Privacy policy

Last updated: 4 October 2026

1. Data controller

The controller of your data is AquaBloom. You can contact us about any privacy matter through our contact page or at info_en@buyaquabloom.com.

2. What data we collect

  • Name, shipping and billing address, email and phone number.
  • Information about your orders, returns and issues.
  • Your communications with our customer service.
  • Technical data: IP address, device, browser and how you use the store, according to your cookie preferences.

Your card details are processed directly by the payment providers (Shopify Payments, PayPal, etc.). We never see or store them.

3. How we obtain your data

  • Directly from you, when you place an order, subscribe or contact us.
  • Automatically when you browse the store, through cookies and similar technologies, according to your preferences.
  • From the providers involved in your order (payment, shipping, tracking).

4. Why we use it and on what legal basis

  • Managing your order (payment, shipping, tracking, returns and customer service): performance of a contract.
  • Meeting legal obligations (invoicing, accounting, claims): legal obligation.
  • Preventing fraud and keeping the store secure: legitimate interest.
  • Improving the store and measuring our campaigns: your consent, through the cookie banner.
  • Sending you news and offers by email: your consent, or legitimate interest if you are already a customer and the products are similar to those you bought. You can unsubscribe at any time using the link in each email.

You can withdraw your consent at any time; this does not affect processing carried out before withdrawal. Emails about your order (confirmation, shipping, issues) are not marketing communications.

5. Who we share your data with

Only with the providers needed to deliver the service, acting as data processors:

  • Shopify (store platform and payments).
  • Payment providers (e.g. PayPal, Apple Pay, Google Pay).
  • Fulfilment provider and carriers, who prepare and deliver your order.
  • Advertising and analytics tools (e.g. Meta, Google), only if you accept the corresponding cookies.

We never sell your data.

6. International transfers

Some providers are located outside the European Economic Area. In those cases the safeguards required by law apply: European Commission adequacy decisions, standard contractual clauses or other legal mechanisms.

7. How long we keep it

  • Order and billing data: as long as the law requires (in Spain, up to 6 years for commercial and tax obligations).
  • Customer service: for the duration of the request and up to 1 year afterwards.
  • Marketing communications: until you unsubscribe.
  • Cookies: for the period stated in the cookie banner.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, through our contact page or at info_en@buyaquabloom.com. We may ask you to verify your identity before handling your request.

If you are not satisfied with our response, you can complain to the Spanish Data Protection Agency (www.aepd.es), to the data protection authority of your EU country or, if you live in the United Kingdom, to the Information Commissioner's Office (ico.org.uk).

9. Security

We apply technical and organisational measures to protect your data against unauthorised access, loss or misuse. The store runs on Shopify, with an encrypted connection (HTTPS) and PCI-DSS certified payments.

10. Children

The store is not aimed at children under 14 (under 13 in the UK) and we do not knowingly collect their data. If you think a child has given us their data, write to us and we will delete it.

11. Changes to this policy

We may update this policy when our services or the law change. The current version, with its update date, will always be published on this page.