Privacy policy
This policy explains what we do with your personal data when you visit this store, place an order or write to us. It follows the EU General Data Protection Regulation (GDPR) and Spanish Organic Act 3/2018 (LOPDGDD).
What data we process
- Identification and contact data: name, email, phone, shipping and billing address.
- Order data: what you bought, when, and the status of the delivery.
- Payment data: processed directly by the payment gateway. We never see or store your card number.
- Browsing data: device, IP and interaction with the website. We detail this in our cookie policy.
Where it comes from
- From you: when you buy, create an account or write to us.
- From your device, automatically: when you browse, through cookies and similar technologies.
- From our providers: for example the gateway confirming a payment, or the carrier updating a delivery.
What we use it for, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Handling your purchase, the shipment and after sales | Performance of the contract |
| Invoicing and tax obligations | Legal obligation |
| Email marketing and newsletter | Your consent, withdrawable at any time |
| Non essential analytics and advertising | Your consent (cookies) |
| Fraud prevention | Legitimate interest |
How long we keep it
| Data | Retention period |
|---|---|
| Invoices and commercial records | 6 years (Spanish Commercial Code) |
| Tax data | 4 years (tax limitation period) |
| Orders and contractual relationship | 5 years (civil claims) |
| Marketing | Until you withdraw your consent |
Who else processes your data
We work with providers who process data on our behalf, each under its data processing agreement:
- Shopify: the platform hosting this store, including its checkout and its notification emails.
- The payment gateway: to charge and secure your payment.
- Suppliers and logistics companies: to prepare and deliver your order.
This list is complete as of today. This store has no analytics or advertising tool installed, and no third party pixel. If we add any provider that processes your data, it will appear here before it starts working, and if it needs your consent it will not load until you give it.
Our relationship with Shopify
This store is hosted on Shopify, which collects and processes information about your visit in order to provide and improve the service. What you submit here is transmitted to Shopify and, in some cases, to providers located outside your country.
For part of that processing Shopify acts on its own behalf, not on ours. You can read the Shopify consumer privacy policy and exercise your rights directly with them at the Shopify privacy portal.
Other websites we link to
If you follow a link that takes you out of this store, that site has its own privacy rules and we do not control them. Have a look at them before providing anything.
How we protect your data
We use the security measures provided by the Shopify platform and we limit who can see your data to what is needed to handle your order. Even so, no system is perfect and nothing travelling over the internet is completely secure: please do not send us sensitive information through insecure channels.
International transfers
Some of these providers may process data outside the European Economic Area. When that happens, the transfer is covered by Standard Contractual Clauses or another valid GDPR mechanism.
Your rights
You can ask us to access your data, rectify it, erase it, restrict or object to its processing, or receive it in a portable format. Write to coolnuvo.official@gmail.com and we will reply within the legal deadline.
If you believe we have mishandled your data, you can complain to the Spanish Data Protection Agency (aepd.es).
United States residents
We do not sell personal data. To exercise the privacy rights your state grants you (California among others), write to us at coolnuvo.official@gmail.com.
Minors
This store is not aimed at minors. We do not knowingly collect data from people under the age of majority.
Changes
If we change this policy, we will publish the new version here with its date.
Who is responsible for your data
- Data controller: Fotimanes
- Address: Avenida de Guadalajara 8, Guadalajara, España
- Email: coolnuvo.official@gmail.com