Privacy & Cookie Policy

1. Data controller

The data controller for your personal data is [LEGAL BUSINESS NAME] (ENZA COSMETICS), registered at [REGISTERED ADDRESS], tax ID [TAX ID]. You can contact us about this policy at flofox2026@gmail.com or via WhatsApp at +34 697 876 253.

2. What data we collect

We collect the following data, depending on how you interact with the site:

• Order data: full name, phone number and delivery address, when you fill in the order form.
• Payment data: handled directly by Stripe; we never store or access your card details.
• Browsing data: IP address, device type and pages visited, via analytics and advertising cookies (see section 6), only if you accept them.
• Communications: if you contact us via WhatsApp, that conversation is processed according to WhatsApp/Meta's own privacy policy.

3. Purpose and legal basis

• Managing and delivering your order — legal basis: performance of a contract.
• Responding to your enquiries — legal basis: legitimate interest / performance of a contract.
• Showing personalized ads and measuring site usage — legal basis: your explicit consent, which you can withdraw at any time (see section 6).

4. Who we share your data with

We never sell your data to third parties. We share only the information strictly necessary with the following processors:

• Stripe — secure payment processing.
• Formspree — sending order form submissions to our email.
• Netlify — website hosting.
• Google (AdSense / Ads / Analytics) — advertising and usage statistics, only if you accept the corresponding cookies.

Some of these providers may be located outside the European Economic Area; where that's the case, they rely on safeguards recognized under EU law (such as Standard Contractual Clauses).

5. Retention period

We keep your order data for as long as needed to comply with our legal and tax obligations (generally up to 5 years). Cookie-related browsing data is kept according to the periods described in the next section.

6. Cookies

This site uses the following types of cookies:

• Necessary cookies: essential for the site to work (e.g. remembering your language choice). These don't require consent.
• Advertising cookies (Google AdSense): used to show relevant ads. These are only activated if you click "Accept" on the cookie notice.

You can change your decision at any time by clearing your browser's cookies and reloading the page, which will bring the consent notice back.

7. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Request deletion of your data.
• Object to processing or request its restriction.
• Request data portability.
• Withdraw your consent at any time.

To exercise these rights, write to us at flofox2026@gmail.com. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if you believe our processing doesn't comply with the law.

8. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The date of the last update appears at the top of this page.