Privacy policy

1. Introduction

This Privacy Policy explains how La Nodriza collects, uses, shares, and protects your personal data when you visit our website, browse our products, or place an order with us. We are committed to processing your data lawfully, fairly, and transparently, in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection law. Please read this policy carefully to understand our practices regarding your personal data.

2. Controller

The controller responsible for the personal data processed through this website is:
La Nodriza
Calle de los Caños del Peral 5
28013 Madrid, Spain
Email: contact@lanodriza.shop
Phone: +34914911559

If you have any questions about this policy or about how your personal data is processed, please contact us using the details above.

3. Data we collect

We collect personal data in a limited number of situations, each tied to a specific purpose and a specific legal basis under the GDPR. We do not collect more data than is necessary for these purposes.

3.1 When you visit the site

Our server temporarily logs technical information whenever you visit our website, including your IP address, the date and time of access, the URL requested, the referring page, and details about your browser and operating system. This information is processed to ensure the security, stability, and reliability of our website, and to detect and prevent misuse. Legal basis: GDPR Art. 6(1)(f) — our legitimate interest in operating a secure and functioning website.

3.2 When you place an order

When you place an order, we collect the information required to process and fulfil it, including your name, billing and shipping address, email address, telephone number (optional), and payment details. This data is used to process your order, arrange delivery, handle payment, and provide any related customer support, such as queries about your order status. Legal basis: GDPR Art. 6(1)(b) — processing necessary for the performance of a contract with you.

3.3 When you contact us

If you contact us, whether by email, phone, or through a contact form, we store the content of your message together with your contact details so that we can respond to your enquiry. Legal basis: GDPR Art. 6(1)(b) and (f) — to respond to your request and in our legitimate interest in providing customer service.

4. Sharing data

We do not sell your personal data. We only share personal data with third parties in the following circumstances:

• where you have given your explicit consent to the sharing;
• where sharing is necessary to fulfil a contract with you, for example to process payment or arrange delivery of your order;
• where we are subject to a legal obligation requiring disclosure; or
• where we have a legitimate interest in sharing the data, in accordance with GDPR Art. 6(1)(f).

Any third party that processes personal data on our behalf is required to do so only for the purposes we specify and in compliance with applicable data protection law.

5. Cookies

We use cookies that are strictly necessary for the website to function correctly, such as those required for browsing and checkout. These necessary cookies do not require your consent, as they are essential to providing the service you request.

Optional cookies, such as those used for analytics or marketing purposes, are only placed on your device after you have given your consent via our cookie banner. You may withdraw or adjust your consent to optional cookies at any time through your browser settings or the cookie preferences available on our site.

6. Services we use

This website is hosted on the Shopify platform, provided by Shopify Inc., 150 Elgin Street, Ottawa, ON, K2P 1L4, Canada. Because Shopify is based outside the European Economic Area (EEA), some personal data may be processed or stored in Canada as part of the hosting service. Where such international transfers occur, they are carried out in accordance with the safeguards required under GDPR.

Payments made on this website are processed by our configured payment providers, who operate independently and under their own privacy policies. We do not store your full payment card details on our own systems.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, as described in this policy, or for as long as required to comply with our legal, accounting, or reporting obligations. Once data is no longer needed for these purposes, we take steps to delete or anonymise it.

8. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. While we take reasonable steps to safeguard your information, no method of transmission or storage over the internet can be guaranteed to be completely secure.

9. Your rights

Under the GDPR, you have the following rights in relation to your personal data:

• the right to request access to the personal data we hold about you (Art. 15);
• the right to request correction of inaccurate or incomplete data (Art. 16);
• the right to request deletion of your data (Art. 17);
• the right to request restriction of processing (Art. 18);
• the right to receive your data in a structured, portable format (Art. 20);
• the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3));
• the right to lodge a complaint with a supervisory authority, such as the Agencia Española de Protección de Datos (AEPD) in Spain, or the supervisory authority in your own country of residence (Art. 77).

10. Right to object

Where we process your personal data on the basis of our legitimate interest, you have the right to object to that processing at any time under GDPR Art. 21. If you object, we will stop processing your data for those purposes unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Any changes will be posted on this page, and we encourage you to review it periodically.

12. Contact us

To exercise any of the rights described above, or if you have any questions about this Privacy Policy, please contact us at contact@lanodriza.shop or by phone at +34914911559.