Privacy Policy

PRIVACY AND DATA PROTECTION POLICY

Last update: September 29, 2026

1. Data Controller

The data controller for personal data collected through www.masmona.shop is:

  • Owner: Mónica De Luis Esteban

  • Tax ID (NIF): 17739059X

  • Address: C/ Calatayud n 3

  • Email: mncdeluis@gmail.com

  • Trade Name: Masmona

2. Data processed and purposes

Masmona may process the data provided during browsing, purchasing, or contacting the store, such as name, address, telephone number, email, billing information, orders, and communications.

This data will be used to:

  • Process orders, payments, shipments, returns, and customer service.

  • Manage inquiries, user accounts, and communications related to purchases.

  • Comply with tax, accounting, and legal obligations.

  • Prevent fraud and ensure store security.

  • Send commercial communications when there is consent or legal authorization.

3. Legal basis

Processing is based, as applicable, on the execution of the sales contract, compliance with legal obligations, user consent, and the legitimate interest in protecting and improving the store's operation.

Consent for commercial communications may be withdrawn at any time.

4. Recipients and providers

Data may only be communicated when necessary to payment providers, shipping companies, web hosting, technical support, consulting services, and legally competent public authorities.

The store is hosted on Shopify, which collects and processes certain personal data to provide its commercial services, manage purchases, improve user experience, and maintain platform security. Information may be shared with Shopify and third-party providers that may be located outside the European Economic Area.

Shopify implements mechanisms recognized by the GDPR, such as adequacy decisions and standard contractual clauses. You can consult the Shopify Privacy Policy for consumers and manage certain preferences in its Privacy Portal.

5. Retention

Data will be retained as long as there is a commercial relationship and for the periods necessary to meet tax, accounting, legal obligations, or potential claims. Data used exclusively for commercial communications will be retained until the user withdraws their consent.

6. User rights

Users may request access to, rectification, deletion, opposition, limitation, or portability of their data, as well as withdraw consent, by writing to [CONTACT EMAIL] and indicating "Data Protection" in the subject line. Documentation may be requested to verify your identity.

You may also file a claim with the Spanish Data Protection Agency (AEPD).

7. Security and changes

Masmona applies reasonable measures to protect personal data and does not make decisions based solely on automated processing that produce legal effects on the user.

This policy may be updated due to legal or technical changes, or changes in the services used. The current version will always be available on this page.