Privacy policy
Data controller
Your data is controlled by [NOMBRE O RAZÓN SOCIAL / LEGAL NAME], tax ID [NIF / CIF], [DIRECCIÓN POSTAL / POSTAL ADDRESS]. Contact: [EMAIL DE CONTACTO / CONTACT EMAIL].
What data we use and why
When you buy: name, email, shipping address and phone if you give it, to prepare and ship your order, issue the invoice and handle returns. When you join the list: your email, to tell you about new drops.
Legal basis
Order data is processed to perform the sales contract and meet our legal (tax and accounting) obligations. List data is processed with your consent, which you can withdraw at any time.
Who we share it with
Only the providers the shop needs to work: Stripe (payments), Supabase (database), Vercel (web hosting) and the carrier delivering your order. We never sell your data.
How long we keep it
Order data for as long as tax law requires. List data until you unsubscribe.
Your rights
You can ask for access, correction, deletion, objection, restriction and portability by emailing [EMAIL DE CONTACTO / CONTACT EMAIL]. If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).