Privacy Policy

Last Updated: 7 November 2026

1. Introduction

Welcome to caprichosemilio.shop. Your privacy is important to us, and we are committed to protecting your personal information when you visit our website, browse our furniture products, place an order, or contact our customer support team.

This Privacy Policy explains what personal information we collect, how we use it, how we protect it, and what rights you have regarding your personal data.

By using our website, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

When you visit or make a purchase from caprichosemilio.shop, we may collect the following information:

Personal Information:

Full name.
Billing and shipping addresses.
Email address.
Contact telephone number.

Order Information:

Products purchased.
Order details and transaction references.
Delivery information.
Purchase history.
Returns and refund information.

Technical Information:

IP address.
Browser type and version.
Device information.
Operating system.
Website usage and browsing activity.
Cookies and similar tracking technologies.

We collect only the information reasonably necessary to operate our website, process orders, provide customer support, and improve our services.

3. How We Use Your Information

We use the information collected for the following purposes:

To process and fulfil customer orders.
To arrange deliveries of furniture products throughout Spain.
To process payments securely.
To manage returns, exchanges, and refunds.
To communicate order confirmations and delivery updates.
To respond to customer enquiries and support requests.
To maintain and improve our website.
To prevent fraudulent transactions and unauthorised activities.
To comply with applicable legal and regulatory obligations.
To send marketing communications where legally permitted and where appropriate consent has been obtained.

We do not use your personal information for purposes unrelated to the services described in this policy without an appropriate legal basis.

4. Legal Basis for Processing

Under the GDPR, we process personal information using one or more of the following legal bases:

Contractual Necessity: Processing your information to fulfil purchases, arrange deliveries, manage returns, and provide customer services.

Legal Obligations: Processing information when required to comply with tax, accounting, consumer protection, and other applicable laws.

Legitimate Interests: Processing information to maintain website security, prevent fraud, improve our services, and manage our business, provided these interests do not override your fundamental rights.

Consent: Processing information for optional marketing communications and non-essential cookies where consent is required.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Payment Information

We accept payments through Stripe.

When you make a purchase, your payment information is processed securely by Stripe in accordance with its own privacy and security practices.

We do not intentionally store or retain complete payment card details on our website servers.

Payment-related information may be processed to:

Complete and verify transactions.
Prevent fraudulent payments.
Handle payment disputes.
Process refunds.
Maintain transaction records where legally required.

For more information about how Stripe handles personal information, please consult Stripe's privacy policy.

6. Sharing Your Personal Information

We do not sell, rent, or trade your personal information to third parties.

However, we may share relevant information with trusted service providers when necessary to operate our business, including:

Payment Providers: Stripe, for secure payment processing.
Delivery Companies: To arrange and complete the delivery of your purchases.
Website Service Providers: To maintain website functionality, hosting, and security.
Technical Service Providers: To support website analytics, maintenance, and performance.
Legal Authorities: When disclosure is required by applicable law or a valid legal request.

All relevant service providers are expected to handle personal information responsibly and in accordance with applicable data protection requirements.

7. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy.

Order, transaction, and accounting records may be retained for periods required under applicable Spanish and European legislation.

Customer support communications and other personal information are retained only for the period necessary to address the relevant enquiry or business purpose, unless a longer retention period is legally required.

When information is no longer required, we take appropriate steps to delete or securely anonymise it.

8. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to improve your browsing experience.

Cookies may be used for the following purposes:

Essential Cookies: To support website functionality, security, and shopping cart operations.
Preference Cookies: To remember your selected settings and preferences.
Analytics Cookies: To understand website traffic and improve performance.
Marketing Cookies: To support relevant advertising activities where applicable and with the required consent.

You can manage or withdraw your cookie preferences through the website's cookie settings, where available.

Non-essential cookies will only be used where the required consent has been obtained.

9. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration, misuse, and disclosure.

These measures may include:

Secure website connections.
Restricted access to personal information.
Appropriate security monitoring.
Trusted payment processing services.
Regular website maintenance and security updates.

Although we take reasonable precautions, no method of internet transmission or electronic storage can guarantee absolute security.

10. Your Data Protection Rights

Under the GDPR and applicable Spanish data protection legislation, you may have the following rights:

Right of Access: Request information about the personal data we hold about you.

Right to Rectification: Request correction of inaccurate or incomplete personal information.

Right to Erasure: Request deletion of your personal information when the legal requirements are met.

Right to Restriction: Request that we restrict the processing of your personal information in certain circumstances.

Right to Data Portability: Request your personal information in a structured, commonly used, machine-readable format where applicable.

Right to Object: Object to certain types of personal data processing, including processing based on legitimate interests and direct marketing.

Right to Withdraw Consent: Withdraw consent where processing is based on your consent.

To exercise your rights, contact us using the contact details provided at the end of this policy.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) at https://www.aepd.es/.

11. International Data Transfers

Some of our third-party service providers may process personal information outside the European Economic Area (EEA).

Where personal information is transferred internationally, we take appropriate steps to ensure that such transfers comply with applicable data protection legislation.

These safeguards may include adequacy decisions, Standard Contractual Clauses, or other legally recognised transfer mechanisms.

12. Children's Privacy

Our website and products are intended for general consumers and are not specifically directed at children.

We do not knowingly collect personal information from children in circumstances where parental authorisation is required.

If we become aware that personal information has been collected unlawfully from a child, we will take appropriate steps to address the situation.

13. Third-Party Websites

Our website may contain links to external websites or third-party services.

These websites operate independently and have their own privacy policies and data protection practices.

We are not responsible for the privacy practices, content, or security of external websites. We encourage customers to review the privacy policies of any third-party websites they visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business operations, website functionality, services, or applicable legal requirements.

Any updates will be published on this page with a revised Last Updated date.

We encourage customers to review this page periodically to stay informed about how their personal information is handled.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or need assistance regarding your personal information, please contact our customer support team.

Our support team is available through email and live chat to assist with privacy-related enquiries.