Privacy policy

Last updated: 29/08/2026

Data controller

What data do we collect?

We process the data you give us voluntarily when you get in touch or when you buy:

  • Contact details: name, email address, phone number (if you provide it).
  • Message content: the text you write in the form or email.
  • Browsing data: IP, browser, pages visited (anonymised, only if you accept analytics cookies).
  • Purchase data (only if you buy in the shop): name, shipping and billing address, phone and email. Card details are collected and processed directly by Stripe: they never reach our servers and we do not store them.

What do we use it for?

  • Answering your enquiry about the collection or a specific piece. Legal basis: consent (art. 6.1.a GDPR).
  • Processing your order payment, shipping, invoicing and after-sales support. Legal basis: performance of a contract (art. 6.1.b GDPR).
  • Meeting legal obligations on invoicing and accounting records. Legal basis: legal obligation (art. 6.1.c GDPR).
  • Arranging a sale through Wallapop. Legal basis: pre-contractual measures (art. 6.1.b GDPR).
  • Improving the site with anonymous analytics cookies. Legal basis: consent.

Do we share your data?

We do not sell your data to third parties. The providers we use as data processors are:

  • Hosting for the website (provider with servers in the EU/EEA).
  • Stripe Payments Europe, Ltd. (Ireland), to process card payments in the shop. It handles payment data as its own controller under its privacy policy.
  • Carrier only the data needed to deliver your order.
  • Wallapop only if you choose to buy or get in touch through their platform, in which case their privacy policy applies.
  • Google Analytics (Google Ireland Ltd.), anonymised data, only with prior consent.

How long do we keep your data?

Contact messages are kept for as long as needed to handle your enquiry and, after that, for the applicable legal period. If you buy a piece, we keep the transaction data for 5 years as required by Spanish accounting law (Ley General Tributaria, art. 66).

Your rights

You have the right to access, rectify, erase, object to processing, restrict it and request portability of your data. You may also withdraw your consent at any time.

To exercise them, write to us at sinenspol@gmail.com stating your request and attaching a copy of your ID or equivalent document.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency: www.aepd.es.

Security

We apply reasonable technical and organisational measures to protect your data (HTTPS encryption, restricted access, strong passwords and providers with GDPR guarantees).

This policy may be updated when the law or our processing changes. The date of the latest revision appears at the top.