4. Privacy Policy

VESTEREZ, S.L. respects your privacy and is committed to protecting your personal data. This policy explains what we collect, why, and what rights you have. It is written in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

VESTEREZ, S.L. Tax ID: B26866137 Email: hello@shirodrip.com Website: shirodrip.com

2. What data we collect

Information you give us: name, billing and shipping address, email address, phone number (when provided), order contents, and any information you include when contacting customer service.

Payment information: card payments are processed by our payment provider. We receive confirmation of payment and the last digits of the card, but we never receive or store your full card number or security code.

Information collected automatically: IP address, browser type and version, device type, operating system, pages visited, referring site, and time spent on the site. This is collected through cookies and similar technologies, subject to your consent.

3. Why we use your data and on what legal basis

We do not use your data for automated decision-making or profiling that produces legal effects for you.

4. Who we share your data with

We share personal data only to the extent necessary, with:

• Shopify Inc., which hosts our online store and processes orders
• Our payment provider, to process and secure your payment
• Our shipping and fulfilment partners, to produce and deliver your order
• Public authorities, where we are legally obliged to do so

Some of these providers are located outside the European Economic Area. Where that is the case, transfers are covered by adequacy decisions of the European Commission or by Standard Contractual Clauses.

We never sell your personal data.

5. How long we keep your data

Order and billing data is retained for the periods required by Spanish commercial and tax law, generally 6 years. Data processed on the basis of consent is kept until you withdraw that consent. Data relating to a claim is kept until the claim is resolved and any applicable limitation period has expired.

6. Your rights

You have the right to access your data, to have it rectified or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, write to hello@shirodrip.com stating which right you wish to exercise. We will respond within one month.

If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

7. Cookies

We use cookies that are strictly necessary for the site to function, and — only with your consent — cookies for analytics and marketing purposes. You can accept, reject or configure non-essential cookies through the banner shown when you first visit the site, and change your choice at any time from the cookie settings link.

8. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration. Our site uses SSL encryption on all pages where personal data is transmitted.

9. Children

This site is not directed at persons under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it.

10. Changes

We may update this policy. The current version is always available on this page with its date of last revision.