Privacy Policy

Rowhani Saffron Co. (Padiz Tejarat Saderat Rowhani LTD)
Last updated: 31 August 2026

This policy sets out what personal information we collect through www.rowhanisaffron.com, why we collect it, who has access to it, how long we keep it and what you can ask us to do with it. It is written to be read by our customers, not only by lawyers, and we have tried to keep it specific rather than general. If anything in it is unclear, write to us and we will explain it.

Contents

1. Who We Are
2. Scope
3. Information We Collect
4. How We Collect Information
5. How We Use Information
6. Legal Bases for Processing
7. Payments
8. Who We Share Information With
9. International Access and Transfers
10. Data Retention
11. Cookies and Analytics
12. Your Rights
13. Whether You Must Provide Information
14. Security
15. Children
16. Third-Party Links
17. Changes to This Policy
18. Contact Information
19. Last Updated

1. Who We Are

Rowhani Saffron Co. is the trading name of Padiz Tejarat Saderat Rowhani LTD, a private company registered in Mashhad, Islamic Republic of Iran. The company was established in 2009 and produces, packs and exports Iranian saffron. This website is operated by the company, and the company is responsible for the personal information described in this policy.

• Registered name: Padiz Tejarat Saderat Rowhani LTD
• Trading name: Rowhani Saffron Co.
• Address: Unit 503, 5th Floor, Tejarat Complex, Ferdowsi Boulevard, Mashhad, Iran
• Email: [email protected]
• Telephone: +98 513 7686 720

We have not appointed a data protection officer, as we are not required to do so. Correspondence about this policy, or about any personal information we hold, should be sent to the email address above. It is handled by the staff responsible for customer records.

2. Scope

This policy applies to www.rowhanisaffron.com and to everything that runs through it: the online shop, the contact form, the wholesale quotation form, customer accounts, and the messages that reach us by email or WhatsApp from the contact details published on the site. It also covers the order files and correspondence that follow from those contacts.

It does not apply to other websites, marketplaces or social media platforms on which our products or our company name may appear. Those services are operated by other companies, and their own privacy terms govern what they do with your information.

3. Information We Collect

We collect four categories of information.

Order and account information. When you place an order or open an account, we receive your name, email address, telephone number, billing address, delivery address, the products and quantities you ordered, the value of the order, and any instructions attached to it. If you create an account, we also hold your username and your password in encrypted form. We never see the password itself.

Enquiry and quotation information. Our contact form asks for your name, email address and message, and in one version also the country you are writing from. Our wholesale quotation form asks for the saffron grade, the packaging format, the quantity, the destination city and the shipping method you prefer. Whatever you choose to write in a free-text field is collected along with it.

Correspondence. We keep the emails, form submissions and WhatsApp messages you send us, together with our replies. For business customers this normally includes commercial correspondence such as specifications, prices, samples and shipping instructions.

Technical information. Our web server and our statistics tools record the IP address you connect from, your browser and device type, an approximate location derived from that IP address (normally country and city), the pages you open, the time of the visit, and the website or search engine that sent you to us.

We do not ask for special categories of data such as health, religious or political information, and we would ask you not to send any. We do not collect or store payment card numbers; section 7 explains how payments are handled.

4. How We Collect Information

Most of what we hold comes directly from you. You type it into the checkout, into one of our forms, or into a message you send us. A further part is collected automatically while you browse, by the web server and by the statistics tools described in section 11.

A small amount reaches us indirectly. Our payment provider tells us that a payment has been authorised and gives us the reference for it. The freight forwarder handling a consignment confirms collection and delivery. We do not buy personal data from data brokers, and we do not add information about you from outside sources.

5. How We Use Information

We use personal information for the following purposes, and for nothing else without telling you first.

• To operate the website and the shop, including keeping your basket and your session working while you browse.
• To accept, prepare, pack, document and ship your order, and to deal with any return or claim that arises from it.
• To answer enquiries and to prepare wholesale quotations, including the sampling and pricing discussions that usually precede an export order.
• To communicate with you about an order or an enquiry, by email or through WhatsApp if that is how you contacted us.
• To issue invoices and to keep the accounting, customs and export records we are obliged to keep.
• To measure how the website is used, at the level of pages and visits, so that we can correct problems and improve what we publish.
• To protect the website, the shop and our customers against spam, automated abuse, fraudulent orders and payment fraud.
• To establish, exercise or defend a legal claim, and to respond to a lawful request from a competent authority.

We do not sell personal information, and we do not share it with third parties for their own marketing. We do not run automated decision-making or profiling that produces legal effects for you or similarly significant consequences.

6. Legal Bases for Processing

Where the General Data Protection Regulation applies to a visitor, we rely on the following legal bases.

• Performance of a contract. Processing an order, arranging delivery, handling a return and dealing with the payment for it.
• Steps taken at your request before entering into a contract. Answering an enquiry, preparing a quotation, sending a sample or agreeing terms.
• Legal obligation. Keeping accounting, tax, customs and export documentation, and replying to lawful requests from authorities.
• Legitimate interests. Keeping the website secure and available, preventing fraud and abuse, measuring website use in order to improve it, and maintaining ordinary business records of who ordered what. In each case we have considered whether our interest is outweighed by your interests and rights, and we limit the processing to what the purpose actually requires.

We do not currently rely on consent as a legal basis for anything on this website. Should that change, for example if we introduce a mailing list, we will ask for your consent first, and you will be able to withdraw it at any time without affecting anything done before you withdrew it.

7. Payments

Payments on this website are processed by PayPal, which also provides the card, digital wallet and local payment methods offered at checkout. Your card number or wallet credentials are entered on the payment provider’s own systems. They do not pass through our website, and we neither see nor store them.

What we receive back is the confirmation that the payment succeeded or failed, the transaction reference, and the billing details needed to complete the order and issue the invoice. The payment provider acts as an independent controller for its own fraud prevention and regulatory purposes, and its own privacy terms apply to that part of the transaction.

8. Who We Share Information With

We disclose personal information only where there is a reason to, and only to the following categories of recipient.

• Hosting and cloud providers that run the website, its database and its media files.
• Our payment provider, in order to take and confirm payment.
• Shipping, courier and freight forwarding partners, so that consignments can be collected, exported, cleared through customs and delivered. The companies we use vary by destination, service level and season, so we do not name them individually here. If you want to know which company will handle a specific consignment, ask us and we will tell you.
• Analytics providers, which process technical information about visits to the website.
• Security and content delivery providers, which filter malicious traffic and deliver the site’s pages and images.
• Banks, accountants, auditors and legal advisers, where this is necessary for the payment, the accounts or a dispute.
• Public authorities, including customs, where disclosure is required by law.

Suppliers acting on our behalf may use the information only for the task we have given them, and are required to keep it confidential.

9. International Access and Transfers

Our company is based in Iran and this website is hosted in Europe. Order and customer records may be accessed by the relevant teams and offices in Iran and in Europe, because an export order is normally prepared in one place and coordinated from another. Our service providers may be located elsewhere again, including in the United States.

Iran is not covered by a European Commission adequacy decision, and we say so plainly rather than leave it unstated. Where information is handled outside your own country, we keep the transfer to what the order or enquiry actually requires, restrict access to the members of staff who need it for their work, and require them to treat it as confidential. If you would like more detail about how a particular transfer is handled, write to us.

10. Data Retention

We do not keep personal information for longer than we have a reason to.

• Customer, order and enquiry records: two years from your last order or your last contact with us, after which they are deleted or anonymised.
• Accounting, tax, customs and export documentation: for as long as the applicable rules require us to retain it, which is longer than two years.
• Correspondence relating to a dispute or claim: until the matter is closed and any period for bringing a claim has expired.
• Website statistics: technical records of visits are held in our statistics system for reporting purposes. They are not filed under your name, and we do not use them to identify individual visitors. If you would like the technical records associated with your visits removed, contact us and we will deal with the request.

11. Cookies and Analytics

Cookies are small files placed on your device by a website. This site uses two kinds.

Necessary cookies make the shop work. They remember what is in your basket, keep your session valid while you move between pages, and support the security checks applied at checkout and at login. The shop cannot function without them.

Analytics cookies and similar technologies tell us how the website is used. We use Google Analytics for this, together with a statistics system running on our own server, which records visits at the level of pages, referrers and approximate location.

This website does not currently display a cookie consent banner, which means that these cookies are set when you arrive rather than after you have made a choice. We prefer to state that clearly here rather than describe a mechanism that is not in place. In the meantime you have two practical controls. Every current browser lets you block or delete cookies for a particular site, and Google publishes an opt-out browser add-on that stops Google Analytics from measuring your visits. Blocking the necessary cookies will stop parts of the shop from working.

12. Your Rights

Subject to the law that applies to you, and in particular if you are in the European Economic Area or the United Kingdom, you may:

• ask what personal information we hold about you and receive a copy of it;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete information we no longer have a reason to keep;
• ask us to restrict how we use it while a question about it is resolved;
• object to processing that we base on our legitimate interests;
• ask for the information you gave us to be provided in a portable, machine-readable format;
• withdraw consent, where consent is the basis we have relied on.

Send any of these requests to [email protected]. We will respond within one month. If a request is unusually complex we may need longer, and we will tell you within that first month if so. There is no charge. We may ask you for enough information to confirm who you are, so that we do not disclose one customer’s records to another person.

If you are not satisfied with our response, you may complain to the data protection authority of the country in which you live or work.

13. Whether You Must Provide Information

You do not have to give us any personal information in order to read this website. Providing it becomes necessary at the point where you want something from us. We cannot accept, invoice or ship an order without a name, a delivery address and contact details, and we cannot price a wholesale enquiry without knowing the grade, quantity and destination. If that information is not provided, the order or the enquiry cannot be completed. Some details are required of us by customs and export rules rather than by us.

14. Security

The website runs over an encrypted HTTPS connection, so that what you send to us is not readable in transit. Payment details are entered on our payment provider’s systems and never reach ours. Account passwords are stored only in hashed form. Automated abuse and spam filtering is applied to our forms, to the login page and to the checkout. Access to order and customer records is limited to the staff who need it for their work, and the site is hosted in a managed European data centre with its own physical and network security.

No website or company can promise that a security incident will never occur, and we will not claim otherwise. What we can say is that we review these measures as the site changes, and that if an incident occurred that presented a real risk to you, we would inform you and the relevant authority as required.

15. Children

Our products and this website are intended for adults, and in particular for food professionals, distributors and retail customers of legal purchasing age. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, contact us and we will delete it.

16. Third-Party Links

This website links to other sites, including our social media profiles and, from time to time, to trade bodies, certification schemes and news articles. We do not control those sites and we are not responsible for their content or for how they treat your information. Once you follow a link, this policy no longer applies, and you should read the privacy terms of the site you have arrived at.

17. Changes to This Policy

We will amend this policy when the way we work changes, when we begin or stop using a service described in it, or when the law requires it. The current version is always published on this page, and the date at the top and at the foot of the page tells you when it was last revised. Where a change materially affects how we use information you have already given us, we will say so on this page rather than change it quietly.

18. Contact Information

Questions about this policy, requests concerning your personal information, and complaints should be addressed to:

• Rowhani Saffron Co. (Padiz Tejarat Saderat Rowhani LTD)
• Unit 503, 5th Floor, Tejarat Complex, Ferdowsi Boulevard, Mashhad, Iran
• Email: [email protected]
• Telephone: +98 513 7686 720

We aim to answer privacy correspondence within one month, and ordinary commercial correspondence considerably sooner.

19. Last Updated

This privacy policy was last updated on 31 August 2026 and replaces any earlier version published on this website.