Privacy policy

Last updated: October 22, 2026

At ELIAORA we respect your privacy. This policy explains what personal data we process, why, and what rights you have, in accordance with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Data controller
ELIAORA · Avenida Al-Andalus, 11540 Sanlúcar de Barrameda (Cádiz), Spain · info.eliaora@gmail.com

What data we collect
- Contact and shipping details: name, address, email and phone number.
- Order details: products purchased, amounts and payment method. Your card details are handled directly by the payment providers (Shopify Payments, PayPal…); we do not store them.
- Browsing data: IP address, device, browser and pages visited, through cookies.
- Communications: the messages you send us.

Why we use it and legal basis
- To manage your order (shipping, returns and customer service): performance of a contract.
- To meet legal obligations (invoicing and tax): legal obligation.
- To send you news and offers by email, only if you subscribe: consent. You can unsubscribe at any time via the link in each email.
- Analytics and personalized advertising through cookies: consent, which you can give or withdraw in the cookie banner.
- To prevent fraud and keep the store secure: legitimate interest.

Who we share your data with
- Shopify, the platform that hosts our store.
- Payment providers (Shopify Payments, PayPal, etc.).
- Our suppliers and shipping carriers, who receive your name and address to prepare and deliver your order. Some are located outside the EU (for example, in China).
- Advertising platforms such as Meta (Facebook and Instagram) and Google, only if you accept marketing cookies.
When data is transferred outside the European Economic Area, the safeguards provided by the GDPR apply, such as the European Commission's standard contractual clauses.

Cookies and pixels
We use technical cookies, which are necessary for the store to work, and, if you accept them, analytics and advertising cookies (such as the Meta pixel or Google tags) to measure our ads and show you relevant content. You can change your preferences at any time in the cookie banner.

How long we keep it
For as long as necessary to manage your order and for the periods required by law (for example, 6 years for accounting records). Subscription data is kept until you unsubscribe.

Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by emailing info.eliaora@gmail.com. If you believe we have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the data protection authority of your country.
You can also opt out of the use of your data for personalized advertising here: eliaora.com/pages/data-sharing-opt-out

Minors
Our store is not intended for children under 16 and we do not knowingly collect their data.

Changes
We may update this policy. The current version will always be published on this page with its update date.