Legal
Privacy policy
1. Data controller
Susanna Zampieri, NIF Y9942087Y, of Calle Albareda 37, 35008 Las Palmas de Gran Canaria (Canary Islands), is the controller of your personal data. Contact email: susannazampieri.sz@gmail.com.
2. Data we collect
- Identification and contact details (name, email, phone).
- Shipping and billing address.
- Order and payment data (handled by the payment provider).
- Browsing data through cookies (see the cookie policy).
3. Purpose and legal basis
We process your data to manage your orders and the contractual relationship (performance of the contract), to answer your enquiries (legitimate interest) and, if you give us your consent, to send you marketing communications.
When you start checking out we store the email address you type before you finish the order: we need it to be able to send you the confirmation and to bring your basket back if the connection drops. We will only write to remind you about an unfinished purchase if you tick the corresponding box, which is never ticked in advance. Along with that consent we store the date and the version of the text you accepted. You can withdraw it whenever you like by writing to us, and every email has a link to stop receiving them.
4. Retention
We keep your data for as long as the commercial relationship lasts and for the periods required by law (tax and accounting obligations). Unfinished baskets and the email address attached to them are kept for a maximum of six months, and are deleted sooner if you ask us to.
5. Recipients and international transfers
We share data only with the providers needed to deliver the service, which act as processors: the logistics company that delivers your order, the payment gateway Stripe Payments Europe, Ltd. (Ireland), the transactional email provider Resend (United States), which sends order and newsletter confirmations, and Google Ireland Ltd., whose address service helps us complete the address field as you type.
Sending email through Resend and Google’s address suggestions may involve an international transfer of data to the United States, covered by the safeguards provided for in data protection law. Address suggestions are requested from our server, not from your browser: Google receives only what you type in the address field, not your IP address or any cookie of yours.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to susannazampieri.sz@gmail.com. You can also lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es).
Last updated: 26 July 2026.