Privacy policy

We’re completing the shop owner’s details. If you need any of them, write to us.

Who is responsible for your data

The data controller is —, with tax ID (NIF) —, based at —. For anything to do with your data, write to us at [email protected].

What data we use and why

• Orders. Your name, email, phone number, shipping address and what you buy, to prepare and ship your order, provide customer service and meet our accounting and tax obligations. Legal basis: the purchase contract (Art. 6(1)(b) GDPR) and our legal obligations (Art. 6(1)(c)).
• Payments. These are handled by Stripe on its secure page. We never see or store your card details.
• Enquiries and withdrawal requests. The data you send us, to reply to you and process your request. Legal basis: the contract and our legal obligations.
• Visitor statistics. We count visits with Rybbit, a cookie-free analytics tool that provides aggregate figures and doesn’t identify you. Legal basis: our legitimate interest in knowing what works on the website (Art. 6(1)(f)).

We don’t sell your data or use it to send you advertising.

How long we keep your data

We keep order data for as long as our relationship lasts and, after that, for the periods set by law (six years for accounting records under the Spanish Código de Comercio, and the limitation periods under tax law). We keep enquiries until they’re resolved and for one more year.

Who else sees your data

Only the providers we need to run the shop, who process the data on our behalf: Stripe (payments), the courier that delivers your order, our web hosting and email provider, and Cloudflare (website security and delivery). Some of them may process data outside the European Economic Area, for example in the United States; in that case they do so with the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Minors

If you are under 14, you need a parent or guardian to give consent on your behalf (Art. 7 of Ley Orgánica 3/2018, the Spanish Data Protection Act).

Your rights

You can ask to access, correct or delete your data, object to or restrict its use, or take it elsewhere, by writing to [email protected]. If you think we haven’t respected your rights, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es) or with the data protection authority in your country of residence.

Last updated: 3 November 2026.