This Privacy Policy explains how LUSUROMOD (“we”, “us”), the operator of lusuromod.com, processes your personal data in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Data controller and contact

The controller of your personal data is LUSUROMOD. For any privacy question or to exercise your rights, contact us through our contact form and mention “Privacy” in the subject.

2. What data we collect and why

  • Orders — name, billing and delivery address, email, phone and order details, to process, deliver and support your purchase. Legal basis: performance of a contract. Invoices and order records are kept as required by tax and commercial law.
  • Customer account — name, email and password (stored encrypted), order history and wishlist, so you can manage orders and check out faster. Legal basis: contract.
  • Payments — processed directly by our payment providers; we do not receive or store your full card number. Legal basis: contract.
  • Customer service — the information you send us through the contact form or by email. Legal basis: our legitimate interest in answering you, or contract.
  • Newsletter — your email address, only if you tick the opt-in box. You can unsubscribe at any time using the link in every email. Legal basis: consent.
  • Wholesale applications — company details, contact person, VAT/tax ID, business address, phone and the business document you upload, to verify and manage wholesale accounts. Legal basis: steps prior to entering into a contract and our legitimate interest in verifying business customers.
  • Security and fraud prevention — technical data such as IP address and browser information, including a security check on our forms. Legal basis: legitimate interest.

3. Who we share data with

We share data only with service providers who help us run the store and who process it on our behalf under data processing agreements, or where required by law:

  • Payment providers (such as Stripe and WooPayments) to process payments securely.
  • Shipping and logistics companies to deliver your order.
  • Our website hosting and email providers.
  • Our newsletter service, if you subscribed.
  • Google or Facebook, only if you choose to sign in with those accounts.
  • Services that show content on our pages, such as Google Fonts and our Instagram feed, and IP-based location lookup used to pre-select your country and currency; these receive your IP address when you load the page.
  • Public authorities, where we are legally required to.

Some of these providers are located outside the European Economic Area (for example in the United States). In those cases, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

4. How long we keep your data

We keep personal data only as long as necessary for the purposes above: account data while your account is active; order and invoice data for the periods required by tax and commercial law; newsletter data until you unsubscribe; and contact messages for as long as needed to handle your request.

5. Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting the lawfulness of processing before the withdrawal. To exercise your rights, contact us through our contact form. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the supervisory authority of your country.

6. Cookies

We use cookies that are necessary for the store to work — for example to keep your shopping cart, your login and your cookie choice. Where we use cookies that are not strictly necessary, we ask for your consent first. You can delete or block cookies in your browser settings; blocking necessary cookies may stop parts of the store from working.

7. Security and minors

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS). Our store is not intended for children under 14, and we do not knowingly collect their data.

8. Changes to this policy

We may update this policy to reflect changes in our services or the law. The current version is always available on this page.