Privacy policy

This Privacy Policy explains how Plushmas ("we", "us" or "our") collects, uses, stores, protects and discloses your personal information when you visit or make a purchase through our online store (the "Website").

We are committed to protecting your privacy and handling your personal information responsibly, transparently and in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), Spain's Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights ("LOPDGDD"), and applicable electronic commerce and cookie legislation.

By using our Website, you acknowledge that you have had the opportunity to read this Privacy Policy.

1. DATA CONTROLLER

The entity responsible for processing your personal information is:

Trading name: Plushmas
Business address: Ruperto Chapí 9, 18210 Granada, Spain
Email address: plushmass@gmail.com
Country: Spain

For any questions, requests or concerns relating to this Privacy Policy or the processing of your personal information, you may contact us using the email address above.

2. PERSONAL INFORMATION WE COLLECT

When you visit our Website, place an order or interact with our services, we may collect certain categories of personal information.

2.1 Device and browsing information

When you visit our Website, we automatically collect certain technical information about your device, including:

• Your web browser and operating system.
• Your IP address.
• Your approximate geographical location, where available.
• Your time zone.
• Information about cookies and similar technologies stored on your device.
• The pages and products you view.
• The websites or search terms that referred you to our Website.
• The date, time and duration of your visit.
• Information about how you interact with our Website.

We refer to this information as "Device Information".

2.2 Order and customer information

When you place an order, attempt to make a purchase or contact us, we may collect:

• Your full name.
• Billing address.
• Shipping address.
• Email address.
• Telephone number.
• Order details and purchase history.
• Payment transaction details and payment status.
• Information necessary to process returns, refunds, exchanges or customer service requests.

Payment card details are generally processed directly by the relevant payment service provider. We do not intend to store full payment card numbers or security codes on our own systems.

We refer to this information as "Order Information".

2.3 Customer communications

If you contact us by email or through any available contact channel, we may retain your correspondence and the information you voluntarily provide so that we can respond to your request and maintain appropriate customer service records.

2.4 Information collected automatically

We may also collect certain information through server logs, cookies, pixels, tags and similar tracking technologies, subject to applicable consent requirements.

We do not intentionally collect sensitive personal information unless strictly necessary and permitted by applicable law.

For the purposes of this Privacy Policy, "Personal Information" includes both Device Information and Order Information, as well as any other personal data that we may lawfully process.

3. COOKIES AND TRACKING TECHNOLOGIES

Our Website uses cookies and similar technologies to ensure its proper operation, remember customer preferences, facilitate purchases and, where enabled and consented to, analyse Website usage and improve marketing activities.

Cookies are small text files stored on your device when you visit a website.

3.1 Cookies used by our Website

As our online store operates through Shopify, certain cookies may be installed by Shopify to provide essential shopping and security functionality.

These may include:

The actual cookies used may vary depending on the Shopify services, applications and features enabled on our Website.

3.2 Types of cookies

We may use the following categories of cookies:

Strictly necessary cookies: These are required for essential Website functions, including shopping cart management, checkout, security and session management. They cannot generally be disabled through our cookie management system without affecting the operation of the Website.

Functional cookies: These help remember preferences and improve your browsing experience.

Analytics cookies: Where enabled, these help us understand how visitors use our Website, identify technical issues and improve our services.

Advertising and marketing cookies: Where enabled, these may be used to measure advertising performance, personalise marketing and show relevant advertisements based on browsing activity.

Non-essential cookies will only be activated where the legally required consent has been obtained.

3.3 Managing your cookie preferences

You can manage your cookie preferences through the cookie consent banner or settings tool available on our Website, where provided.

You may also configure your browser to block or delete cookies. However, disabling certain cookies may affect the availability or functionality of some Website features.

You can withdraw or modify your consent at any time through the available cookie settings.

4. HOW WE USE YOUR PERSONAL INFORMATION

We process your Personal Information only where we have an appropriate legal basis under applicable data protection legislation.

We may use your information for the following purposes:

4.1 Processing and fulfilling orders

We use your Order Information to:

• Process and confirm purchases.
• Receive and verify payments.
• Arrange shipping and delivery.
• Provide order confirmations and invoices.
• Manage returns, refunds and exchanges.
• Respond to order-related enquiries.
• Provide after-sales customer support.

Legal basis: Performance of a contract.

4.2 Customer service and communications

We may use your contact details to respond to enquiries, provide assistance, resolve complaints and communicate important information concerning your purchases.

Legal basis: Performance of a contract or our legitimate interests in providing customer support.

4.3 Fraud prevention and security

We may use technical and transaction-related information to:

• Detect and prevent fraudulent transactions.
• Identify suspicious activity.
• Protect our Website, customers and business.
• Verify transactions where reasonably necessary.
• Investigate potential misuse of our services.

Legal basis: Our legitimate interests in protecting our business, customers and systems, and compliance with applicable legal obligations.

4.4 Website improvement and analytics

We may use Device Information and browsing data to understand how visitors interact with our Website, identify technical problems, improve navigation and optimise our products and services.

Where analytics cookies or similar non-essential technologies are used, we will obtain the required consent before activating them.

Legal basis: Consent, where required, or our legitimate interests in improving our Website.

4.5 Marketing and promotional communications

Where permitted by law, we may use your contact details to send information about Plushmas products, promotions, special offers and other relevant updates.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the communication or by contacting us directly.

Where consent is legally required, we will obtain it before sending promotional communications.

Unsubscribing from marketing communications will not affect transactional emails relating to purchases, payments, deliveries, refunds or customer service.

Legal basis: Your consent or another lawful basis expressly permitted under applicable electronic marketing legislation.

4.6 Advertising and remarketing

Where enabled, we may use cookies and similar technologies to measure advertising effectiveness and display relevant advertisements.

Such activities will be subject to the applicable consent requirements and the privacy settings of the relevant advertising platforms.

You can withdraw your consent through our cookie settings or the relevant advertising platform.

5. SHARING YOUR PERSONAL INFORMATION

We do not sell your personal information to third parties.

However, we may share certain information with trusted third-party service providers when necessary to operate our business and provide our services.

These providers may include:

5.1 Shopify

Our online store is hosted and powered by Shopify Inc. and its affiliated companies.

Shopify provides the e-commerce infrastructure necessary to operate our Website, manage orders, process transactions and provide related services.

Shopify may process personal information on our behalf in accordance with its applicable privacy policies and data processing arrangements.

For further information, please visit:

https://www.shopify.com/legal/privacy

5.2 Payment service providers

We may share relevant transaction information with payment processors and financial service providers to facilitate payments, verify transactions, prevent fraud and process refunds.

These providers process information in accordance with their own privacy policies and applicable legal obligations.

5.3 Shipping and delivery providers

We may share your name, shipping address, telephone number and other necessary delivery information with courier companies and logistics providers to fulfil and deliver your orders.

5.4 Analytics and advertising providers

Where applicable and enabled, we may share limited Device Information and browsing data with analytics and advertising providers to measure Website performance, understand visitor behaviour and manage marketing campaigns.

If Google Analytics is used, further information about Google's data practices is available at:

https://policies.google.com/privacy

You can also find Google's available opt-out tools at:

https://tools.google.com/dlpage/gaoptout

5.5 Legal and regulatory disclosures

We may disclose personal information where reasonably necessary to:

• Comply with applicable laws and regulations.
• Respond to lawful requests from courts, regulators or public authorities.
• Prevent or investigate suspected fraud or unlawful activities.
• Protect our legal rights, property, security and legitimate business interests.
• Enforce our contractual rights and applicable Website policies.

5.6 Business transfers

In the event of a merger, restructuring, sale, acquisition or transfer of all or part of our business or assets, personal information may be transferred to the relevant parties where legally permitted and subject to appropriate safeguards.

6. INTERNATIONAL DATA TRANSFERS

Some of our service providers, including Shopify and other technology providers, may process or store personal information outside the European Economic Area ("EEA").

Where personal information is transferred outside the EEA, we will ensure that the transfer is carried out in accordance with applicable data protection legislation.

Depending on the circumstances, appropriate safeguards may include:

• An adequacy decision adopted by the European Commission.
• Standard Contractual Clauses approved by the European Commission.
• Other legally recognised transfer mechanisms.

Further information about international data transfers carried out by our service providers can be obtained from their respective privacy policies.

7. DATA RETENTION

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including the fulfilment of orders, customer service, legal compliance, accounting, tax obligations and the establishment or defence of legal claims.

In particular:

• Order and transaction records may be retained for the periods required under applicable Spanish commercial and tax legislation.
• Customer service correspondence may be retained for as long as necessary to resolve enquiries and maintain appropriate records.
• Marketing information will be retained until you withdraw your consent or object to the relevant processing, where applicable.
• Technical and analytics information will be retained according to the applicable retention periods of the relevant systems and providers.

Once the applicable retention periods have expired, personal information will be securely deleted, anonymised or otherwise handled in accordance with applicable law.

Where deletion is requested, we may retain certain information where legally required or where necessary to establish, exercise or defend legal claims.

8. YOUR DATA PROTECTION RIGHTS

If you are located in the European Economic Area, you have certain rights under the GDPR and applicable national data protection legislation.

These rights include:

Right of access: You may request confirmation of whether we process your personal information and obtain a copy of the data we hold about you.

Right to rectification: You may request correction of inaccurate or incomplete personal information.

Right to erasure: You may request deletion of your personal information where the legal conditions for erasure are met.

Right to restriction: You may request that we restrict the processing of your personal information in certain circumstances.

Right to data portability: You may request to receive certain personal information in a structured, commonly used and machine-readable format, or have it transferred to another controller where legally applicable.

Right to object: You may object to processing based on our legitimate interests, including profiling based on those interests, where applicable. You may also object at any time to the processing of your personal information for direct marketing purposes.

Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at:

**plushmass@gmail.com**

We may need to verify your identity before processing your request to protect your personal information and prevent unauthorised access.

We will respond within the time limits established by applicable data protection legislation.

Exercising your data protection rights is generally free of charge. However, where requests are manifestly unfounded or excessive, we may act in accordance with the provisions of the GDPR.

Right to lodge a complaint

If you believe that we have processed your personal information unlawfully or have not adequately addressed your request, you have the right to lodge a complaint with the competent data protection supervisory authority.

In Spain, the relevant authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).

Website: https://www.aepd.es

This does not affect your right to seek judicial remedies where applicable.

9. DIRECT MARKETING AND COMMERCIAL COMMUNICATIONS

We may send you promotional communications where permitted by applicable law and, where required, after obtaining your prior consent.

You may unsubscribe at any time using the unsubscribe mechanism included in our marketing emails or by contacting us at plushmass@gmail.com.

Please note that opting out of marketing communications will not prevent us from sending essential transactional or service-related messages.

We will process your marketing preferences in accordance with applicable data protection and electronic communications legislation.

10. DATA SECURITY

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.

These measures may include the use of secure connections, access controls, security procedures and trusted service providers.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

Accordingly, while we take reasonable steps to protect your information, we cannot guarantee absolute security against every possible security incident or unauthorised access.

Where required by law, we will take appropriate action in response to personal data breaches and notify affected individuals and supervisory authorities when legally necessary.

11. CHILDREN'S PRIVACY

Our Website is intended for general consumers and is not specifically directed at children.

We do not knowingly collect personal information from children in circumstances where such collection would require parental or guardian consent that has not been obtained.

If you believe that a child has provided us with personal information unlawfully, please contact us so that we can review the situation and take appropriate action.

12. THIRD-PARTY WEBSITES

Our Website may contain links to third-party websites, applications or services.

These websites are operated independently and are subject to their own privacy policies and terms of use.

We are not responsible for the privacy practices, security or content of external websites that we do not operate or control.

We recommend reviewing the privacy policies of any third-party services before providing them with personal information.

13. DO NOT TRACK SIGNALS

Some web browsers offer a "Do Not Track" feature that allows users to indicate their preference regarding online tracking.

There is currently no universally accepted standard for responding to these signals.

Accordingly, our Website may not respond to all Do Not Track signals. However, applicable cookie consent choices and privacy rights will continue to be respected in accordance with relevant legislation.

14. AUTOMATED PROCESSING AND FRAUD PREVENTION

Certain service providers may use automated tools to assess transaction security, detect suspicious activity and prevent fraudulent payments.

Such processing may involve technical or transactional information.

Where a decision produces legal effects or similarly significantly affects you and is based solely on automated processing, we will comply with the applicable GDPR requirements, including any rights you may have to obtain human intervention, express your point of view and contest the decision.

15. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, services, technology, legal requirements or regulatory obligations.

Any changes will be published on this page, together with an updated revision date.

We encourage you to review this Privacy Policy periodically to remain informed about how we protect your personal information.

Where required by law, we will provide additional notice or obtain your consent before implementing material changes to our data processing practices.

16. CONTACT US

If you have any questions, concerns, complaints or requests relating to this Privacy Policy or the handling of your personal information, please contact us using the details below:

Store: Plushmas
Email: plushmass@gmail.com
Address: Ruperto Chapí 9, 18210 Granada, Spain
Country: Spain

We will make reasonable efforts to respond to all legitimate privacy-related enquiries within the applicable legal deadlines.

Thank you for trusting Plushmas.