Privacy Policy

Privacy Policy

 

Last update: July 26, 2025

At Álvaro Larrosa Furest (hereinafter, “we”, “us” or “our company”), we are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR), the UK GDPR, and international standards such as the California Consumer Privacy Act (CCPA) where applicable.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you access our website https://alvarolarrosafurest.com, purchase our products, or interact with us in any way.

 

1. Data Controller

 

Controller: Álvaro Larrosa Furest
Tax ID: [add NIF if applicable]
Business Address: Parque Joyero de Córdoba. Local 245, fase 9, Ctra. Palma del Río Km 3,3, Córdoba, Spain. 14005
Email (privacy contact): info@alvarolarrosafurest.com
Website: https://alvarolarrosafurest.com

 

2. What personal data do we collect?

 

a) Information you provide:

  • Full name
  • Shipping and billing address
  • Email address
  • Phone number
  • Payment details (processed securely via third-party platforms)
  • Messages you send us

b) Information we collect automatically:

  • IP address
  • Browser type and device
  • Browsing behavior (pages viewed, session duration, clicks)
  • Approximate geolocation

c) Data from third parties:

  • Analytics and marketing data via tools such as Google Analytics, HubSpot, Meta Pixel, Screaming Frog, etc.

 

3. Why do we process your data?

 

We process your personal data for the following purposes:

  • To process and fulfill your orders (WooCommerce)
  • To send you order confirmations, invoices and relevant notifications
  • To manage payments and refunds (Stripe, PayPal, bank transfer)
  • To offer customer support
  • To send you marketing communications (only with consent)
  • To conduct email marketing campaigns (Mailchimp or others)
  • To improve your experience on the site
  • To prevent fraud and ensure site security

 

4. Legal basis for data processing

 

Your data is processed lawfully under:

  • Contractual necessity: to fulfill your purchases
  • Consent: for marketing, cookies, or newsletter subscriptions
  • Legitimate interest: to improve our services or prevent fraud
  • Legal obligation: to comply with tax, accounting, or regulatory duties

 

5. Who do we share your data with?

 

We may share your data with trusted third parties:

  • Technology providers: Hostinger (hosting), WordPress/WooCommerce (platform), relevant plugins
  • Analytics and marketing services:
    • Google Analytics, Tag Manager
    • Meta (Facebook/Instagram Pixel)
    • HubSpot (CRM)
    • Screaming Frog (SEO)
    • Mailchimp (email marketing)
  • Payment platforms:
    • Stripe
    • PayPal
    • Banking institutions (for transfers)
  • Public authorities: when legally required

All third parties are subject to data processing agreements in compliance with GDPR or other relevant regulations.

 

6. International data transfers

 

Some providers are located outside the European Economic Area (EEA). In those cases, we ensure adequate protection through:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions (when applicable)
  • Additional safeguards following guidance from the European Data Protection Board

 

7. Data retention period

 

We keep your data for:

  • The time needed to fulfill our contractual obligations
  • The legally required period (e.g., 5 years for invoices under Spanish tax law)
  • Until you withdraw your consent (e.g., newsletter subscription)

 

8. Your rights

 

You may exercise the following rights:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (right to be forgotten)
  • Object to data processing
  • Request data portability
  • Restrict processing in certain cases
  • Withdraw consent at any time

To exercise these rights, email us at [add contact email] with a copy of your ID and a clear request.

 

9. Data security

 

We implement technical and organizational measures to protect your data, including secure connections (SSL) and certified payment gateways. We regularly monitor and update our systems to ensure confidentiality and integrity.

 

10. Cookies

 

We use both first-party and third-party cookies to analyze browsing behavior, personalize your shopping experience, and provide social and marketing features. For more information, visit our Cookies Policy.

 

11. International users

 

This website is accessible worldwide, including from countries outside the EU, such as the United Arab Emirates, China, Russia, the UK, and the United States. By using our website, you acknowledge that your data may be processed in Spain under GDPR and international data standards.

 

12. Changes to this Policy

 

We may update this Privacy Policy at any time. Any changes will be published here along with the new effective date. We encourage you to review it periodically.

 

13. Contact us

 

For any questions or to exercise your data rights:

📧 Email: [add contact email]
📍 Address: [add business address]

You may also file a complaint with the Spanish Data Protection Agency (AEPD) or the supervisory authority in your country.

 

Privacy policy in spanish