Privacy policy

PRIVACY POLICY

Last updated: 9 October 2026

1. Data controller

Isabel Serrano Gómez
Tax ID: [TU DNI]
Address: [TU DIRECCIÓN COMPLETA]
Email: somoscuppy@gmail.com
Phone: +34 626 75 16 68

2. Data we collect

Identification and contact data: first name, surname, postal address, email and phone. Order data: products purchased, amount, delivery and billing address. Payment data: handled entirely by our payment providers; we never store your full card number. Browsing data: IP address, device type, browser, pages visited and traffic source, collected through cookies and similar technologies.

3. Purposes and legal basis

Processing, shipping and tracking your order, and handling enquiries and returns: performance of the contract. Meeting tax and accounting obligations: legal obligation. Sending marketing communications: your consent, which you may withdraw at any time. Analysing use of the site and improving the shopping experience: legitimate interest or consent, depending on the cookie.

4. Recipients

We share your data only with those needed to provide the service: Shopify Inc. as our e-commerce platform; payment providers, to process the transaction; transport and logistics companies, to deliver your order; email marketing providers, where you have consented; and public authorities, where legally required.

Some of these providers are located outside the European Economic Area. In such cases, international transfers are covered by standard contractual clauses approved by the European Commission or by adequacy decisions.

5. Retention

We retain your data for the duration of the commercial relationship and thereafter for the legally required periods: 6 years for commercial documentation and 4 years for tax obligations. Data processed for advertising purposes is retained until you withdraw your consent.

6. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given. Write to somoscuppy@gmail.com stating the right you wish to exercise and attaching a copy of an identity document.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration, including SSL encryption of communications.

8. Minors

Our products are not aimed at children under 14 and we do not knowingly collect data from children of that age.

9. Customers outside the European Union

California residents have the rights under the CCPA/CPRA to know, delete and correct their personal information and to opt out of its sale or sharing, without suffering discriminatory treatment for exercising them. United Kingdom residents have equivalent rights under the UK GDPR. You may exercise any of these by writing to somoscuppy@gmail.com.