Legal

Privacy policy

1. Who is responsible for processing your data? The controller is Straw Hat Brand SL, with tax ID (CIF) B22822043 and registered address at Calle Fernández de la Hoz, 3, 28010 Madrid, Spain. Contact email: support@strawhatbrand.com. Website: www.strawhatbrand.com.

2. What personal data do we collect? When you make a purchase, subscribe to the drop list, contact us or browse the site, we may collect: first and last name, shipping and billing address, email address and phone number, payment information (protected and processed directly by the secure payment gateway, without us storing your card details), and technical browsing data (cookies, IP address, device type).

3. What do we use your data for? To process your orders and manage their shipping, send you communications related to your purchase (confirmation, tracking), respond to your enquiries or contact requests, send you news about new drops if you have voluntarily subscribed to the list, and comply with our legal and tax obligations (invoicing, accounting). We never sell your data to third parties.

4. Legal basis for processing: performance of the sales contract when you place an order, your express consent when you subscribe to the drop list or write to us, and compliance with the legal obligations applicable to us.

5. How long do we keep your data? Only for as long as necessary to fulfil the purpose for which it was collected, or for the period required by applicable tax and accounting regulations.

6. Who do we share your data with? Only with the providers necessary to deliver the service: secure payment platforms (such as Stripe or PayPal), courier and logistics companies that deliver your order, the platform hosting this website (Wix.com), and analytics tools when active on the site. Always for the sole purpose of providing the service and in compliance with applicable law.

7. What rights do you have over your data? You have the right to access your personal data, rectify inaccurate data, request its erasure, object to processing or request its restriction, and port your data to another provider. You can exercise these rights by writing to support@strawhatbrand.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe we have not handled your data correctly.

8. Cookie policy: we use technical cookies necessary for the website to function and, where applicable, analytics and marketing cookies to understand how the site is used and improve your experience. You can manage your preferences from the site's own cookie notice.

9. Data security: we apply reasonable technical and organisational measures to guarantee the security, integrity and confidentiality of your personal data.

10. Changes to this policy: we reserve the right to modify this Privacy Policy at any time. If any significant change occurs, we will notify you through this same page.