a complaint

If you believe that the processing of your personal data does not comply with applicable legislation, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).

www.aepd.es

You may also contact us beforehand at privacy@bulkgenetics.com so that we can review and, where appropriate, resolve any issue relating to the processing of your personal data.

12. Minors

Purchasing products through Bulk Genetics is strictly reserved for persons over 18 years of age.

We do not knowingly collect personal data from minors for the purpose of processing purchases. If we become aware that a minor's personal data has been provided contrary to these conditions, we will take the appropriate steps to delete it where applicable.

13. Accuracy and updating of personal data

The user is responsible for ensuring that the data provided to Bulk Genetics is accurate, complete and up to date.

Where the data provided relates to another person, for example where a third party is designated as the recipient of an order, the user must ensure that they are entitled to provide the necessary information.

14. Security and confidentiality

GLOBAL WEB MARKT, S.L. implements appropriate technical and organisational measures to protect personal data, taking into account the nature of the information processed, the state of the art and the risks involved.

These measures are intended to prevent, among other risks, the loss, destruction, alteration, disclosure of or unauthorised access to personal data.

Communications made through the Website use encrypted HTTPS connections.

Any persons who may have access to personal information as part of their duties are also subject to appropriate confidentiality obligations.

Nevertheless, no system connected to the Internet can guarantee absolute security against all possible threats.

15. Cookies and similar technologies

Bulk Genetics only uses technical cookies and similar technologies that are necessary for the operation and security of the Website, such as those that keep the session and the basket or remember the age confirmation.

These cookies do not require consent. We do not use analytics or advertising cookies.

Detailed information is available in our Cookie Policy.

16. Changes to this Privacy Policy

GLOBAL WEB MARKT, S.L. may amend this Privacy Policy where necessary to reflect legislative or regulatory changes, new interpretations issued by competent authorities, changes to the services offered or changes to the providers and processing activities carried out.

Where a change materially affects how we process personal data, we will take reasonable steps to inform affected individuals where required.

Last updated: 1 October 2026.

Back to top