Privacy policy

Last updated: 6 October 2026

This Privacy Policy explains how BRUSÉ collects, uses and protects your personal data when you visit our website or buy from us, in accordance with the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD).

1. Who is responsible for your data

Seller: Carla Fernández, trading as BRUSÉ
Address: Calle Alfredo Palma, 29603 Marbella, Málaga, Spain
Email: dropsales44@hotmail.com
Tax ID (NIF): available on request by email

We have not appointed a Data Protection Officer; for any privacy matter, please contact us at the email above.

2. What data we collect

  • Order and account data: name, email, phone number, billing and shipping address, order details and communications with us.
  • Payment data: payments are processed by our payment providers (such as Shopify Payments, PayPal or others shown at checkout). We do not store your full card details.
  • Browsing data: IP address, device and browser information, pages visited and similar data collected through cookies and similar technologies (see section 8).
  • Marketing data: your email address and preferences, only if you subscribe to our emails.

The data marked as required at checkout is necessary to process your order; without it we cannot complete your purchase. We do not collect special categories of data.

3. Why we use your data and on what legal basis

  • To process, ship and support your order, and to handle returns and guarantee claims — performance of a contract.
  • To comply with tax, accounting and consumer law obligations — legal obligation.
  • To prevent fraud and keep our website secure — legitimate interest.
  • To send you marketing emails, only if you have opted in — consent, which you can withdraw at any time using the unsubscribe link or by emailing us.
  • To use non-essential cookies for analytics or advertising — consent, collected through our cookie banner.

4. Who we share your data with

We only share the data needed for each purpose with:

  • Shopify (Shopify International Limited, Ireland, and its affiliates), which hosts our online store and processes orders on our behalf. More information: shopify.com/legal/privacy.
  • Payment providers, to process your payment.
  • Our fulfilment partner and shipping carriers, which prepare and deliver your order and provide tracking.
  • Advisers and public authorities, when required by law (for example, tax authorities).

All these providers act under contracts that require them to protect your data. We do not sell your personal data, and we do not make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects.

5. International transfers

Some of these providers (including Shopify and our fulfilment partner) may process data outside the European Economic Area, for example in Canada, the United States or China. When this happens, transfers are protected by an adequacy decision or by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. How long we keep your data

We keep order data for as long as needed to provide the service and handle any returns or guarantee claims (up to 3 years after delivery), and then for the periods required by law — up to 6 years for accounting and tax records (Spanish Commercial Code) — after which it is deleted. Marketing data is kept until you unsubscribe. Cookie data is kept for the periods indicated in our cookie banner.

7. Your rights

You can request access, rectification, erasure, restriction of processing, data portability, or object to processing, and withdraw your consent at any time, by emailing dropsales44@hotmail.com. We will reply within one month. Withdrawing consent does not affect processing carried out before. If you believe your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es) or the supervisory authority of your country.

8. Cookies

We use cookies that are strictly necessary for the store to work (for example, to keep your cart and process checkout). Analytics and marketing cookies are only used if you accept them in our cookie banner. You can change your choice at any time from the banner or your browser settings.

9. Security and minors

We use appropriate technical and organisational measures to protect your data. Our store is not intended for children under 16, and we do not knowingly collect their data.

10. Changes

We may update this policy from time to time. The latest version will always be available on this page.