Rowhani Saffron Co. branded leather folio with a pen and glass of water on a wooden desk.

Rowhani Saffron Co. is the trading name of Padiz Tejarat Saderat Rowhani LTD.
Last updated: 1 September 2026

This Privacy Policy explains how Rowhani Saffron Co. handles personal information when you visit www.rowhanisaffron.com, place an order, create an account, request a quotation, or contact us. It describes the information we receive, why we use it, who may receive it, how long we keep it, and the choices and rights available to you.

Contents

  1. Who Is Responsible for Your Information
  2. Scope of This Policy
  3. Information We Collect
  4. How We Receive Information
  5. Why We Use Information and Our Legal Bases
  6. Payments
  7. Who We Share Information With
  8. International Access and Transfers
  9. How Long We Keep Information
  10. Cookies and Analytics
  11. Your Privacy Rights
  12. When Information Is Required
  13. How We Protect Information
  14. Children’s Information
  15. External Services and Links
  16. Changes to This Policy
  17. How to Contact Us

1. Who Is Responsible for Your Information

Padiz Tejarat Saderat Rowhani LTD, trading as Rowhani Saffron Co., operates this website and is responsible for the personal information described in this policy. Where data-protection law uses the term controller, the company is the controller of that information.

  • Registered name: Padiz Tejarat Saderat Rowhani LTD
  • Trading name: Rowhani Saffron Co.
  • Address: Unit 503, 5th Floor, Tejarat Complex, Ferdowsi Boulevard, Mashhad, Iran
  • Email: [email protected]
  • Telephone: +98 513 7686 720

We have not designated a data protection officer. Privacy enquiries and requests are handled by the staff responsible for customer and business records and should be sent to the contact details above.

2. Scope of This Policy

This policy applies to personal information handled through this website and the services connected with it, including the online shop, customer accounts, contact and wholesale quotation forms, and messages sent to the email address, telephone number, or WhatsApp contact published on the site. It also covers the order, shipping, customer-service, and commercial records created after you contact us.

It does not govern independent websites, marketplaces, social networks, payment services, carriers, or other third-party platforms. Those organisations are responsible for their own processing and publish their own privacy information.

3. Information We Collect

The information we collect depends on how you use the website and whether you are acting as an individual customer, on behalf of a business, or simply browsing.

Identity and contact details. This may include your name, company name, job title, email address, telephone number, billing address, delivery address, and country.

Account and order details. If you create an account or place an order, we receive your username, the products and quantities ordered, order value, delivery instructions, billing and shipping details, and the history of the order. Account passwords are stored in cryptographically hashed form; we cannot read your password in plain text.

Enquiries and trade information. Contact and quotation forms may collect your message, the saffron grade and packaging format requested, quantity, destination, preferred shipping method, and any information you choose to include in a free-text field. Business correspondence may also contain specifications, sample requests, prices, shipping instructions, and the names and roles of trade contacts.

Payment and transaction details. We receive payment status, transaction references, the method used, and billing information needed to process the order and maintain financial records. We do not receive or store full payment-card or digital-wallet credentials.

Technical and usage information. Our server, security services, and analytics tools may record your IP address, browser and device type, operating system, approximate location derived from the IP address, pages viewed, visit time, referring page or search engine, and information about errors or suspicious activity.

We do not ask you to provide sensitive or special-category information, such as information about health, religion, political opinions, or biometric identifiers. Please do not include such information in an order note, form, or message unless it is genuinely necessary and you have first contacted us to discuss an appropriate way to provide it.

4. How We Receive Information

Most personal information comes directly from you when you browse the site, open an account, place an order, complete a form, or communicate with us. Technical information is generated automatically when your browser connects to the website and its service providers.

We may also receive limited information from organisations involved in your transaction. For example, a payment provider confirms whether payment was authorised, and a carrier or freight forwarder provides collection, customs, tracking, or delivery information. If you contact us on behalf of a business, that business or one of your colleagues may provide your professional contact details.

We do not purchase lists of personal information from data brokers.

5. Why We Use Information and Our Legal Bases

We use personal information only where there is a defined business or legal reason to do so. Where the General Data Protection Regulation, the UK GDPR, or comparable law applies, our principal purposes and legal bases are as follows.

  • To take steps at your request and perform a contract: responding to an enquiry, preparing a quotation, accepting and fulfilling an order, taking payment, arranging export and delivery, and dealing with a return, complaint, or claim.
  • To comply with legal obligations: maintaining accounting, tax, customs, export, and other records required by applicable law, and responding to a valid request from a competent authority.
  • For our legitimate interests: operating and improving the website, maintaining ordinary customer and business records, measuring service use, securing accounts and forms, preventing fraud and abuse, and establishing, exercising, or defending legal claims. We consider the effect on individuals and limit this processing to what is reasonably necessary.
  • With consent where consent is requested: for an optional activity that the law requires us to place under your control. You may withdraw consent at any time, without affecting processing that was lawful before withdrawal.

We do not use personal information for solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significant effects. We will not use information for a materially different purpose without giving any further notice required by applicable law.

6. Payments

Payments are processed by third-party payment providers, including PayPal where that option is offered at checkout. Card, bank, digital-wallet, and local payment credentials are entered into systems controlled by the relevant payment provider and are not stored on our website.

We receive the information needed to match a payment to an order, such as payment status, transaction reference, payer or billing details, amount, and currency. Payment providers process additional information for fraud prevention, security, and regulatory purposes under their own privacy notices and terms.

7. Who We Share Information With

We disclose personal information only when it is reasonably necessary for the purposes described in this policy. Depending on the transaction or service, recipients may include:

  • Website hosting, storage, and technical providers that operate the site, database, and media infrastructure;
  • Payment providers that authorise, settle, and protect transactions;
  • Couriers, postal operators, freight forwarders, customs agents, and other logistics partners that collect, export, clear, track, and deliver consignments;
  • Analytics and website-statistics providers that help us understand visits and identify technical problems;
  • Security and content-delivery providers that filter harmful traffic and deliver site content;
  • Banks, accountants, auditors, insurers, and professional advisers where their involvement is necessary for payment, reporting, risk management, or a dispute; and
  • Public authorities and regulators where disclosure is required or permitted by law.

Some providers act on our instructions, while others determine independently how they process information for their own legal and operational purposes. We do not sell personal information for payment, and we do not provide customer contact or order records to third parties for their own direct marketing.

8. International Access and Transfers

Rowhani Saffron Co. is based in Iran, while the website is hosted in Europe. Personal information may therefore be accessed in Iran and Europe by personnel who need it for order handling, customer service, administration, security, or legitimate business operations. Service providers involved in payments, analytics, communications, and infrastructure may process information in other countries, including the United States.

Iran is not currently covered by a European Commission adequacy decision. The legal requirements and safeguards that apply to a transfer depend on the countries involved, the role of each organisation, and the reason for the transfer. We restrict access to authorised personnel, limit the information used to what the relevant task requires, and require confidential handling. Where applicable law requires additional transfer safeguards, information about the mechanism used for a particular service or transfer may be requested from us at [email protected].

9. How Long We Keep Information

We keep personal information only for as long as the purpose, applicable law, or a legitimate need to resolve a matter requires. The principal periods and criteria are:

  • Customer, order, account, and enquiry records: normally two years after your last order or substantive contact, after which they are deleted or anonymised unless another reason below requires longer retention;
  • Accounting, tax, customs, and export records: for the period required by the laws and authorities applicable to the transaction, which may be longer than two years;
  • Disputes, complaints, and legal claims: until the matter is resolved and any relevant limitation or record-preservation period has expired; and
  • Website security and statistics records: for the period needed to investigate security events, maintain reliable reports, and operate the relevant system, after which records are deleted, aggregated, or anonymised where appropriate.

When deciding whether information is still needed, we consider its nature, the purpose for which it was collected, legal and contractual requirements, the risk of harm if it were misused, and whether the same purpose can be achieved with less information.

10. Cookies and Analytics

Cookies and similar technologies are small data files or identifiers stored or read by a website. This site uses them for two broad purposes.

Necessary website functions. These technologies support shopping baskets, checkout and account sessions, security, fraud prevention, and other functions requested when you use the site. Blocking them may prevent the shop or account features from working correctly.

Analytics and website statistics. We use Google Analytics and a statistics system operating on our own website to understand page visits, referrers, device types, approximate locations, and technical performance. Analytics reports are used to identify problems and improve the website rather than to make decisions that have legal or similarly significant effects on an individual.

At the date of this policy, the website does not display an on-page cookie-consent or preference control. Analytics technologies may therefore be set when a page loads rather than after a choice has been recorded. You can block or delete cookies for this site through your browser settings. Google also provides an Analytics opt-out browser add-on. Blocking necessary technologies may affect functions you choose to use.

This policy describes the site’s current operation; it does not limit any rights or consent requirements that apply under the law of your country.

11. Your Privacy Rights

Your rights depend on the law that applies to our processing and to your location. In particular, where the GDPR or UK GDPR applies, you may have the right to:

  • ask whether we hold personal information about you and receive a copy;
  • have inaccurate information corrected and incomplete information completed;
  • ask for information to be deleted where there is no continuing legal basis to keep it;
  • ask us to restrict processing while a concern is being resolved;
  • object to processing based on legitimate interests;
  • receive information you provided in a structured, commonly used, machine-readable format and, where applicable, have it transmitted to another controller;
  • withdraw consent at any time where processing is based on consent; and
  • complain to a competent data-protection or supervisory authority.

Send a request to [email protected]. We may ask for information reasonably necessary to confirm your identity and protect personal data from unauthorised disclosure. We do not ordinarily charge a fee. Where the GDPR applies, we normally respond within one month. For a complex request or multiple requests, that period may be extended by up to two further months, and we will explain the extension within the first month.

If you are dissatisfied with our response, you may complain to the authority in the country where you live or work, where applicable. European authorities are listed by the European Data Protection Board, and UK complaints may be made to the Information Commissioner’s Office.

12. When Information Is Required

You do not need to provide personal information merely to read the public pages of this website. Information becomes necessary when you ask us to take a specific action. For example, we cannot create an account without account credentials, answer an enquiry without a way to reply, prepare a meaningful wholesale quotation without product, quantity, and destination details, or accept and deliver an order without billing, contact, and delivery information.

Some information is also required by payment, customs, export, or tax rules rather than by our own preference. If required information is not provided, we may be unable to proceed with the account, quotation, payment, shipment, or other requested service.

13. How We Protect Information

We use administrative and technical measures intended to protect personal information against unauthorised access, alteration, disclosure, or loss. These measures include encrypted HTTPS connections, cryptographically hashed account passwords, managed hosting, access restrictions, website and form security controls, spam and malicious-traffic filtering, and the use of specialist payment systems for payment credentials.

Access is limited to personnel and service providers who need information for an authorised purpose. No website or transmission method can be guaranteed completely secure. If a security incident creates a risk that must be reported under applicable law, we will notify the affected individuals and competent authority as required.

14. Children’s Information

The website, online shop, and wholesale services are intended for adults and business users. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so that we can investigate and delete it where appropriate.

15. External Services and Links

The website may link to social networks, payment services, shipping providers, trade organisations, certification bodies, and other independent websites. If you follow a link or choose to communicate through an external platform such as WhatsApp, that organisation may receive information directly from you. We do not control its systems or privacy practices, and its own privacy notice applies to that interaction.

16. Changes to This Policy

We review this policy when our services, providers, legal obligations, or handling of personal information change. The current version will be published on this page with a revised date. If a change materially affects information already provided to us, we will give any additional notice required by applicable law.

This version was published on 1 September 2026. It clarifies the categories and sources of information, purposes and legal bases, international access, retention, cookies and analytics, and the process for exercising privacy rights.

17. How to Contact Us

Questions about this policy, privacy requests, and complaints should be addressed to:

  • Rowhani Saffron Co. (Padiz Tejarat Saderat Rowhani LTD)
  • Unit 503, 5th Floor, Tejarat Complex, Ferdowsi Boulevard, Mashhad, Iran
  • Email: [email protected]
  • Telephone: +98 513 7686 720

Please write “Privacy Request” in the subject line where possible and describe the information or right concerned. This helps us direct the request promptly but is not a condition of making one.