Privacy policy
Last updated: 17 July 2026
This policy describes the processing of personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
Data controller
Shari Caru (NIF/NIE Z2538890V), with registered address at C/ 10 63, Esc. C, Piso 2, Puerta 2, 08860 Castelldefels, Barcelona. Email: shari.caru20@gmail.com.
Data we process
Identification and contact details (name, email, telephone), delivery address and order information. Card payments are processed through a secure payment gateway; we do not store your full card details.
Purposes and legal basis
Order management and customer service (performance of the contract); sending commercial communications only with your consent; and compliance with legal and tax obligations.
Retention
We retain the data for the duration of the commercial relationship and for the applicable statutory periods (for example, tax and accounting obligations).
Recipients
Providers necessary to deliver the service (a secure payment gateway, shipping and email services), which process the data on behalf of the controller. No data is disclosed to third parties except where required by law.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to shari.caru20@gmail.com. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).