Política de privacidad

Haibat Al Oud — Política de Privacidad

www.haibataloudperfume.com

Compliant with GDPR (EU) 2016/679 and Spanish Organic Law 3/2018 (LOPDGDD)

Last updated: April 2026

1. Data Controller

The controller responsible for processing your personal data is:

Company	Haibat al oud, SL
Trade name	Haibat Al Oud
Address	Calle Girona n7b, Santa Eulalia de Roncana, Barcelona 08187, Spain
Email	haibatperfume@gmail.com
Website	www.haibataloudperfume.com
Tax ID (CIF)	[Insert CIF number]

2. Personal Data We Collect

We collect the following categories of personal data when you use our website or place an order:

• Identity data: full name

• Contact data: email address, phone number, shipping and billing address

• Transaction data: details of purchases, order history, payment method type (we do not store card details)

• Technical data: IP address, browser type, device information, pages visited, time and date of access

• Marketing data: your preferences regarding receiving marketing communications from us

3. How We Use Your Personal Data

We use your personal data for the following purposes and legal bases under GDPR:

Purpose	Data Used	Legal Basis
Process and fulfil orders	Identity, contact, transaction	Contract performance
Send order & shipping updates	Identity, contact	Contract performance
Customer support	Identity, contact, transaction	Legitimate interest
Marketing & newsletters	Identity, contact, marketing	Consent
Improve website & analytics	Technical, usage data	Legitimate interest
Legal & tax obligations	Identity, transaction	Legal obligation

4. Data Sharing & Third Parties

We do not sell your personal data. We may share your data with trusted third parties only where necessary to deliver our services:

• Shipping carriers (e.g. Correos, MRW, DHL) — to deliver your orders

• Payment processors (e.g. Shopify Payments, PayPal) — to process transactions securely

• E-commerce platform (Shopify) — to operate our online store

• Analytics providers (e.g. Google Analytics) — to understand website usage

• Legal authorities when required by law or court order

All third parties are required to process your data securely and in compliance with applicable data protection law.

5. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this policy:

• Order data: retained for 5 years for accounting and legal compliance purposes

• Account data: retained while your account is active, or up to 3 years after last activity

• Marketing data: retained until you withdraw consent or unsubscribe

• Technical/log data: retained for up to 12 months

6. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access: request a copy of the personal data we hold about you

• Right to rectification: request correction of inaccurate or incomplete data

• Right to erasure: request deletion of your personal data (‘right to be forgotten’)

• Right to restriction: request that we restrict the processing of your data

• Right to portability: receive your data in a structured, machine-readable format

• Right to object: object to processing based on legitimate interests or for direct marketing

• Right to withdraw consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at haibatperfume@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

7. Cookies

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us improve your experience. We use:

• Essential cookies: necessary for the website to function (e.g. shopping cart, login session)

• Analytics cookies: to understand how visitors interact with the website (e.g. Google Analytics)

• Marketing cookies: to deliver relevant advertising and track campaign performance

You may manage or disable cookies at any time through your browser settings. Disabling certain cookies may affect website functionality.

8. International Data Transfers

Some of our service providers (such as Shopify) may process your data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include SSL encryption, secure payment processing, and access controls.

However, no internet transmission is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Children’s Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a child, please contact us immediately at haibatperfume@gmail.com and we will delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law or our data practices. The latest version will always be available on our website with the updated date shown at the top. Where changes are significant, we will notify you by email or a prominent notice on our website.

12. Contact & Complaints

For any questions about this Privacy Policy or to exercise your data rights, please contact:

Haibat Al Oud — Data Controller

Email: haibatperfume@gmail.com

Address: Calle Girona n7b, Santa Eulalia de Roncana, Barcelona 08187, Spain

Website: www.haibataloudperfume.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es or your local EU supervisory authority.

Haibat Al Oud — haibatperfume@gmail.com — www.haibataloudperfume.com

Calle Girona n7b, Santa Eulalia de Roncana, Barcelona 08187, Spain