Privacy policy
Controller
Alberto R., Travessera de Gràcia 20, 08024 Barcelona, Spain.
What we collect
Your email and order details (products, amount, time) and any message you send through the contact form. Card details are handled by Stripe, never by us.
Why and legal basis
To deliver your order and receipt (GDPR Art. 6(1)(b)), to keep accounting records (6(1)(c)), to answer your messages (6(1)(f)), cookie-free anonymous visit statistics and reminders about an unfinished order (6(1)(f), legitimate interest).
Retention
Order records are kept for 6 years for tax purposes. Messages are deleted once your request is resolved. Statistics use no cookies and never store your IP address; an anonymous daily number means visits cannot be linked from one day to the next. Reminders about an unfinished order: no more than 3 emails within 3 days, stopping as soon as you buy or click "unsubscribe".
Processors
Stripe (payments), Brevo (email) and our EU hosting provider.
Your rights
Access, correction, erasure and complaint to the Data Protection Commission (DPC).