Privacy policy

1. Introduction

This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website, browse our products, or place an order, and it describes the rights you have over your personal data under the General Data Protection Regulation (GDPR) and applicable Spanish data protection law. Please read it carefully. By using this website, you acknowledge the practices described below.

2. Controller

The controller responsible for the personal data processed through this website is:
luppizblog
C. de Toledo, 25, Centro, Spain
28005 Madrid, Spain
Email: contacto@luppizblog.store
Phone: +34913642637

If you have any questions about this policy or about how your personal data is processed, you can contact us using the details above.

3. Data We Collect

We only collect the personal data that is necessary to operate this website, process your orders, and respond to your queries. The categories of data we collect depend on how you interact with us, as set out below.

3.1 When you visit the site

Our server temporarily logs technical information whenever you visit the site, including your IP address, the date and time of the request, the requested URL, the referring page, your browser type, and your operating system. This information is processed for security and reliability purposes, such as detecting and preventing abuse of our systems. Legal basis: GDPR Art. 6(1)(f) (legitimate interest).

3.2 When you place an order

To process and fulfill your order, we collect the information necessary to do so, including your name, billing and shipping address, email address, phone number (optional), and payment details. Legal basis: GDPR Art. 6(1)(b) (performance of a contract).

3.3 When you contact us

If you contact us, for example by email, we store the content of your message together with your contact details so that we can respond to your query. Legal basis: GDPR Art. 6(1)(b) and (f).

4. Sharing Your Data

We do not sell your personal data. We only share personal data with third parties in the following circumstances:

  • you have explicitly given your consent to the sharing;
  • sharing is necessary to fulfill a contract with you, for example to deliver your order;
  • we are subject to a legal obligation that requires disclosure; or
  • we have a legitimate interest under GDPR Art. 6(1)(f) in sharing the data, and this interest is not overridden by your rights and freedoms.

5. Cookies

We use cookies that are strictly necessary for the website to function correctly. Optional cookies, such as those used for analytics or marketing purposes, are only placed on your device after you have given your consent through our cookie banner. You may withdraw or adjust your cookie consent at any time.

6. Third-Party Services We Use

This website is hosted on the Shopify platform, operated by Shopify Inc., 150 Elgin Street, Ottawa, ON, K2P 1L4, Canada. Payments made on this website are processed by our configured payment providers, shown to you at checkout. Each of these third-party services processes personal data under its own privacy policy, and we encourage you to review those policies for further detail on their respective data practices.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, including to provide our services, comply with our legal and contractual obligations, resolve disputes, and enforce our agreements. Once this data is no longer needed for these purposes, it is securely deleted or anonymized.

8. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. While we work to keep your data secure, please be aware that no method of transmission or storage over the internet is entirely infallible.

9. Your Rights Under the GDPR

Subject to the conditions set out in the GDPR, you have the following rights in relation to your personal data:

  • the right to request access to your personal data (Art. 15);
  • the right to request correction of inaccurate or incomplete data (Art. 16);
  • the right to request deletion of your data (Art. 17);
  • the right to request restriction of processing (Art. 18);
  • the right to data portability (Art. 20);
  • the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3)); and
  • the right to lodge a complaint with a supervisory authority (Art. 77).

10. Right to Object

Where we process your personal data on the basis of a legitimate interest, you have the right to object to that processing at any time under GDPR Art. 21. If you object, we will no longer process your data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. Any changes will be posted on this page, so we encourage you to review it periodically.

12. Contact Us

To exercise any of the rights described above, or if you have any questions about this Privacy Policy, please contact us at contacto@luppizblog.store or by phone at +34913642637.