Controller: Jatsu Beristain Ruiz de Munain, Tax ID 58065768Z, Durana kalea 17, 1.º D, 20550 Aretxabaleta (Gipuzkoa), Spain, jatsu232@gmail.com.
Data we process: name, address, email, phone, order details and the text you ask us to engrave. Payment details are handled by the payment provider; we never see them.
Why: to manage, engrave and ship your order, handle returns and questions, and meet tax obligations. We only send marketing if you expressly agree.
Legal basis: performance of the purchase contract, legal obligations and, where applicable, your consent.
Who we share it with: the store platform (Shopify), the payment provider, the suppliers who make and ship the order and the carrier, only as needed to deliver it. Some of these providers are outside the EU, with the safeguards required by the GDPR.
How long: for the duration of the business relationship and then for the period required by tax and commercial law.
Your rights: access, rectification, erasure, objection, restriction and portability by emailing jatsu232@gmail.com. You can also complain to the Spanish Data Protection Agency (aepd.es).