Privacy policy
This Privacy Policy explains how Valiant Vestes S.L. (“we”, “us”, “Valiant Vestes”), with CIF B75329276 and registered address at Calle Carretera de Húmera, 96, Pozuelo de Alarcón, Madrid, 28223, Spain, collects, uses, and protects your personal data when you visit or purchase at https://valiantvestes.com/ (the “Site”), in accordance with Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD).
1. Data Controller
Valiant Vestes S.L. is the data controller responsible for the personal data described in this policy. Contact: info@valiantvestes.com.
2. What Personal Data We Collect and Why (Legal Basis)
| Data | Purpose | Legal basis |
|---|---|---|
| Name, billing/shipping address, email, phone, order details | Process and fulfil your order, invoicing, customer service | Performance of a contract (Art. 6.1.b GDPR) |
| Payment information | Processed directly by Shopify Payments/PayPal — we do not store full card details | Performance of a contract |
| Email, purchase history, browsing behaviour | Send order confirmations, shipping updates, and — with your consent — marketing emails (Klaviyo) | Contract (transactional) / Consent (marketing, Art. 6.1.a) |
| Device information, IP address, cookies | Site security, fraud prevention, analytics (GA4), advertising (Meta Pixel) | Legitimate interest (security) / Consent (analytics & marketing cookies — see Cookie Policy) |
| Invoicing data | Legal and tax obligations | Legal obligation (Art. 6.1.c GDPR, Spanish commercial/tax law) |
3. Personal Data Sources
We may collect personal data from the following sources:
- Directly from you — when you create an account, place an order, contact us, or otherwise provide information to us.
- Automatically through the Site — from your device when you browse or use the Site, including through cookies and similar technologies (see our Cookie Policy).
- From our service providers — such as Shopify, our payment processor, and our shipping partners, when they collect or process data on our behalf.
- From our partners or other third parties — for example, social media platforms, where you choose to interact with our content there.
4. Who We Share Your Data With (Data Processors)
We share personal data with the following processors, strictly to provide our services:
- Shopify (Shopify International Limited) — ecommerce platform hosting and order management
- Klaviyo — email marketing (only if you opt in to the newsletter)
- Correos / Sendcloud — order shipping and delivery
- Google (GA4), Meta — analytics and advertising, only with your cookie consent
- Shopify's advertising network — to support personalized advertising based on your activity across Shopify-powered stores (see “Relationship with Shopify” below)
We do not sell your personal data to third parties. In connection with a business transaction such as a merger, acquisition, or sale of assets, personal data may be transferred to the parties involved as part of that transaction.
5. Relationship with Shopify
Our Site is hosted by Shopify, which also processes personal data about your access to and use of the Site in order to provide and improve its services to us. To support certain enhanced features — such as personalized advertising and fraud prevention — Shopify may use data collected from your interactions with our Site together with data from other Shopify-powered stores. For these purposes, Shopify acts as an independent controller of your personal data. To learn more about how Shopify processes personal data and the rights you may have in relation to it, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
6. Third-Party Websites and Links
Our Site may contain links to third-party websites or platforms. We do not control and are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing them with any personal data.
7. Children's Data
Our Site is not directed at, and we do not knowingly collect personal data from, children under the age of 16. If you believe a child has provided us with personal data without parental consent, please contact us at info@valiantvestes.com so we can delete it.
8. International Transfers
Some of our processors (including Klaviyo and Meta) are based outside the European Economic Area, in particular the United States. These transfers are safeguarded through Standard Contractual Clauses and/or the processor's own compliance framework, under a Data Processing Agreement (DPA) with each provider.
9. Your Rights
As a data subject under GDPR, you have the right to:
- Access your personal data
- Rectification of inaccurate data
- Erasure (“right to be forgotten”)
- Restriction of processing
- Portability of your data to another controller
- Object to processing based on legitimate interest or for direct marketing
- Manage communication preferences — you can opt out of marketing emails at any time using the unsubscribe link in those emails. You may still receive non-promotional emails related to your orders or account.
To exercise any of these rights, contact us at info@valiantvestes.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
10. Data Retention and Security
We implement reasonable technical and organizational measures to protect your personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
- Order and invoicing data: kept for 6 years, as required by Spanish commercial and tax law (Art. 30 Código de Comercio)
- Marketing/newsletter data: kept until you withdraw consent (unsubscribe) or after a period of prolonged inactivity
- Account data: kept while your account remains active, plus the period required to resolve any pending disputes
11. Cookies
See our separate Cookie Policy for details on the cookies we use and how to manage your preferences.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date of the latest revision will be shown at the top of this page.
13. Contact
For any questions about this Privacy Policy or to exercise your rights, contact us at info@valiantvestes.com or by post at Calle Carretera de Húmera, 96, Pozuelo de Alarcón, Madrid, 28223, Spain.
