PRIVACY POLICY

Your privacy is important to us. This Privacy Policy regulates the processing of personal data collected through entheojenia.com in accordance with the General Data Protection Regulation (GDPR) and organic data protection laws.

1. DATA CONTROLLER

• Name/Company: [Your Full Name or Company Name]
• Tax ID: [Your NIF/CIF]
• Address: [Your Physical Address]
• Data Protection Email: [Your Email, e.g., privacy@entheojenia.com]

2. PURPOSES OF DATA PROCESSING & RETENTION PERIODS

We process your personal data under the following conditions:

• E-Commerce & Orders (WooCommerce): To process your custom apparel orders, manage payments, and handle shipping or returns. Data is kept for the legal duration required by tax regulations (usually 5 years).
• Online Workshops & Memberships: To grant access to digital content, manage member accounts, and deliver specific member advantages. Data is retained as long as your account or membership remains active.
• Transactional Communications (Brevo): To send order confirmations, tracking numbers, and digital workshop links. Data is kept as part of your purchase history.
• Marketing & Newsletter (Mailchimp): To send discounts, promotional offers, and news to users who have opted-in. Data is kept until you click "unsubscribe".

3. LEGAL BASIS FOR PROCESSING

The legal bases for processing your data are:

• The execution of a contract for purchasing clothing, memberships, or booking workshops.
• Your explicit consent given when checking the box to subscribe to our Mailchimp newsletter or filling out contact forms.
• Legitimate interest for essential transactional notifications regarding your orders via Brevo.

4. THIRD-PARTY DISCLOSURES (DATA PROCESSORS)

We do not sell your data. To operate our store, we securely share necessary information with trusted third-party providers:

• Hosting: [Name of your Hosting Company, e.g., SiteGround, Raiola, etc.]
• E-commerce Platform: WooCommerce.
• Email Marketing & Delivery: Mailchimp (Newsletter) and Brevo (Transactional emails).
• Payment Gateways: PayPal and Credit Card processors (e.g., Stripe) to securely process payments without storing your financial details on our servers.
• Shipping Carriers: [Name of your courier services, e.g., Correos, DHL, UPS] to deliver physical products.

5. YOUR RIGHTS

You have the right to access, rectify, erase, limit, or object to the processing of your data, as well as the right to data portability. You can exercise these rights at any time by emailing [Your Email]. If you feel your data rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).