Privacy policy

1. Controller

This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website, browse our products, or place an order, and it describes the rights available to you under the General Data Protection Regulation (GDPR) and applicable Spanish data protection law.

The controller responsible for the processing of personal data described in this policy is:
Freedom box
Calle Mecánicos 1
11100 San Fernando, Spain
Email: contact@fredombox.shop
Phone: 34669842926

If you have any questions about this policy or about how your personal data is handled, please contact us using the details above.

2. Data We Collect

We only collect the personal data that is necessary to operate our store, process your orders, and respond to your requests. The categories of data we collect depend on how you interact with our website.

2.1 When You Visit the Site

Our server temporarily logs certain technical information whenever you browse our website, including your IP address, the date and time of access, the URL requested, the referring page, and information about your browser and operating system. This information is processed to ensure the security, stability, and proper functioning of our website. Legal basis: GDPR Art. 6(1)(f), our legitimate interest in protecting and maintaining the site.

2.2 When You Place an Order

To process and fulfill your order, we collect the information necessary to complete the transaction, including your name, billing and shipping address, email address, phone number (optional), and payment details. This data is used exclusively to prepare, ship, and invoice your order, and to communicate with you about its status. Legal basis: GDPR Art. 6(1)(b), processing necessary for the performance of a contract to which you are a party.

2.3 When You Contact Us

If you contact us by email, phone, or through any contact form on our website, we store the content of your message together with the contact details you provide, so that we can review, respond to, and follow up on your inquiry. Legal basis: GDPR Art. 6(1)(b) and (f).

3. Sharing Data

We do not sell your personal data. We only share personal data with third parties in the following circumstances:

  • where you have given your explicit consent to the sharing;
  • where sharing is necessary to fulfill our contract with you, for example to arrange shipping or process payment;
  • where we are subject to a legal obligation that requires disclosure; or
  • where we have a legitimate interest in sharing the data, in accordance with GDPR Art. 6(1)(f), provided this does not override your fundamental rights and freedoms.

Any third party that processes personal data on our behalf does so under a data processing agreement and only for the purposes we specify.

4. Cookies

Our website uses cookies to function correctly and to improve your browsing experience. Strictly necessary cookies, which are essential for core site functionality such as navigation and checkout, are always active and do not require your consent.

Optional cookies, such as those used for analytics or marketing purposes, are only placed on your device after you have given your consent through our cookie banner. You may withdraw or adjust your cookie preferences at any time through your browser settings or the cookie management options provided on our site.

5. Services We Use

This website is hosted on the Shopify platform, provided by Shopify Inc., 150 Elgin Street, Ottawa, ON, K2P 1L4, Canada. Shopify may process certain technical and order-related data on our behalf to operate the store infrastructure.

Payments are processed by the payment providers configured in our store and shown to you at checkout. Each payment provider processes your payment data under its own privacy policy and terms, which we encourage you to review before completing a purchase.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, including complying with any applicable legal, accounting, or reporting obligations. Once data is no longer required for these purposes, it is securely deleted or anonymized.

7. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

  • Access — request confirmation of whether we process your data and obtain a copy of it (Art. 15);
  • Rectification — request correction of inaccurate or incomplete data (Art. 16);
  • Erasure — request deletion of your data where applicable (Art. 17);
  • Restriction of processing — request that we limit how we use your data in certain circumstances (Art. 18);
  • Data portability — receive your data in a structured, commonly used format, or have it transferred to another controller (Art. 20);
  • Withdraw consent — where processing is based on your consent, withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3));
  • Lodge a complaint — file a complaint with a supervisory authority if you believe your data has been processed unlawfully (Art. 77).

8. Right to Object

Where we process your personal data on the basis of our legitimate interest, you have the right to object to that processing at any time under GDPR Art. 21. If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defense of legal claims.

9. How to Exercise Your Rights

To exercise any of the rights described above, or if you have any questions about how we process your personal data, please contact us at contact@fredombox.shop. We will respond to your request in accordance with applicable data protection law.