🔒 PRIVACY POLICY
This Privacy Policy describes how we collect, use, and protect personal data when you use our website and purchase digital products. We are committed to ensuring that your privacy is protected and that your personal data is processed in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD), and other applicable regulations.
1. Data Controller
- Controller: Francisco Soler Bravo
- Tax ID (NIF): 49264933Z
- Address: C/ Colón, nº 18, 7ºA, 46004, Valencia, Spain
- Telephone: +34 722 753 626
- Email: info@lovingsheets.com
2. Personal Data We Collect
We may collect the following categories of personal data:
- Identification Data: name, surname(s), billing address, email, phone number.
- Transaction Data: order details, invoices, purchase history.
- Payment Data: processed securely through third-party payment providers (we do not store credit card details).
- Technical Data: IP address, browser type, operating system, cookies, and browsing data.
- Communication Data: messages or inquiries sent to us via forms, email, or chat.
3. Purposes of Data Processing
We process personal data for the following purposes:
- To process and fulfill orders of digital products purchased through the website.
- To provide customer support and respond to inquiries or requests.
- To issue invoices and comply with legal, tax, and accounting obligations.
- To send marketing communications (only if the user has given explicit consent).
- To improve website performance and user experience through analytics and cookies.
4. Legal Basis for Processing
- Contractual necessity: processing is required to fulfill a purchase agreement (digital product sales).
- Legal obligation: compliance with accounting, tax, and consumer protection laws.
- Consent: when you subscribe to our newsletter or accept cookies.
- Legitimate interest: to improve our services, prevent fraud, and ensure website security.
5. Data Retention Period
We will retain personal data only for as long as necessary for the purposes for which it was collected:
- Customer and billing data: up to 6 years (in compliance with tax and commercial laws).
- Marketing data: until the user withdraws consent.
- Technical data (cookies): according to the retention periods set in our Cookie Policy.
6. Data Sharing and Transfers
We do not sell personal data to third parties. However, we may share data with:
- Service providers (payment gateways, hosting, email marketing platforms, analytics tools) under strict data processing agreements.
- Public authorities when required by law (e.g., tax authorities).
Data may be transferred outside the European Economic Area (EEA) only if adequate safeguards are in place (e.g., standard contractual clauses or providers certified under EU–US Data Privacy Framework).
7. User Rights
Under GDPR, you have the following rights:
- Right of Access: know which data we process.
- Right to Rectification: request correction of inaccurate data.
- Right to Erasure (“Right to be Forgotten”).
- Right to Restriction of Processing.
- Right to Data Portability.
- Right to Object to certain processing activities, such as direct marketing.
You may exercise these rights at any time by sending an email to info@lovingsheets.com, attaching a copy of your ID for verification.
If you believe your rights have been violated, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.
8. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, firewalls, and limited access to personal data by authorized personnel only.
9. Minors
Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that personal data has been provided by a minor, we will delete such information immediately.
10. Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time to ensure ongoing compliance with legal requirements and best practices. Users will be notified of any significant changes via the website or email.