Política de privacidad

At Gift Boutique Barcelona, company lagal name Flor Decor Home Design S.L. we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection laws.

1. Data Controller

The data controller responsible for your personal data is:
Flor Decor Home design S.L

NIF B67561910

Av. Diagonal 423,2°,1ª , 08036 , Barcelona , Spain

Email: info@giftboutiquebcn.com

2. What Data We Collect

When you use our website, place an order, or contact us, we may collect the following data:

Full name

Shipping & billing address

Email address

Phone number (if provided)

Payment method details (processed securely via third-party payment providers)

Order history and product preferences

IP address and browsing behaviour (via cookies – see below)

We do not store or access full credit card details. All payments are processed securely by our payment partners.

3. How We Use Your Data

We use your data to:

Process and deliver your orders

Communicate with you about your purchase

Provide customer support

Send order updates and shipping notifications

Improve our services and website

(With your consent) send occasional promotions or newsletters

4. Legal Basis for Processing

We process your data under the following legal grounds:

Contractual necessity: to fulfil your orders

Legal obligation: to comply with applicable tax and accounting regulations

Legitimate interest: to improve customer experience and service

Consent: for marketing communications (you can opt out at any time)

5. Data Sharing

We only share your data with:

Payment processors (e.g. Shopify Payments, Stripe, PayPal)

Delivery and courier partners

Legal or tax authorities when required by law

We do not sell or rent your data to third parties.

6. Your Rights

As a data subject under the GDPR, you have the right to:

Access your personal data

Correct or update inaccurate data

Request deletion of your data ("right to be forgotten")

Object to or restrict data processing

Withdraw consent (for marketing) at any time

File a complaint with the Agencia Española de Protección de Datos (AEPD)

To exercise any of these rights, contact us at: [insert email]

7. Data Retention

We retain personal data only for as long as necessary:

For legal and tax purposes: typically 6 years for invoices and purchase records

For customer service or account purposes: up to 2 years from last contact

For marketing (with consent): until you unsubscribe

8. Cookies & Tracking

We use cookies and similar technologies to:

Improve site performance

Analyse visitor behaviour

Offer personalised content or promotions

You can manage or disable cookies via your browser settings. See our [Cookie Policy] for more.

9. Security Measures

We take appropriate technical and organisational measures to protect your data, including SSL encryption, secure hosting, and limited internal access.