Privacy

• Orders: your name, email, phone, delivery address and what you bought, to take payment, deliver your order and send related emails (such as dispatch and set-up help). Legal basis: performing our contract with you.
• Accounting: order and invoice records, kept as tax law requires.
• Survey: if you answer the optional questions after buying, your answers are kept with your order to improve our kits and, if you’re on our email list, to tailor what we send you. Legal basis: legitimate interest; every question is optional.
• Newsletter: your email, only if you opt in. You can unsubscribe at any time from any email. Legal basis: consent.
• Advertising measurement: if you accept cookies, the Meta pixel records visits and purchases so we can measure our ads; for purchases we also send Meta a scrambled (hashed) version of your contact details. Legal basis: consent, which you can withdraw on our Cookies page.
• Designs you save in the Coaster Designer stay on your own device. We don’t receive them.

Only the services that run the shop for us, under contracts that protect your data: Stripe (payments), Sendcloud and the delivery company (shipping), MailerLite (email), Vercel (website hosting), Supabase (our order database), Resend (order emails) and, with your consent, Meta (ad measurement). Some of these process data outside the EU or UK under approved safeguards such as the EU Standard Contractual Clauses.

Order records for as long as tax law requires (currently up to six years in Spain). Newsletter data until you unsubscribe.

You can ask to see, correct, delete or move your data, object to or restrict how we use it, and withdraw consent at any time, by emailing info@alhambramosaic.com. If you’re unhappy with how we handle your data, you can complain to the Spanish data protection authority (AEPD, aepd.es) or, in the UK, the ICO (ico.org.uk).