Last updated: June 18, 2026

Who we are

This website (nadadebajo.com) is operated by NADA DEBAJO S.L., CIF: B01775105, registered at Roger de Lluria 91, 1o 2a, 08009 Barcelona, Spain. For all privacy-related enquiries, contact us at info@nadadebajo.com or +34 606 63 39 28.

Information we collect and why

Order and account data

When you place an order or create an account, we collect your name, address, email address, phone number, language preference and payment information. We need this to process and fulfil your order. Legal basis: performance of a contract (GDPR Article 6(1)(b)).

Newsletter and marketing

If you subscribe to our newsletter, we store your email address and use it to send you updates about new pieces, programme news and exclusive offers. Legal basis: your consent (GDPR Article 6(1)(a)). You can withdraw consent at any time by clicking 'Unsubscribe' in any email, or by emailing info@nadadebajo.com.

Analytics

We use anonymised analytics tools to understand how visitors use our website and improve our services. No personally identifiable information is stored in analytics. Legal basis: legitimate interests (GDPR Article 6(1)(f)).

Location data

We may collect the country from which you are accessing our website when you log into your account or browse our site, for the purpose of localising content and currency. This data is not linked to your personal identity beyond what is necessary to provide the service.

How we protect your data

• We restrict and monitor access to sensitive data.
• We have transparent data collection procedures.
• We use SSL encryption for all data transmitted to and from the site.
• We do not store payment card information in our database.
• We use firewalls to prevent unauthorised access to our systems.

Third parties we share data with

• Shopify Inc. — our e-commerce platform (data processor). Privacy policy: shopify.com/legal/privacy
• DHL International GmbH — our delivery partner (name and address shared for delivery purposes only).
• [Email marketing platform — insert name] — newsletter delivery.
• [Analytics platform — insert name] — anonymised website analytics.

We do not transfer personal data to any third party beyond those listed above, unless required by law (for example, anti-fraud, financial or regulatory authorities).

How long we keep your data

Order records are retained for a minimum of 10 years in compliance with Spanish law (Organic Law 3/2018) and applicable tax requirements. Account data is retained for as long as your account is active. Newsletter subscriptions are retained until you unsubscribe. Analytics data is anonymised and retained per the analytics platform's standard retention period.

Your rights under GDPR

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: ask us to correct inaccurate data.
• Right to erasure: ask us to delete your data, subject to legal retention requirements.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: withdraw marketing consent at any time.
• Right to cancel: request cancellation of your personal data.

To exercise any of these rights, contact us at info@nadadebajo.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish data protection authority (AEPD) at aepd.es.

Changes to this policy

We reserve the right to modify or amend this privacy policy at any time. Changes take effect immediately upon posting. We will notify you of any material changes on this page. Continued use of our services after notification constitutes acceptance of the amended policy.

Cookies

We use cookies on this website. For full details of the cookies we use and how to manage them, please see our Cookie Policy.