Your data helps us serve you, not follow you.

1. Controller

Juan Delgado Higueras · Spanish tax ID 77435464F · Huerta Grande 32, Spain · hola@epoxya.store

Information to complete: town and postcode for the controller's address.

2. Data processed

• Orders: name, email, delivery address, products, amount, status, carrier and tracking.
• Optional Google account: Google identifier, name, email and profile picture.
• Support and invoices: information included in your enquiry.
• Guide: email address and preferred language when requested.
• Technical request data needed for security and operation.

3. Why it is used

• Handle payment, prepare, ship and support your order.
• Send confirmation and tracking updates.
• Manage returns, damage, refunds and invoices.
• Show order history if you create an account.
• Answer enquiries and protect the store.
• Send a requested guide.

4. Legal basis

Order data is processed to perform the purchase and meet applicable obligations. The account is created when you request Google sign-in. Guide email data is processed following your request. Technical security relies on the legitimate interest in protecting the service.

5. Providers

• Stripe processes payment and collects required details in Checkout. EPOXYA does not store full card details.
• Resend sends confirmation and transactional email.
• Google is involved only when you choose Google sign-in.
• The database and hosting provider stores information required to operate the shop.

Information to complete: identity and location of the production hosting provider.

6. Retention

• Account sessions expire after 30 days.
• Temporary Google sign-in cookies expire after 10 minutes.
• The cart remains in your browser until purchase, removal or browser-data deletion.
• Orders are kept as needed to manage the purchase and meet legal obligations.
• Account and guide data is kept until deletion is requested unless it must legally be retained.

7. Your rights

You can request access, correction, deletion, objection, restriction or portability by emailing hola@epoxya.store. We may request information to verify your identity.

You may also complain to the Spanish Data Protection Agency if you believe your data was not handled correctly.

8. Payments and transfers

Stripe handles payment details on its platform. Google and Resend may use international infrastructure under their terms and data-protection mechanisms. Review their policies before using those services.

9. Changes

If the store changes, we update this page and its date so you can review current information.