Privacy policy
PRIVACY POLICY
Last updated: March 2025
1. Identification of the Data Controller
The person responsible for processing your personal data is byLucop® G. Sánchez Rasadore, 56200703L, 03004, Alicante, Spain. contacto@bylucop.com
2. What personal data do we collect?
When you visit our store or make a purchase, we may collect the following personal data:
Identification and contact data: first name, last name, email address, and phone number.
Shipping and billing data: full postal address, city, postal code, and country.
Payment data: we do not store credit or debit card details. Payments are processed securely by Shopify Payments, which acts as a data processor under its own security and privacy policies.
Browsing data: IP address, browser type, pages visited, time spent, and behavior data on the website, collected through cookies and similar technologies.
Communications: the content of any messages you send us via email or contact forms.
3. For what purpose do we process your data?
We process your personal data for the following purposes:
Order and shipping management: processing your purchase, managing payment, organizing shipping, and keeping you informed about your order status. Legal basis: performance of a contract.
Customer service: responding to your inquiries, managing returns, claims, or incidents. Legal basis: performance of a contract and legitimate interest.
Compliance with legal obligations: issuing invoices, maintaining accounting records, and complying with applicable tax and commercial regulations. Legal basis: legal obligation.
Commercial communications: if you have given your express consent, we may send you communications about new products, promotions, or news from byLucop®. Legal basis: consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Website improvement: analyzing user behavior to improve the shopping experience and store performance. Legal basis: legitimate interest.
4. How long do we keep your data?
We keep your personal data for as long as necessary for each purpose:
Order and billing data are kept for a minimum of 5 years, in accordance with the tax and accounting obligations established by Spanish legislation.
Customer service data is kept for as long as necessary to resolve the inquiry or claim and during the applicable legal limitation period.
Data for commercial communications is kept until you withdraw your consent.
Browsing data collected through cookies is kept as established in our Cookies Policy.
5. Who do we share your data with?
byLucop® does not sell or transfer your personal data to third parties for commercial purposes. However, to provide the service, we share data with the following providers who act as data processors under confidentiality and data protection agreements:
Shopify Inc.: e-commerce platform that hosts our store and manages payments. Shopify may store and process your data on servers located outside the European Economic Area, under the appropriate safeguards established by the GDPR. You can consult their privacy policy at shopify.com/legal/privacy.
Carriers and logistics operators: we share your name and shipping address with the carrier in charge of delivering your order, exclusively for that purpose.
Authorities and public bodies: when required by applicable law, we may communicate your data to the Tax Agency or other competent authorities.
6. International data transfers
Some of our providers, such as Shopify, may process your data outside the European Economic Area. In these cases, we ensure that appropriate safeguards exist in accordance with the GDPR, such as the standard contractual clauses approved by the European Commission.
7. Your rights
As a data subject, you have the following rights regarding your personal data:
Right of access: you can request information about the data we process about you.
Right to rectification: you can request the correction of inaccurate or incomplete data.
Right to erasure: you can request the deletion of your data when it is no longer necessary for the purposes for which it was collected, among other cases.
Right to restriction of processing: you can request that we suspend the processing of your data in certain circumstances.
Right to data portability: you can request to receive your data in a structured and commonly used format, or that we transfer it directly to another controller.
Right to object: you can object to the processing of your data based on our legitimate interest, as well as to receiving commercial communications at any time.
Right to withdraw consent: when processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, you can write to us at contacto@bylucop.com indicating the right you wish to exercise and attaching a copy of your identity document. We will respond within a maximum period of one month.
If you consider that the processing of your data does not comply with the GDPR, you have the right to file a claim with the Spanish Data Protection Agency (AEPD), the competent supervisory authority in Spain: www.aepd.es.
8. Cookies
Our store uses its own and third-party cookies to ensure the correct functioning of the site, analyze traffic and, where appropriate, show personalized content. You can manage your cookie preferences through the consent banner that appears when accessing the website. For more information, consult our Cookies Policy.
9. Security
byLucop® applies appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure. Payments are processed through an SSL encrypted connection and are managed entirely by Shopify Payments, which complies with the PCI DSS standard.
10. Modifications to this policy
byLucop® reserves the right to update this privacy policy to adapt it to legislative changes or modifications in our services. The current version will always be available on this page with the date of the last update.
11. Contact
For any inquiry related to the processing of your personal data: contacto@bylucop.com