Privacy policy


La Loba operates this webshop and uses Shopify to provide our services. This Privacy Policy explains how we collect, use, and share your personal information when you use our website, make a purchase, or contact us. By using our services, you agree to this policy.

If this Privacy Policy conflicts with our Terms of Service, this Privacy Policy applies for personal data.

Data Controller

La Loba is the data controller responsible for your personal data.

Information we collect

We may collect the following personal information:

  • Contact information (name, address, email, phone number)
  • Payment and billing information
  • Order and purchase history
  • Account information (if applicable, such as username and password)
  • Communication with us (e.g. customer support messages)
  • Device and browser information (e.g. IP address)
  • Usage data (how you use our website)

We only collect and process personal data that is necessary for the purposes described in this Privacy Policy.

How we collect information

We collect information:

  • Directly from you (e.g. when you place an order or contact us)
  • Automatically through cookies and similar technologies
  • From Shopify and other service providers (payment, shipping, analytics, and IT services)
  • From third-party service providers where necessary to provide our services

Legal basis for processing (GDPR)

We process your personal data based on the following legal grounds:

  • Contract: to process your order, payment, and delivery
  • Legal obligation: for accounting, tax, and compliance requirements
  • Legitimate interest: to improve our services, secure our website, and prevent fraud
  • Consent: for marketing emails and non-essential cookies

How we use your information

We use your personal data to:

  • Process and deliver orders
  • Handle payments, returns, and refunds
  • Provide customer support
  • Manage and improve our website and services
  • Send order-related communication (e.g. shipping updates)
  • Send marketing emails (only if you have given consent)
  • Prevent fraud and ensure website security
  • Comply with legal obligations

Sharing your information

We may share your data with trusted third parties when necessary to provide our services:

  • Shopify (our e-commerce platform)
  • Payment providers
  • Shipping and logistics companies
  • IT, hosting, analytics, and marketing service providers
  • Authorities if required by law
  • In connection with a business transfer (e.g. sale or restructuring of the business)

We do not sell your personal data.

Shopify

Our store is hosted by Shopify. Shopify acts as a data processor and processes personal data on our behalf to operate the store, process payments, and improve services.

Shopify may transfer personal data outside the EU/EEA under appropriate safeguards, such as Standard Contractual Clauses. For more information, please refer to Shopify’s Privacy Policy.

International transfers

Your personal data may be processed outside your country, including outside the EU/EEA and the United Kingdom.

Whenever this occurs, we ensure appropriate legal safeguards are in place to protect your data in accordance with applicable data protection laws.

Security and data retention

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

We retain personal data only for as long as necessary for the purposes described:

  • Order and transaction data: up to 5 years (legal accounting requirements)
  • Customer support data: as long as needed to handle your inquiry
  • Marketing data: until you withdraw your consent
  • Technical and analytics data: according to cookie and analytics policies

Cookies

We use cookies and similar technologies to:

  • Ensure website functionality
  • Analyze website traffic and performance
  • Improve user experience
  • (Where applicable) support marketing activities

Non-essential cookies are only used with your consent. You can manage or disable cookies through your browser settings or cookie banner.

Your rights (GDPR)

Depending on your location, you have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion of your personal data
  • Restrict or object to processing
  • Withdraw consent at any time
  • Receive a copy of your personal data (data portability)
  • File a complaint with a data protection authority

To exercise your rights, contact us at: lalobacontact@gmail.com

Children

We do not knowingly collect or process personal data from individuals under the legal age of majority.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

Contact

If you have any questions about this Privacy Policy or how we process your personal data, you can contact us at:

La Loba
Email: lalobacontact@gmail.com