Skip to content

Información

Privacy Policy

Last updated: October 15, 2026.

In this policy, we explain what personal data we process when you visit the CELLA store, make a purchase, write to us, or subscribe to our communications, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Data Controller

The data controller is the store owner identified in the Legal Notice (name or company name, tax ID, and address). You may contact us regarding any privacy matters at easycentury2023@gmail.com.

2. What data we process, for what purpose, and based on what legal basis

Orders and purchases

First and last name, shipping and billing address, email address, phone number (if provided), products purchased, and order history. Card or other payment method details are processed directly by the payment provider and are not stored by us.

Purpose: to manage orders, payment, shipping, returns, and after-sales support, and to comply with accounting and tax obligations. Legal basis: performance of a contract (Art. 6.1.b GDPR) and compliance with legal obligations (Art. 6.1.c GDPR).

Contact form and email

Name, email address, subject of the inquiry, content of the message, and, if you specify, the order number.

Purpose: to respond to your inquiry. Legal basis: your request and, when the inquiry relates to a purchase, the performance of a contract (Art. 6.1.b GDPR).

Newsletter

Email address.

Purpose: to send you commercial communications regarding CELLA products, routines, and news. Legal basis: your consent (Art. 6.1.a GDPR), which you may withdraw at any time using the unsubscribe link included in every email or by writing to us.

Browsing and security

Technical data such as IP address, browser and device type, and store activity, including cart content.

Purpose: to ensure the store functions, remember your cart, prevent fraud, and protect site security. Legal basis: legitimate interest in the secure operation of the site (Art. 6.1.f GDPR). Analytics and advertising based on cookies are only activated with your consent; please consult our Cookie Policy.

3. How long we retain data

  • Order data: for the duration of the commercial relationship and, subsequently, for the periods required by law (including six years for commercial documentation under Article 30 of the Commercial Code and the periods set by tax regulations).
  • Inquiries: for the time necessary to respond to them and resolve related issues.
  • Newsletter: until you withdraw your consent.

4. With whom we share data

We do not sell your data. We only share it with third parties when necessary for the purposes mentioned above or when required by law:

  • Shopify, the platform that hosts the store and manages orders, payments, and communications, acts as a data processor. For certain functions (e.g., Shop Pay or its fraud prevention systems), Shopify may process data as a controller; you can consult its privacy policy.
  • Payment providers, to process payments securely.
  • Transport companies, to deliver orders.
  • Public authorities, courts, and tribunals, when there is a legal obligation.

5. International transfers

Some providers, such as Shopify, may process data outside the European Economic Area. In such cases, transfers are made to countries with an adequacy decision from the European Commission or with appropriate safeguards, such as the standard contractual clauses approved by the Commission.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing, and portability, and withdraw your consent at any time by writing to easycentury2023@gmail.com with the subject line "Data Protection." If necessary to verify your identity, we may request additional information. We will respond within one month, which may be extended in cases provided for by the GDPR.

If you believe that we have not addressed your rights correctly, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Minors

The store is intended for adults. We do not knowingly process data of children under 14 without the consent of their parents or guardians.

8. Security

We apply appropriate technical and organizational measures to protect your data. Store pages and the payment process operate using an encrypted connection.

9. Changes to this policy

We may update this policy to adapt to legal or service changes. The date of the last update appears at the beginning of the page.