Privacy policy
Last updated: 20 May 2026.
Draft pending legal review. The identifying details in brackets must be completed before publication.
1. Data we process
We process the data you provide when creating an account and placing orders:
- Identifying data: name and email address.
- Shipping data: recipient name, postal address and phone number.
- Tax data: NIF, when provided for invoicing.
- Order data: products, amounts and payment reference.
- Technical data: IP address and access logs for security purposes.
2. Purposes and legal basis
- Managing your account and orders — legal basis: performance of the contract.
- Sending transactional communications (verification, order status) — legal basis: performance of the contract.
- Compliance with tax and accounting obligations — legal basis: legal obligation.
- Fraud prevention and site security — legal basis: legitimate interest.
3. Retention period
We keep order data for the period legally required by tax and commercial regulations (generally between five and six years). Account data is kept while the account remains active; if you request deletion, it is anonymised, keeping only the order information the law requires us to retain.
4. Recipients
We do not share your data with third parties except where legally required. Certain providers (hosting, transactional email delivery, shipping) access the data as data processors, under contract and only to provide their service.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [CONTACT EMAIL]. You may also file a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Security
We apply technical and organisational measures to protect your data, including encryption of communications and secure storage of passwords.
