Política de privacidad

1. Scope

This Privacy Policy describes personal information processed in connection with https://randbimportu.shop, including browsing, purchases, customer service, returns, and optional communications. The business operating randbimportu.shop determines the purposes and means of processing for its store activities. Privacy requests may be submitted to info@randbimportu.shop. Shopify and other providers may also have independent responsibilities for particular activities under their own notices.

This policy covers our online store and communications with us. It does not replace the privacy notices of independently operated websites, payment services, or external platforms. References below to optional tools apply only when those tools are actually enabled; they do not mean that every named service is installed.

2. Information You Provide

We process information you supply when entering checkout, making a purchase, opening an account where available, requesting assistance, or returning goods. This can include your name, email address, billing and delivery addresses, telephone number where required for delivery, selected products, order references, and correspondence. If you provide a different recipient's details, ensure you are entitled to do so and share only what is necessary for delivery.

Customer service messages may contain photographs, product details, and information about the requested solution. Avoid sending identity documents, medical information, full card numbers, passwords, or unrelated sensitive information unless a justified and secure process specifically requires it.

3. Payment and Transaction Information

Payment providers process information needed to authorise and settle payments, assess security, and manage refunds. Depending on the method used, we receive payment status, a transaction reference, and limited payment identifiers. Payment credentials are handled through the relevant checkout or provider systems; do not send them to our support email. Information required by a payment provider may be governed by its own privacy notice in addition to this policy.

4. Technical and Usage Information

When you visit the store, technical systems may process your IP address, browser and device type, language settings, approximate location inferred from IP, page requests, timestamps, referral information, and security logs. Basket and session information help the site function. Optional analytics and advertising technologies may collect additional browsing events only where enabled and subject to applicable consent requirements.

5. Other Sources

We receive order-processing and delivery information from Shopify, payment providers, carriers, and fulfilment providers where involved. This may include successful payment confirmation, tracking events, delivery confirmation, and information needed to investigate an order. If you contact us through an external platform, that platform may provide information you choose to share. We do not treat access to external information as permission to use it for unrelated marketing.

6. Order Processing: Contractual Basis

We process necessary contact, address, basket, and transaction information to take requested pre-contractual steps and perform a purchase contract. This includes confirming orders, arranging delivery, updating you about an order, processing returns, and providing relevant customer service. Without information essential for these activities, we may be unable to complete the requested order. Optional marketing consent is not a condition of buying goods.

7. Legal Obligations

We retain and process relevant transaction information to meet applicable tax, accounting, consumer-protection, regulatory, and lawful disclosure duties. Only information relevant to the duty should be processed. Where a request is based on legal authority, we assess its scope and disclose information through an appropriate channel rather than treating all requests as automatically valid.

8. Legitimate Interests

Where appropriate and subject to balancing your rights, we process limited information to prevent fraud, secure the store, investigate delivery issues, manage administrative records, and establish or defend legal claims. These purposes do not override rules requiring consent for optional tracking or electronic marketing. You may object to processing based on legitimate interests, and we will consider the objection under applicable law.

9. Consent and Marketing

Where required, we seek consent before sending promotional emails or using non-essential analytics and advertising technologies. We do not infer consent from placing an order, silence, or a preselected box. If an existing-customer exception legally permits communications about our own similar products, an easy objection is offered when details are collected and in each communication.

You may unsubscribe using the link in a marketing email or contact info@randbimportu.shop. Withdrawal of consent does not affect processing that was lawful before withdrawal. Essential order messages may still be sent because they concern the purchase rather than optional promotion. A minimal suppression record may be kept so an opt-out is respected.

10. Cookies and Similar Technologies

The store may use cookies and similar storage or tracking technologies. Strictly necessary technologies support functions such as baskets, checkout, security, and recording privacy choices. Non-essential analytics, advertising, and comparable tracking require consent where applicable. Continuing to browse is not consent.

Where optional cookies are offered, the consent interface should provide equally accessible acceptance and rejection choices, allow preferences to be configured, and allow later withdrawal. Optional technologies should not be activated before the required choice. The live cookie information must identify actual providers, purposes, and duration. Browser controls can remove or block cookies, although blocking essential technologies may affect checkout. A browser control alone does not replace a properly configured consent interface.

11. Shopify

Our store uses Shopify's commerce platform. Shopify processes information necessary to support storefront operation, checkout, hosting, security, and related platform functions. The allocation of responsibilities depends on the particular service and contractual arrangements. Shopify may act as our processor for some activities and as an independent controller for others.

If Shopify Network Intelligence or enhanced services are enabled, information may also be processed for the purposes described in Shopify's relevant privacy materials and our actual service disclosures, subject to required choices and legal bases. This policy does not authorise undisclosed enhanced processing. You can consult Shopify's Privacy Policy at https://www.shopify.com/legal/privacy and request clarification from us about services used for your information.

12. Optional Analytics and Advertising

If we enable Google Analytics, Google Ads, Meta advertising tools, or comparable services, those tools may process identifiers, device data, visited pages, and events such as purchases to measure performance or support advertising. They apply only when enabled and when required consent or another valid legal basis is in place. We do not claim that these services are present merely by naming them here.

Where a provider acts independently, its own notice explains its processing. Contact us for details of actual providers and the available choices. We do not sell customer contact details to third parties for their unrelated marketing. Optional advertising disclosures and controls must accurately describe any sharing that actually occurs.

13. Service Providers and Other Recipients

Information may be disclosed on a necessary basis to hosting and commerce providers, payment processors, delivery and fulfilment providers, customer service systems, and professional advisers. A carrier may need your name, delivery address, and contact details; it does not need unrelated marketing preferences. Providers handling information on our behalf are subject to appropriate obligations governing confidentiality, security, and permitted processing.

We may disclose information to competent authorities where legally required or to parties necessary to address fraud or legal claims. In a genuine business transfer, relevant records may be transferred subject to confidentiality, an appropriate legal basis, and any required notice. Information is not made public simply because it is held in our records.

14. International Processing

Some providers may process information outside Spain or the European Economic Area. Where a restricted international transfer occurs, we use an applicable lawful mechanism, such as an adequacy decision or appropriate contractual safeguards, and additional measures where required. A certification-based mechanism is relied on only if valid and applicable to the recipient and transfer. You may request information about safeguards and an accessible copy where available, subject to legitimate redactions.

15. Retention

We retain personal information for as long as necessary for its stated purpose and applicable legal obligations. Order and invoice records may require longer retention for tax, accounting, consumer claims, and legal defence. Support records are kept for the period needed to resolve the matter and related claims. Optional marketing records are retained while the relevant permission or other lawful basis remains valid, with minimal suppression information retained where necessary.

Retention depends on the record, applicable jurisdiction, and outstanding disputes; it is not indefinite by default. Records no longer needed are deleted or anonymised where feasible. Backup copies may remain for a limited replacement cycle with access restricted. Ask us for the criteria or period applicable to a particular category of your information.

16. Security

We use appropriate organisational and technical measures intended to protect personal information, including access restrictions and secure provider arrangements suited to the processing. No internet service can guarantee absolute security. If a personal-data breach occurs, we assess its effects and make required notifications to authorities and affected individuals within applicable deadlines. Customers should use strong account passwords where accounts are offered and keep order communications private.

17. Your Rights

Subject to the conditions and exceptions in applicable law, you may request access to your information, correction of inaccuracies, erasure, restriction, portability, or objection to relevant processing. You may withdraw consent at any time. You have an unconditional right to object to direct marketing. Rights are not always absolute; for example, transaction records may need to be retained for a legal duty. We explain a relevant refusal or limitation and the available complaint route.

18. Requests and Response Period

Email info@randbimportu.shop with a description of the right you wish to exercise. We may request proportionate information to verify identity where reasonably necessary. Do not send extensive identity documents without instructions. We generally respond within one month, with an extension of up to two further months where legally permitted because of complexity or number of requests, notifying you within the first month. Requests are normally free; any lawful exception will be explained.

19. Complaints

You may complain to the Spanish Data Protection Agency, Agencia Española de Protección de Datos, at https://www.aepd.es, or another competent supervisory authority. You do not need to contact us first to exercise that right. We welcome the opportunity to investigate a concern through info@randbimportu.shop.

20. Automated Decisions and Children

Commerce and payment systems may use automated security or fraud indicators. If an activity involves a solely automated decision with legal or similarly significant effects, applicable safeguards and required information must be provided. Contact us if you believe an automated process materially affected you.

The store is intended for people who can lawfully enter into purchases. We do not knowingly seek children's information for independent marketing. If a child's information has been provided without a proper basis, contact us so we can investigate and take suitable action.

21. Updates and Contact

We may revise this policy when processing practices or legal requirements change. Material changes requiring notice or renewed consent will be handled accordingly. A new policy does not retrospectively authorise a purpose incompatible with the original collection.