Privacy policy

Privacy and Cookies Policy

Last updated: 26 September 2026

At FRACAZ we take your privacy seriously. This policy explains what personal data we process when you visit www.fracaz.es, make a purchase, subscribe to our newsletter or write to us, what we use it for and what rights you have. It is governed by Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

1. What data we process

  • Contact and identification data: first name, last name, email address, phone number, and shipping and billing addresses.
  • Order data: products purchased, amounts, discounts applied, order history, returns and incidents.
  • Payment data: your card details are processed directly by the payment provider. We only receive limited information, such as the payment method, the last digits of the card and the result of the transaction.
  • Customer account data, if you choose to create an account.
  • Communications: whatever you tell us when you write to us or call us.
  • Browsing data: IP address, device and browser type, pages visited and information obtained through cookies (see section 10).
  • Newsletter data: your email address, the date on which you gave your consent, and whether you open our emails or click on their links, which we use to measure interest in our communications.

The data marked as mandatory during checkout is necessary to process your order. If you do not provide it, we will not be able to fulfil your order.

2. What we use your data for and on what legal basis

  • To manage your purchase (order, payment, shipping, returns, guarantee and customer service) and your customer account. Legal basis: performance of the sales contract (Art. 6.1.b GDPR).
  • To comply with our legal obligations regarding invoicing, accounting, tax and consumer protection (for example, keeping invoices or handling official complaint forms). Legal basis: legal obligation (Art. 6.1.c GDPR).
  • To answer your enquiries when you write to us, even if you are not a customer. Legal basis: our legitimate interest in responding to people who contact us (Art. 6.1.f GDPR).
  • To send you our newsletter with FRACAZ news, launches and promotions, and your welcome code. Legal basis: your consent (Art. 6.1.a GDPR and Art. 21 of Spanish Law 34/2002 on Information Society Services). You can withdraw it at any time using the “unsubscribe” link in any email.
  • To prevent fraud and protect the store, for example by reviewing suspicious orders. Legal basis: our legitimate interest in preventing fraud and ensuring security (Art. 6.1.f GDPR).
  • To analyse how the website is used in order to improve it, through analytics cookies. Legal basis: your consent, which you can give or withdraw in the cookie banner.

We do not make decisions based solely on automated processing that produce legal effects concerning you.

3. How long we keep your data

  • Order and billing data: for the duration of our commercial relationship and, afterwards, for the periods required by law (generally 6 years for commercial and accounting records, plus the applicable tax and liability limitation periods).
  • Customer account: until you ask us to delete it, except for data we are required by law to keep.
  • Newsletter: until you unsubscribe.
  • Enquiries: for as long as necessary to reply to you and for a maximum of 12 months afterwards, unless they form part of a claim or an order.
  • Cookies: for the periods indicated in section 10.

After these periods, we delete or anonymise the data.

4. Who we share your data with

We do not sell your data. We only share it with the providers we need in order to operate and with whoever we are legally required to share it with:

  • Shopify (Shopify International Limited, Ireland, and its group companies): online store platform, website hosting, order management, payments through Shopify Payments and Shop Pay, and sending emails (Shopify Messaging).
  • Payment providers: Shopify Payments and its payment processors and, if you use them, Apple Pay or Google Pay, to collect payment for your order and prevent fraud.
  • GLS Spain and, for international shipments, the GLS network companies in the destination country: name, address, phone number and email address, to deliver your order, collect returns and notify you of the status of your shipment.
  • Google (Gmail): the provider of the email service we use to assist you. Google processes messages under its own terms and privacy policy.
  • Tax and accounting advisers, where applicable, to comply with our tax obligations.
  • Public authorities, courts and customs, when required by law or when necessary to ship your order outside the EU customs territory.

If you use Shop Pay or the Shop app, Shopify also processes some data as an independent controller, in accordance with its own privacy policy.

5. International transfers

Some of these providers (for example, Shopify, Google or the payment processors) may process data outside the European Economic Area, for example in Canada or the United States. In these cases, the safeguards provided for in the GDPR apply: adequacy decisions of the European Commission (such as the one for Canada or the EU-U.S. Data Privacy Framework) or standard contractual clauses approved by the Commission.

If you place an order for delivery outside the EU, we will provide the carrier and the customs authorities of the destination country with the data necessary to deliver it, as this is essential to perform the contract.

6. Your rights

You can exercise the following rights at any time:

  • Access: to know what data about you we process.
  • Rectification: to correct inaccurate or incomplete data.
  • Erasure: to ask us to delete your data when it is no longer necessary.
  • Objection: to object to processing based on our legitimate interest.
  • Restriction: to ask us to keep your data but not use it, in certain cases.
  • Portability: to receive your data in a structured format or have us send it to another company.
  • Withdrawal of consent: to withdraw your consent at any time, without affecting anything done before.

To exercise them, email us at fracaz.es@gmail.com with the subject “Data protection”, stating which right you wish to exercise. If we have doubts about your identity, we may ask you to prove it. We will reply within one month at the latest, which may be extended by two further months in complex cases (we would let you know).

If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es, C/ Jorge Juan, 6, 28001 Madrid) or with the supervisory authority of your country of residence in the EU.

7. Minors

You must be over 18 to buy from FRACAZ. We do not knowingly collect data from children under 14. If you are a parent or guardian and believe a minor has given us their data, please write to us and we will delete it.

8. Security

We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or alteration. The website uses an encrypted connection (HTTPS) and payments are processed in secure environments. No system is infallible: if we detected a security breach posing a risk to you, we would inform you and notify the competent authority where required by law.

9. Social media and links

Our website includes links to our Instagram and TikTok profiles. If you visit them or interact with us there, those platforms’ privacy policies will also apply.

10. Cookies

Cookies are small files stored on your device when you visit a website. On www.fracaz.es we use the cookies of the Shopify platform:

  • Technical or necessary cookies: they allow the store to work (cart, checkout, login, language and country, security and saving your cookie preferences). They do not require your consent. Duration: from the session up to a maximum of 1 year.
  • Analytics and preference cookies: they help us understand how the website is used (pages visited, time spent on the site, where visits come from) so we can improve it. They are only activated if you accept them. Duration: from the session up to a maximum of 1 year.
  • Marketing cookies: we do not currently use third-party advertising cookies. If we add them in the future, we will update this policy and they will only be activated with your consent.

All these cookies are our own or Shopify’s, which acts as the store provider. You can see the details of each Shopify cookie in its cookie policy.

When you first visit the website, you will see a banner to accept, reject or configure non-essential cookies. You can change your choice at any time by deleting the cookies in your browser. Rejecting analytics cookies does not prevent you from using the store.

11. Changes to this policy

We may update this policy to adapt it to legal changes or changes in the way we work. We will always publish the current version on this page, with its update date, and we will let you know if the changes are significant.

12. Data controller

Owner: Daniel Marín González-Regalado (FRACAZ)
Tax ID (NIF): 70273887D
Address: C. Roble, 93, 40140 Valverde del Majano, Segovia, Spain
Email: fracaz.es@gmail.com
Phone: +34 684 261 617