Skip to content
SÔLE

§ Legal

Privacy policy

DRAFT: this is a structural placeholder, not a compliant GDPR/LOPDGDD privacy policy. It must be completed with the store's real data controller details, Shopify/processor list, and retention periods, then reviewed by a lawyer before going live.

Data controller

Sôle SL, [address], Sevilla, Spain. CIF [ ]. Contact: [privacy@sole.example].

What we collect

  • Account and order data (name, address, email, phone) via Shopify Checkout
  • Payment data: processed directly by Shopify Payments / the enabled payment providers; we never store card numbers
  • Browsing data via cookies: only after consent, see the Cookie policy
  • Newsletter email address, on opt-in, via double opt-in

Legal basis

Contract performance (orders), consent (marketing, analytics cookies), legitimate interest (fraud prevention).

Recipients

Shopify (platform & payments), the shipping carrier and, only after consent, analytics and advertising providers. [List each processor and its DPA once selected.]

Retention

Order data is kept for the period required by Spanish tax law (currently 6 years). Marketing consent is kept until withdrawn.

Your rights

Access, rectification, erasure, portability, restriction and objection, under GDPR and LOPDGDD, by writing to [privacy@sole.example]. You may also complain to the Agencia Española de Protección de Datos (aepd.es).