SECTION 1 – WHO WE ARE
FELIPE ALBERNAZ ("we," "us," "our") is a Spain-based fashion brand. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit or purchase from felipealbernaz.com.
SECTION 2 – WHAT INFORMATION WE COLLECT
When you purchase from us, we collect personal information necessary to complete the transaction, such as your name, address, email, and payment details (processed securely by our payment provider — we do not store full card numbers).
When you browse our store, we may automatically collect your IP address, browser type, device information, and operating system to help improve the shopping experience.
Email marketing (if applicable): with your consent, we may send you emails about our store, new products, and updates.
SECTION 3 – LEGAL BASIS FOR PROCESSING (EU/UK VISITORS)
If you are located in the European Economic Area or the UK, we process your personal data on the following legal bases: performance of a contract (to fulfil your order), your consent (for marketing communications), our legitimate interests (fraud prevention, site security, service improvement), and compliance with legal obligations (tax, accounting).
SECTION 4 – HOW LONG WE KEEP YOUR DATA
We retain personal data for as long as necessary to fulfil the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements. Order and transaction records are generally retained for the period required by Spanish tax law.
SECTION 5 – CONSENT
By providing personal information to complete a purchase, verify your payment, place an order, arrange delivery, or request a return, you consent to its use for that specific purpose. For secondary purposes (e.g., marketing), we will request explicit consent or provide an opportunity to opt out.
You can withdraw consent at any time by contacting us at info@felipealbernaz.com.
SECTION 6 – YOUR RIGHTS
If you are in the EU/UK: you have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority (in Spain, the Agencia Española de Protección de Datos — www.aepd.es) if you believe your rights have been violated.
If you are a California resident: under the CCPA/CPRA, you have the right to know what personal information we collect, to request deletion of your personal information, to correct inaccurate information, and to opt out of the sale or sharing of your personal information. We do not sell your personal information for monetary compensation. To exercise these rights, contact us at info@felipealbernaz.com.
SECTION 7 – DISCLOSURE
We may disclose your personal information if required by law, to comply with legal process, or if you violate our Terms & Conditions.
SECTION 8 – SHOPIFY & INTERNATIONAL DATA TRANSFERS
Our store is hosted on Shopify Inc., which provides the e-commerce platform allowing us to sell products. Your data is stored securely by Shopify on servers protected by firewalls. Where your data is transferred outside the European Economic Area (e.g., to Shopify's servers or third-party services located elsewhere), such transfers are safeguarded through appropriate mechanisms such as Standard Contractual Clauses.
Payments: if using a direct payment gateway, Shopify securely encrypts your credit card information according to PCI-DSS standards. Transaction data is stored only as long as necessary to complete your purchase.
For more details, review Shopify's Terms of Service and Privacy Policy.
SECTION 9 – THIRD-PARTY SERVICES
Third-party providers (payment processors, marketing tools, analytics) collect and use information only to provide their services. Your data may be transferred to jurisdictions different from yours, subject to local laws. Once redirected to third-party websites or apps, their privacy policies apply, not ours.
We use Google Analytics and Google Ads to understand visitor behaviour, measure ad performance, and improve the user experience. We recommend reviewing Google's Privacy Policy.
SECTION 10 – SECURITY
We take industry-standard measures to protect your personal data from loss, misuse, or unauthorised access. Payment information is encrypted via SSL and AES-256 encryption, and we comply with PCI-DSS standards. While no system is 100% secure, we take all reasonable precautions to safeguard your information.
SECTION 11 – COOKIES
Cookies help improve your shopping experience. Key cookies we use include:
_session_id – session token, stores session info_shopify_visit – persistent, tracks visits for 30 minutes_shopify_uniq – counts visits by a single customer, expires next midnightcart – stores cart contents, persistent 2 weeks_secure_session_id – session tokenstorefront_digest – determines access if store has a passwordPREF – set by Google, tracks store visitsYou can opt out of non-essential cookies via the cookie banner shown on our site (if applicable to your region) or through your browser settings, though some features may be affected.
SECTION 12 – CHILDREN'S PRIVACY
Our site is not directed at children. By using this site, you confirm you are of legal age in your jurisdiction, or have parental/guardian consent if you are a minor. We do not knowingly collect personal information from children under 13 (or the relevant minimum age in your jurisdiction) without appropriate consent.
SECTION 13 – SMS/MMS MOBILE MARKETING PROGRAM
Participation: optional, requires opt-in. Message & data rates may apply. Opt-out: reply STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to any message. Duty to notify: update us if you change your phone number to avoid liability. Prohibited content: no illegal, fraudulent, obscene, or harmful content. Age restriction: participants must be at least 13 years old, or 13–18 with parental consent. Dispute resolution: arbitration only, individual claims, no class actions.
SECTION 14 – CHANGES TO THIS PRIVACY POLICY
We may modify this privacy policy at any time. Changes take effect immediately upon posting the updated version, with the "Last updated" date revised accordingly. If our company is acquired, your information may be transferred to the new owners to continue providing services.
SECTION 15 – GOVERNING LAW
This Privacy Policy is governed by the laws of Spain, without prejudice to any mandatory data protection rights you may have under the laws of your country of residence.
QUESTIONS AND CONTACT
For access, correction, deletion of your personal data, or any questions about this policy, contact:
Privacy Compliance Officer
FELIPE ALBERNAZ
info@felipealbernaz.com