Privacy Policy

Privacy Policy

Last updated: November 7, 2026

This Privacy Policy explains how Sommelune collects, uses and protects your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Spanish data protection law.

1. Data controller

2. Data we collect

  • Order data: name, email, phone number, shipping and billing address, products purchased.
  • Payment data: payments are handled by secure third-party payment providers. We never see or store your full card details.
  • Communication data: messages you send to our customer support.
  • Technical data: IP address, device and browser type, pages visited and cookies, collected when you browse the store.

3. Why we use your data and legal basis

  • To process and deliver your order, and handle returns and support (performance of a contract).
  • To comply with legal, accounting and tax obligations (legal obligation).
  • To prevent fraud and keep our store secure (legitimate interest).
  • To improve our store and measure advertising performance (consent, where cookies or similar technologies require it).
  • To send you marketing emails, including reminders about items left in your cart (consent). You can unsubscribe at any time using the link in any email.

4. Who we share your data with

We only share data with trusted providers needed to run the store, who act under data processing agreements: our e-commerce platform (Shopify), payment processors, shipping carriers and fulfilment partners (who need your name, address and phone number to deliver your parcel), email and customer support tools, and analytics or advertising providers. We do not sell your personal data.

5. International transfers

Some providers may process data outside the European Economic Area. In those cases we rely on safeguards approved by the European Commission, such as Standard Contractual Clauses or adequacy decisions.

6. How long we keep your data

We keep your data for as long as needed to fulfil the purposes above and to meet legal obligations. Marketing data is kept until you withdraw your consent.

7. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw your consent at any time. To exercise them, email us at cozybeamsoport@gmail.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

8. Cookies

We use cookies and similar technologies to make the store work, remember your cart and understand how visitors use it. Non-essential cookies are only used with your consent, which you can manage using the cookie banner.

9. Security

We apply appropriate technical and organisational measures to protect your data.

10. Minors

Our store is not directed at children under 16, and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy from time to time. The latest version is always available on this page.

12. Contact

For any privacy question, write to cozybeamsoport@gmail.com.