Privacy Policy

This Privacy Policy describes how SBDH Ltd., in its capacity as data controller, treats your personal data when you visit or make a purchase on this website (the “Site” or “we”). Likewise, we inform you about the use we make through cookies.

Contact

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or want to file a complaint, please contact us by email using the privacy email listed in contact.

Collecting personal information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to manage your purchases. We may also collect additional information if you contact us for support and/or if you agree to receive our newsletters and commercial communications. In this Privacy Policy, we refer to any information about an identified or identifiable individual (including the information below) as “Personal Information.” Please see the list below for more information about what personal information we collect and for what purposes.

• Device information, obtained through cookies:
  • Purpose of the collection: the one indicated in the Cookies section of this document.
  • Collection Source: Collected when you have consented when accessing our Site, through cookies, log files, web beacons, tags or pixels.
  • Disclosure for commercial purposes: shared with our data processors WordPress and Google Analytics, who access your data on our behalf as they provide us with a service.
  • Personal information collected: web browser version, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
  • Legal basis: your consent. Strictly necessary cookies do not require your consent to be used.
• Order information & purchase management
  • Purpose of Collection: Provide you with products or services to fulfill our contract, process your payment information, arrange shipping and provide you with invoices and/or order confirmations, communicate with you regarding your purchase, screen our orders for possible risks or fraud.
  • Disclosure for commercial purposes: shared with our data processors WordPress, Energiso, SendCloud and/or Google Analytics, who access your data on our behalf as they provide us with a service.
  • Personal information collected: name, billing address, shipping address, payment information (including card numbers, email address, and phone number).
  • Legal basis: execution of contract.
• Service information
  • Purpose of the collection: provide customer service or resolve user queries.
  • Source of collection: collected from you.
  • Disclosure for commercial purposes: for internal use only.
  • Personal information collected: as provided by you.
  • Legal basis: execution of contract or consent, as appropriate.
• Sending newsletters and commercial communications
  • Purpose of the collection: sending commercial communications by email.
  • Source of collection: collected from you.
  • Disclosure for commercial purposes: for internal use only.
  • Personal information collected: email.
  • Legal basis: consent or legitimate interest, as appropriate.

We only collect the personal data necessary to fulfill the purposes described above.
For your information, you are not obliged to provide your personal data, however, when the treatment is based on the execution of the contract, not providing them will make it impossible for us to execute what is requested.

Minors

The Site is not intended for persons under the age of 18. We do not knowingly collect Personal Information from minors. If you are the parent or guardian and you believe that your child has provided us with personal information, please contact us.

Sharing personal information

The third parties with whom we may share your personal information are:

• External service providers or other contractors, for example, for hosting and data processing, accounting, payment management, etc., who will have the status of data processor. These service providers include WordPress, Inc., owner of the WordPress platform;
• Other third parties provided you have been duly informed (and, where appropriate, obtained your consent) or if the transmission is allowed for reasons of legitimate interest;
• Public bodies and authorities if so stipulated by the applicable legislation, that is, if it is by legal obligation (for example, tax and customs authorities).

Retention period

We will keep your personal information for the time strictly necessary for the purposes for which they were collected, as long as the consent has not been revoked (when the processing of personal information is based on consent). However, even after the aforementioned time has elapsed or the revocation of consent has elapsed, we may retain the personal information that is necessary to meet the responsibilities that may arise from the relationship with you and any other legal requirement.
For clarification purposes, the revocation of consent will not affect the legality of the treatment based on the consent prior to its withdrawal.

Automated decision-making

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a significant or legal effect on you.
Services that include elements of automated decision making include:

• Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a small number of hours.
• Temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist persists for a small number of days.

Your rights

At any time you can revoke the consent for the processing of your personal data (when the data processing is based on consent), as well as exercise, when appropriate, the rights of access, rectification, deletion, data portability, limitation and opposition to the treatment, by email through the email for privacy indicated in contact. In order to respond to the exercised right, we may have to request additional information that identifies you.

Your personal information will be processed within the European Economic Area (EEA). However, since we have contracted the services of the Shopify platform, your data will be transferred outside the US, specifically, to Canada and the United States. This international transfer of data is carried out in full compliance with the General Data Protection Regulation. Specifically, Canada has been declared by the European Commission as a country with an adequate level of protection (Decision 2002/2/CE of the Commission, of December 20, 2001).

Behavioural advertising

As stated above, we use your personal information to provide you with targeted advertisements or marketing communications that we think may be of interest to you. For example:

• We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your personal information here: https://www.google.com/intl/en/policies/privacy/ .
• We use Shopify Audiences to help us show ads about us on other websites with our advertising partners to buyers who have made purchases with other WordPress merchants and who may also be interested in what we have to offer. We also share information about your use of the Site, your purchases, and the email address associated with your purchases with Shopify Audiences, through which other Shopify merchants can make offers that may be of interest to you.
• For more information on how behavioral advertising works, you can visit the Network Advertising Initiative (“NAI”) educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of receiving behavioral advertising on:

• GOOGLE – https://www.google.com/settings/ads/anonymous

Changes and security in privacy and cookies

We can modify this privacy policy to adapt it to the changes that occur on the Site, due to legislative changes on personal data that appear and affect said policy or with the purpose of adapting said policy to the instructions issued by the privacy authority. competent data protection in each territory, which is why it requires reading it, each time you provide us with your data.

When there are significant changes to this privacy policy, we will notify you, either through the Site or through email, as appropriate.

In order to safeguard the security of your personal information, we inform you that we have adopted all the necessary technical and organizational measures to guarantee the security of the personal information provided; all this to avoid its alteration, loss, and/or unauthorized treatment or access, as required by regulations.

It is important that, so that we can keep your personal information updated, you inform us whenever there is a change in them.

Complaints

As indicated above, if you wish to make a complaint, please contact us by email or post using the details provided in the contact section of this privacy policy.

If you are not satisfied with our response to your complaint, you have the right to file your complaint with the relevant data protection authority, the Information Commissioner’s Office (ICO), United Kingdom.