Privacy Policy

1. Data controller

The controller of your personal data is Zayra Belle S.L., tax ID B24865462, registered at Calle Dracma 9, 41600 Arahal (Seville), Spain. You can contact us at any time by writing to infolashlet@gmail.com.

We process your data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

2. Data we collect

• Identification and contact details: first name, last name, email address and phone number.
• Delivery and billing details: postal address, city, postcode and country.
• Order details: products, sizes, shades, amounts and purchase history.
• Payment details: handled directly by our payment provider. We never store your full card details.
• Browsing data: IP address, device type and pages visited, only if you accept analytics cookies.

3. Purposes and legal basis

• Managing your order, delivery and returns: performance of the contract.
• Answering your customer service enquiries: performance of the contract or legitimate interest.
• Meeting tax and accounting obligations: compliance with a legal obligation.
• Sending you marketing communications and our newsletter: your consent, which you can withdraw at any time.
• Analysing how the site is used so we can improve it: your consent through the cookie notice.
• Preventing fraudulent orders: the legitimate interest of the company.

4. Who receives your data

We only share your data with providers who deliver services that are necessary to run the store: payment providers, carriers and courier companies, web hosting providers, and analytics and email tools. All of them act as data processors and are bound by contract. We do not sell or pass your data to third parties for advertising purposes.

5. International transfers

Some of our providers may be located outside the European Economic Area. In those cases the transfer relies on adequacy decisions of the European Commission or on standard contractual clauses that guarantee a level of protection equivalent to the European one.

6. Retention periods

We keep your order data for as long as needed to provide the service and, afterwards, for the legal tax and accounting retention periods. Data used for marketing communications is kept until you withdraw your consent.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing, portability and not to be subject to automated decisions at any time by writing to infolashlet@gmail.com and stating which right you wish to exercise.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), based in Madrid, Spain.

8. Cookies

We use our own and third-party cookies. You can see the details and change your choice at any time in our Cookie Policy.

9. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration, including encrypted connections throughout the whole checkout process.

10. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The current version will always be published on this page together with its update date.