Privacy policy
At Olaloom we process your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). Here we explain what data we collect, why, and what you can do about it.
1. Data controller
- Controller: Amador Acacio Pérez
- Tax ID (NIF): 06012041W
- Address: Calle Profesor Bacterio 20, 28521 Rivas-Vaciamadrid (Madrid), Spain
- Contact: hola@olaloom.com
2. What data we process
- Purchase data: first and last name, shipping and billing address, email address, phone number and order details.
- Payment data: handled directly by the payment provider. Olaloom does not store your full card number.
- Contact data: the data you give us when you write to us or fill in the contact form.
- Browsing data: IP address, device, browser, pages viewed and interactions, collected through cookies and similar technologies when you consent to them.
3. Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Managing your order, shipping, invoicing and returns | Performance of the contract (Art. 6(1)(b) GDPR) |
| Answering your questions and providing after-sales service | Performance of the contract or legitimate interest (Art. 6(1)(b) and 6(1)(f)) |
| Complying with tax and accounting obligations | Legal obligation (Art. 6(1)(c)) |
| Sending you marketing emails | Consent, or legitimate interest if you are already a customer and the products are similar (Art. 6(1)(a) and 6(1)(f); Art. 21 of the Spanish LSSI) |
| Measuring how the site is used and how well our ads work, with analytics and advertising cookies | Consent (Art. 6(1)(a)) |
| Preventing payment fraud | Legitimate interest (Art. 6(1)(f)) |
4. How long we keep it
- Order and invoicing data: for as long as the business relationship lasts and then for the period required by tax and commercial law (up to 6 years, and 4 years for tax purposes).
- Customer service requests: until they are resolved and then for as long as needed to deal with any claims.
- Data for marketing communications: until you withdraw your consent or unsubscribe.
- Browsing data: for the period stated in the cookie policy.
5. Who else has access to your data
We only share your data with those we need for the service to work, always under a data processing agreement where applicable:
- Shopify International Ltd.: the platform that hosts the store.
- Payment providers (Shopify Payments / Stripe and, where applicable, PayPal): they process payments and prevent fraud.
- Logistics providers and carriers: they receive the data strictly needed to prepare and deliver your order.
- Order management and automation tools that we use to place the order with our supplier.
- Advertising and analytics platforms (Meta Platforms, TikTok and, where applicable, Google): only if you have accepted the corresponding cookies.
We may also disclose data to public authorities when required by law.
6. International transfers
Some of these providers are located outside the European Economic Area. In those cases the transfer is covered by an adequacy decision of the European Commission, by standard contractual clauses or by another safeguard provided for in Chapter V of the GDPR.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw at any time any consent you have given. Email us at hola@olaloom.com stating which right you want to exercise; we may ask you to prove your identity.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid, Spain).
8. Security and minors
We apply reasonable technical and organizational measures to protect your data. The site is not aimed at children under 14 and we do not knowingly collect their data.
9. Changes to this policy
We may update this policy to adapt it to legal or operational changes. The current version is always the one published on this page.
Last updated: September 27, 2026.