Privacy policy

Data controller: [to be completed], tax number [to be completed], address [to be completed], email [to be completed]. We process your data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Orders: name, shipping and billing address, email and phone number, together with the details of the pieces purchased. Purpose: to prepare and ship your order, handle the right of withdrawal and the legal guarantee, and comply with our tax and accounting obligations. Legal basis: performance of the contract (art. 6.1.b GDPR) and legal obligation (art. 6.1.c GDPR).

Enquiries: the data you give us when you write by email, WhatsApp or Instagram, used solely to reply to you. Legal basis: your consent (art. 6.1.a GDPR) or our legitimate interest in answering you.

Web analytics (only if you accept measurement cookies): pages visited, approximate origin of the visit, device and browser type, and a random client identifier. Purpose: to understand how the site is used and to improve it. Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time from “Cookie settings” in the footer.

We do not profile you, take automated decisions or use your data for advertising. We do not send newsletters. Google Analytics is configured without Google Signals or advertising features.

We never see or store your card details: you enter them directly in our payment provider's secure form.

Payments: Stripe Payments Europe, Ltd. (Ireland) and its group entities process the payment and run fraud checks. Hosting: Vercel Inc. serves this website. Analytics (only if you have accepted): Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, acts as processor of the measurements. Shipping: the relevant carrier receives the data needed to deliver your parcel. Each provider acts as a processor or, where the law requires it, as an independent controller.

Some of these providers may process data outside the European Economic Area. Google LLC is certified under the EU–US Data Privacy Framework, an adequacy decision of the European Commission (Decision (EU) 2023/1795). In other cases the transfer relies on the Commission's standard contractual clauses or on an adequacy decision.

Order data is kept for as long as the relationship lasts and afterwards for the period required by tax and accounting law (up to six years). Enquiries are kept for as long as needed to answer them and, if they lead to an order, become part of it. Analytics data tied to the Client ID is kept for 14 months in Google Analytics; cookie consent is remembered for 6 months.

You may request access, rectification, erasure, restriction, portability and objection, and withdraw your consent at any time, by writing to [to be completed] stating which right you are exercising. We will reply within one month at the latest. To withdraw analytics consent only, use “Cookie settings” in the footer of every page.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

The site is always served encrypted (HTTPS) and we apply reasonable technical and organisational measures to protect your data. Should a breach occur that puts your rights at risk, we would tell you and notify the supervisory authority.