Privacy policy

Amiguritos — [RAZÓN SOCIAL], [NIF/CIF], [DIRECCIÓN]. Data-protection contact: [EMAIL] (sofia@amiguritos.com).

• Order data — name, email, postal address and order contents, to fulfil your purchase and contact you about it. Legal basis: performance of the contract.

• Payment data — handled entirely by Stripe on its own hosted checkout; we never see or store your full card number. Legal basis: performance of the contract.

• Usage statistics — anonymous, aggregated visit data (pages, referrer, screen size, language, approximate location from IP). Legal basis: our legitimate interest in understanding how the shop is used.

• Stripe Payments Europe, Ltd. (Ireland) and Stripe, Inc. (USA) — payment processing. This involves a transfer outside the EEA, covered by Stripe's standard contractual clauses.

• Infomaniak (Switzerland) — our email/SMTP provider, used to send order confirmations and shipping notices. Switzerland benefits from an EU adequacy decision.

• Umami — our website-analytics tool, self-hosted on our own server; the statistics stay with us and are not shared with a third-party analytics company.

Umami sets no cookies and stores no personal identifier, so this site needs no cookie-consent banner. Your browser's local storage is used only for strictly-necessary things you control — your cart and your favourites — and never leaves your device.

Order and invoicing data are kept for as long as legally required for tax and commercial purposes (generally up to six years under Spanish law). Aggregated statistics are kept only as long as useful.

You may request access, rectification, erasure, restriction, portability or object to processing at any time by writing to sofia@amiguritos.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es), our supervisory authority.