Last updated: 12 September 2026
Fresh Club is operated by EYEPIC, S.L. This policy explains how we handle personal information when you visit fresh.club, join our waiting list, receive an invitation, become a member, shop with us, or contact us.
Fresh Club is currently pre-launch and is not accepting purchases or paid subscriptions. The shopping, payment, delivery and subscription descriptions below apply only when those services become available and you use them.
EYEPIC, S.L., a company established in Spain, is the controller of the personal information described in this policy.
Please mention “Fresh Club” when contacting us so we can direct your request to the right team. This policy concerns Fresh Club; using our shop does not enrol you in EYEPIC, S.L.’s other services.
Waiting list and membership. We collect your name, email address, confirmation status, signup source, product preferences you choose to provide, invitation and referral records, and any separate newsletter choice. When you create an account, we also process your account details and authentication information, including login-code or session records.
Shopping and subscriptions. We process basket contents, products, sizes, colours, quantities, billing and delivery addresses, contact details, order history, delivery information, payment status and transaction references. For subscriptions, this includes the selected plan, renewal schedule, saved payment reference, and changes, skips or cancellations. If you request a business invoice or use wholesale services, we may also need your business name and tax details.
Payments. The payment provider used at checkout processes the payment details you enter. We receive the information needed to recognise and manage your payment, such as transaction identifiers, payment status, and limited payment-method details. Please do not send full card details or security codes to customer support.
Messages and support. We retain enquiries, correspondence, return or complaint details, and any attachments you choose to send. Please avoid including sensitive information that is unnecessary for your request.
Website use. Our systems receive technical information such as IP address, request time, browser and device information, requested pages and error details. With your analytics permission, we also collect information about visits, navigation, interactions and performance, as described below.
Most information comes from you or your interaction with our website. Payment and delivery providers supply payment confirmations and delivery updates. If someone invites or refers you, we may receive your email address and information linking that invitation to its sender. We use it to handle the invitation and prevent misuse; an invitation does not subscribe you to our newsletter.
Invitation and referral features may show the sender whether their invitation or referral has been used or qualified. They do not give the sender access to your payment details, address or order contents. If you receive an unexpected invitation, you can ignore it or ask us to remove the associated information.
You can browse without creating an account and decline optional analytics or marketing. If you do not provide information needed for an account, delivery or payment, we may be unable to provide that particular service. Optional preferences and newsletter permission are not conditions of purchase.
Cookies and browser storage help keep you signed in, remember your basket and choices, and complete checkout. We use necessary storage for requested functions and ask before enabling optional analytics. You can accept, reject or change optional categories through Cookie preferences in the website footer, including during checkout. Withdrawing permission does not affect processing already carried out lawfully.
The current storefront uses these necessary records:
Record Purpose Browser lifetime
fresh_club_consent
Remembers acceptance or rejection and the policy revision
180 days
Spree basket token and basket ID, including separate wholesale baskets
Maintains your basket and checkout
Up to 30 days from setting or renewal
Spree account access token
Keeps you signed in
Up to 7 days from setting or renewal
Spree refresh token
Renews your authenticated session
Up to 30 days from setting or renewal
Country and language preferences
Routes you to your selected shopping region and language
Up to one year from setting or renewal
Invitation and checkout session storage
Carries an invitation or completed-order reference between pages
Browser session
Analytics. With permission, Fresh Club uses OpenPanel to understand visits and interactions. Its script is supplied through openpanel.dev and events are sent to analytics.eyepic.io. The service may receive page and referrer information, browser/device details, timing and interaction data, and technical network information. Optional Sentry browser diagnostics, when enabled, help investigate application errors. Payment and account information should not be entered into public URLs or optional feedback fields.
Marketing preferences. The current storefront provides a marketing choice, but no advertising or social-media tracking integration is enabled by that choice alone. We will identify any such providers and their purposes before introducing them and obtain any required permission. Newsletter consent is a separate choice.
Rejecting optional cookies leaves necessary shopping and account functions available. Browser settings can also delete or block storage, although blocking necessary cookies may prevent login or checkout. The lifetimes above concern browser records, not the retention of orders or other information in our systems.
Access is limited to people and organisations that need information for the relevant purpose:
Providers acting on our instructions are subject to appropriate data-processing obligations. Some recipients, such as payment providers or authorities, act as independent controllers for their own legal purposes. We do not sell your personal information. A business reorganisation or transfer may require limited disclosure to advisers or a successor, with appropriate confidentiality and data-protection safeguards and notice of a controller change where required.
EYEPIC, S.L. operates from Spain. Some service providers or their support teams may process information outside the European Economic Area. Where that happens, the transfer must have an applicable legal safeguard, such as a European Commission adequacy decision or standard contractual clauses with any necessary supplementary measures. You can ask privacy@eyepic.app for information about the destinations and safeguards relevant to your data, including a copy of applicable safeguards with confidential information removed.
We retain information according to its purpose:
Where retention is required after a deletion request, we restrict the information to the remaining lawful purpose. Backup copies are removed through the backup replacement cycle and are not used to restart deleted accounts. Contact us for the retention criteria applicable to a particular record.
Subject to the conditions in data-protection law, you may request access, correction, deletion, restriction of processing and a portable copy of information you provided. You can object to processing based on legitimate interests and object to direct marketing at any time. You can withdraw consent without affecting earlier lawful processing.
Write to privacy@eyepic.app with enough information to identify your Fresh Club account or request. We may ask for proportionate identity verification. We normally respond within one month; if a permitted extension is necessary because of complexity or the number of requests, we will explain it within that month. Requests are normally free of charge.
You may complain to the Spanish Data Protection Agency (AEPD) or the supervisory authority where you live or work. You do not have to contact us before approaching an authority.
Fresh Club does not use solely automated decision-making that produces legal or similarly significant effects on you. If you believe an account or transaction has been incorrectly restricted, contact us for review.
We use appropriate technical and organisational measures to protect information, including HTTPS and access controls. No system can eliminate every security risk. Keep login links, codes and account credentials private and tell us promptly about suspected misuse.
Fresh Club accounts and purchases are intended for adults aged 18 or over. We do not knowingly invite children to create accounts. Contact us if you believe a child has provided personal information so we can assess and address it.
We will update this policy when our services or processing change and identify the date of the new version. Material changes will be brought to your attention through an appropriate notice. New uses requiring consent will not rely simply on continued browsing.