How Imperial Marketing Alliance, S.L. collects, uses and protects your personal data.
Who we are
This store is operated by Imperial Marketing Alliance, S.L., a company incorporated in Spain with registered office at Calle Domingo J. Navarro 1, Planta 2, Oficina, 35002 Las Palmas de Gran Canaria, Las Palmas, Spain, holding tax identification number (CIF) B19759133. You can reach us through our contact page.
We are the data controller for the personal data described below, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on data protection and the guarantee of digital rights.
What we collect, and why
When you place an order we collect your name, billing and delivery address, email address, telephone number and the details of what you bought. We need this to conclude and perform the contract of sale with you and to issue an invoice. Without it we cannot ship an order.
Payment card details are entered directly into our payment providers' systems and are never stored on our servers. We receive a confirmation of payment and the last digits of the card, nothing more.
If you subscribe to our email list we process your address on the basis of your consent, which you may withdraw at any time through the unsubscribe link in any message.
When you browse the store we collect technical data such as IP address, device, browser and pages visited. Strictly necessary processing rests on our legitimate interest in keeping the store secure and working; anything beyond that rests on your consent, as described in the Cookie Policy.
How long we keep it
Order and invoice records are kept for the periods Spanish commercial and tax law requires, generally six years. Marketing data is kept until you withdraw consent. Technical logs are kept for a short period and then deleted or aggregated.
Who receives your data
We share personal data only with the providers we need in order to run the store: Shopify Inc. as e-commerce platform and host, our payment service providers, the carriers who deliver your parcel, and our accountants. Each acts as a processor under contract, or as an independent controller where the law makes it one.
Some providers are established outside the European Economic Area. Where that is so, transfers are covered by an adequacy decision of the European Commission or by the European Commission's Standard Contractual Clauses.
We do not sell personal data and we do not pass it to third parties for their own marketing.
Your rights
You may ask us for access to your data, for its rectification or erasure, for restriction of processing, for portability, and you may object to processing based on legitimate interest. Where processing rests on consent you may withdraw it at any time, without that affecting the lawfulness of what was done before.
Write to us from the contact page. We may ask you to confirm your identity, and we answer within one month.
If you consider that we have handled your data badly, you may complain to the Spanish Data Protection Agency, Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.
Changes
We update this policy when our processing changes. The version published here is the one in force.