守

How we process your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.

Updated: 15 October 2026

01Data controller

Isabel Madero Blasco (Tax ID 28783294J). Address: Calle Cuatro Matejas, 6, 28269 Galapagar (Madrid). Email: isabel.madero@gmail.com.

02What data we process

The data you give us when placing an order: first and last name, email, phone number, shipping address, order notes and the contents of the order.

In our internal management panel we keep your order and invoice history.

03Purposes and legal basis

To manage your order, make it, ship it and communicate with you about it. Legal basis: performance of a contract (Art. 6.1.b GDPR).

To issue invoices and meet tax and accounting obligations. Legal basis: legal obligation (Art. 6.1.c GDPR).

We do not use your data for advertising or profiling. If we send commercial communications in the future, we will do so only with your consent.

04Recipients

Carriers (Correos, Correos Express, UPS, DHL or others), to whom we provide name, address and phone number to deliver your order.

Technology providers that host the website and database (Vercel Inc. and Neon, Inc., with servers and companies in the United States, covered by the European Commission's standard contractual clauses) and, where applicable, our tax adviser.

Stripe Payments Europe, Ltd., which processes the card payment on its own secure page; we do not receive or store your card details.

We do not share your data with third parties except where legally required.

05Retention

We keep your data for as long as needed to manage the order and, afterwards, for the applicable legal periods (generally up to 6 years for commercial and tax obligations). After that it is deleted or anonymised.

06Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to isabel.madero@gmail.com and identifying yourself with a copy of your ID.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

07Security

We apply reasonable technical and organisational measures: encrypted connection (HTTPS), restricted access to the management panel and data hosted on professional infrastructure.