Privacy policy

This policy explains how Coloma’s handles personal information when you browse colomas.com, place an order, arrange a return or exchange, subscribe to our communications or contact us. For privacy questions or to exercise your rights, email info@colomas.com.

This notice explains our processing; simply browsing the website does not constitute consent to marketing or non-essential cookies.

Information we collect

• Contact and order information: your name, email, telephone number, billing and delivery addresses, purchased items, payment status, delivery details and return or exchange information.
• Account and support information: information you provide when using an account, asking a question, making a complaint or sending us feedback.
• Preferences: your marketing choices, consent records and communication preferences.
• Device and usage information: IP address, browser and device details, pages viewed and interactions with our store or emails, depending on the technologies in use and your choices.

We receive information directly from you and, where relevant, from Shopify, payment providers, delivery and returns providers and tools that support the store. Payment providers process the payment details needed to complete a transaction.

Purposes and legal bases

• Purchases and service: to process orders, arrange delivery, manage returns and exchanges and answer purchase-related questions, as necessary to perform our contract or take steps you request before purchase.
• Legal obligations: to retain transaction records, meet tax and accounting duties and respond to lawful requests.
• Security and support: to prevent fraud, protect the website, resolve disputes and handle general enquiries, relying on our legitimate interests where these are not overridden by your rights.
• Marketing and optional tracking: to send promotional messages and use non-essential analytics or advertising technologies where you have consented or another lawful basis is available. Where consent is required, it must be obtained before that processing.

You can unsubscribe from promotional emails using the link in each email or by contacting us. We may still send communications needed for your order or service. Withdrawing consent does not affect processing that was lawful before withdrawal.

Service providers and disclosure

Information needed to operate the store may be shared with Shopify, payment providers, Bigblue and delivery carriers for fulfilment, Reveni for returns and exchanges, and Klaviyo for email communications. We may also use technical, analytics and advertising providers, subject to the applicable legal basis and your choices.

We may disclose information to professional advisers, public authorities where required by law, or parties involved in a business transfer subject to appropriate safeguards. Providers may act on our instructions or have their own legal responsibilities for particular services. Shopify’s own processing is explained in its Consumer Privacy Policy.

Cookies and similar technologies

Cookies and similar tools can support essential functions such as the basket, checkout, security and remembering choices. Optional analytics and advertising technologies can help measure site use or personalise advertising. Non-essential technologies require your consent where applicable law requires it; this privacy notice is not a substitute for that consent.

Use any cookie-preference controls presented on the website to manage the choices they offer. You may also manage cookies in your browser or contact us for help. Blocking essential cookies can affect the store’s functionality. Information about Shopify’s cookies is available in its Cookie Policy.

International transfers

Our service providers may process information outside your country, including outside the European Economic Area or the UK. Where required, transfers must rely on an adequacy decision or appropriate safeguards such as approved contractual clauses. Contact us for information about the safeguards applicable to your data.

Retention and security

We keep information for as long as needed for the purpose for which it was collected, including operating your account, fulfilling orders, handling returns, meeting legal retention duties and resolving claims. Marketing preferences are retained as needed to respect your choices, including a limited suppression record after you unsubscribe. Retention depends on the type of record and the applicable legal requirements.

We use appropriate measures to protect personal information, but no system can guarantee absolute security. Avoid sending full payment-card details or other unnecessary sensitive information by email.

Your rights

Depending on applicable law, you can request access, correction, deletion, portability or restriction of your data, object to processing, and withdraw consent. You may object to direct marketing at any time. Other rights, including rights concerning certain automated decisions or targeted advertising, may apply in your jurisdiction.

Contact info@colomas.com to make a request. We may ask for proportionate information to verify your identity. Under the GDPR we normally respond within one month; where a lawful extension is necessary, we will explain it. You may complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.

Updates and external websites

We may update this notice when our practices change and will indicate the revision date. External websites and services have their own privacy notices. Please review those notices when you use them.