Privacy Policy

Last updated: October 16, 2026 · Hacienda El Habra, Manabí, Ecuador · Member of the ANDEANFLAVORS consortium

This Privacy Policy explains how Hacienda El Habra ("El Habra", "we", "us" or "our") collects, uses and protects the personal data of visitors and business contacts ("you") of www.elhabra.com (the "Site"). Hacienda El Habra is a member of the ANDEANFLAVORS consortium and applies the consortium's privacy standards.

Owner and Data Controller

Hacienda El Habra · Manabí, Ecuador · Member of the ANDEANFLAVORS consortium (www.andeanflavor.com) · Privacy contact: info@andeanflavor.com

Data We Collect

• Contact and business data you send us through the quote or contact form: name, company, email address, telephone number, country and the details of your inquiry (products, varieties, volumes, destination).

• Usage data collected automatically for security and operation (IP address, browser, device, pages visited, date and time) and, only if you allow it in our cookie banner, data from functionality, measurement or marketing cookies.

We apply the protection standards of the EU General Data Protection Regulation (GDPR) to all users, wherever they are. We process personal data to answer your inquiry and prepare quotes, samples and orders (pre-contractual and contractual necessity); to operate and secure the Site (legitimate interest); to comply with legal, tax and export obligations (legal obligation); and, where you agree, for functionality, measurement and marketing cookies (consent, which you can withdraw at any time).

Sharing Within the ANDEANFLAVORS Consortium

To prepare quotes, samples, logistics and export, your inquiry may be shared with ANDEANFLAVORS C. LTDA. (Quito, Ecuador), the consortium company that coordinates commercial and export operations. We also use service providers such as our web host and email provider, who act on our instructions. We do not sell your personal data.

International Transfers

Your data is processed in Ecuador and wherever our service providers operate, which may include the United States. When data leaves your country, we rely on the safeguards required by applicable law, such as adequacy decisions or standard contractual clauses. You may ask us for details of these safeguards.

Retention

Inquiry and customer data are kept for as long as needed to answer you and to perform any contract, and then for the periods required by tax, accounting and export rules. Records of cookie consent choices are kept for up to three years after your last choice to demonstrate compliance.

Your Rights (EU, EEA and UK – GDPR)

You have the right to access, rectify and erase your data, to restrict or object to its processing, to receive a portable copy, to withdraw consent at any time without affecting earlier processing, and to lodge a complaint with your data protection authority. We answer requests free of charge, generally within one month.

Users in Brazil (LGPD)

Under the Lei Geral de Proteção de Dados you may request confirmation of processing, access, correction, anonymisation, blocking or deletion, portability, information about sharing and about refusing consent, and revocation of consent. You may also petition the ANPD.

Users in Switzerland (FADP)

Under the revised Federal Act on Data Protection you may obtain information about and a copy of your data, have inaccurate data corrected, object to processing and request deletion, and contact the Federal Data Protection and Information Commissioner (FDPIC).

US State Privacy Rights and Notice at Collection

Notice at collection: we collect identifiers (name, email, telephone), commercial information about quotes, samples and orders, and internet activity from cookies you allow, for the purposes and periods described above. Residents of California and other states with consumer privacy laws may have the right to know, access, correct and delete their data, to opt out of any "sale" or "sharing" and targeted advertising, to limit use of sensitive data, and not to be discriminated against. We do not sell personal data. We honour the Global Privacy Control (GPC) signal as an opt-out, and you can opt out at any time with "Your Privacy Choices" at the bottom of every page.

Users in Ecuador (LOPDP)

As an Ecuadorian business we comply with the Ley Orgánica de Protección de Datos Personales. You have the rights of information, access, rectification and updating, deletion, objection, portability, suspension of processing and not to be subject to decisions based solely on automated processing, and you may file complaints with the Superintendencia de Protección de Datos Personales.

Cookies and Consent

The Site uses strictly necessary cookies to operate and to remember your privacy choices. Functionality, measurement and marketing cookies are placed only after you consent in our self-hosted cookie banner, which offers "Accept all", "Reject all" and "Customize" with equal prominence. You can change your choice at any time with "Your Privacy Choices" or the round privacy button. Details are in our Cookie Policy.

Children

The Site is intended for business users and is not directed to children under 16. We do not knowingly collect their data; if we learn that we have, we will delete it.

Changes and Contact

We may update this policy and will show the new date at the top. When our cookie practices change, the banner asks for your consent again. For questions or to exercise your rights, write to info@andeanflavor.com or use the contact form on this Site.