Privacy policy

---

PRIVACY POLICY

1. DATA CONTROLLER

Glam Barcelona Carrer del Tenor Viñas, 4-6, Barcelona 08021, Spain Email: mercedes@merfashion.com

---

2. INFORMATION WE COLLECT

We collect personal information such as name, shipping address, email address, and payment information when you place an order or register on our website.

---

3. LEGAL BASIS FOR PROCESSING

We process your personal data on the following legal bases:

• Contract performance: to process and ship your orders.
• Consent: for sending marketing communications.
• Legitimate interest: to improve our products and services.
• Legal obligation: to comply with tax and legal requirements.

---

4. USE OF INFORMATION

We use your information to:

• Process and manage your orders.
• Send you order updates.
• Send you marketing communications, if you have given your consent.
• Improve our products and services.

---

5. DATA RETENTION

We retain your personal data for as long as necessary to fulfil the purposes described in this policy and, in any case, for the legally required periods (minimum 5 years for tax-related data).

---

6. INTERNATIONAL TRANSFERS

Your data may be transferred to service providers outside the European Economic Area, including:

• Shopify Inc. (order processing) — protected by EU Standard Contractual Clauses.
• Shop / Shopify Inc. (order tracking and shopping experience) — protected by EU Standard Contractual Clauses.
• Mailchimp / Intuit Inc. (email marketing) — protected by EU Standard Contractual Clauses.
• Klaviyo Inc. (email marketing and automation) — protected by EU Standard Contractual Clauses.
• PayPal Inc. (payment processing) — protected by EU Standard Contractual Clauses.
• Klarna Bank AB (buy now, pay later services) — European entity based in Sweden, subject to the GDPR.
• Correos (domestic shipping) — Spanish entity, subject to the GDPR.
• FedEx Corporation (international shipping) — protected by EU Standard Contractual Clauses.
• Meta Platforms Inc. (Facebook and Instagram advertising) — protected by EU Standard Contractual Clauses.
• Google LLC (Google Ads and Google Analytics) — protected by EU Standard Contractual Clauses.

---

7. YOUR RIGHTS

Under the GDPR, you have the right to:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data ("right to be forgotten").
• Restriction: request that we limit the processing of your data.
• Portability: receive your data in a structured, commonly used and machine-readable format.
• Objection: object to the processing of your data for marketing purposes.

To exercise these rights, contact us at mercedes@merfashion.com. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

---

8. COOKIES

We use essential cookies (necessary for the website to function) and non-essential cookies (analytics and marketing). Non-essential cookies will only be activated with your explicit consent via our cookie banner.

---

9. THIRD-PARTY LINKS

Our website may contain links to third-party sites. We are not responsible for their privacy practices and recommend that you review their privacy policies.

---

10. POLICY CHANGES

We reserve the right to update this policy at any time. We will notify you of any significant changes by email or through a notice on our website.

---

Last updated: April 2026

---