Privacy policy
# Privacy Policy
**Last Updated:** July 29, 2026
At **Serva Beauty**, we value your privacy and are committed to protecting your personal data in compliance with the **General Data Protection Regulation (GDPR - EU 2016/679)**, Spain's **LOPDGDD (Organic Law 3/2018)**, and applicable e-commerce regulations.
This Privacy Policy explains how we collect, use, process, and disclose your personal information when you visit, make a purchase, or interact with our Shopify storefront.
---
### 1. Data Controller
* **Trade Name:** Serva Beauty
* **Contact Email:** servabeauty@gmail.com
* **Business Purpose:** E-commerce retail of beauty and personal care products.
---
### 2. Personal Data We Collect
We may collect and process the following categories of personal information:
* **Contact & Identification Data:** Full name, shipping address, billing address, phone number, and email address.
* **Financial & Transactional Data:** Payment method details (credit/debit card, Cash on Delivery preferences), payment confirmation details, order history, and refund records.
* **Technical & Usage Data:** IP address, device identifiers, browser type, navigation behavior, and interaction logs collected via cookies and tracking technologies.
* **Customer Communications:** Correspondence and support logs when reaching out to us.
---
### 3. Legal Basis for Data Processing
Under the GDPR, we process your personal data based on the following legal grounds:
1. **Performance of a Contract (Art. 6.1.b GDPR):** To fulfill orders, arrange shipping, manage payments (including Cash-on-Delivery collection), and deliver customer care.
2. **Legal Obligation (Art. 6.1.c GDPR):** To comply with tax, accounting, and consumer protection laws applicable in Spain and the EU.
3. **Legitimate Interests (Art. 6.1.f GDPR):** To prevent fraud, secure our platform, and continuously improve our products and services.
4. **Consent (Art. 6.1.a GDPR):** For marketing communications or newsletters, which you can opt out of at any time.
---
### 4. Data Sharing & Processors
We do not sell your personal data. To provide our e-commerce services, we share necessary data with authorized Data Processors under strict confidentiality:
* **Shopify Inc.:** Storefront hosting, checkout infrastructure, and data analytics.
* **Digital Trending Group LLC (Dropi PRO):** Logistics platform utilized for order management, fulfillment, and synchronization with product suppliers.
* **Logistics & Courier Carriers:** Local shipping couriers responsible for delivering your package and collecting Cash-on-Delivery payments where applicable.
* **Tax & Public Authorities:** When required by applicable law or judicial order (e.g., the Spanish Tax Authority - AEAT).
---
### 5. International Data Transfers
As our technology infrastructure relies on global service providers like Shopify and systems associated with Dropi PRO, your personal data may be stored or transferred outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are implemented, such as the European Commission’s **Standard Contractual Clauses (SCCs)**.
---
### 6. Data Retention
We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal, tax, and regulatory requirements (Spanish tax law requires business records to be retained for 4 to 6 years). Afterwards, data is securely erased or anonymized.
---
### 7. Your Statutory GDPR Rights
If you are a resident of Spain or the European Union, you hold the following rights:
* **Right of Access:** Request details of the personal data we hold about you.
* **Right to Rectification:** Request correction of inaccurate or incomplete data.
* **Right to Erasure ("Right to be Forgotten"):** Request deletion of data when it is no longer required.
* **Right to Restrict or Object:** Limit or object to certain processing activities.
* **Right to Data Portability:** Obtain a copy of your personal data in a structured, machine-readable format.
* **Right to Withdraw Consent:** Revoke marketing consent at any time.
To exercise these rights, please contact us at **servabeauty@gmail.com**.
You also have the right to lodge a complaint with Spain's data protection supervisory authority: **Agencia Española de Protección de Datos (AEPD)** at [www.aepd.es](https://www.aepd.es).
---
### 8. Changes to This Policy
We may update this Privacy Policy to reflect changes in legal requirements or operational practices. Updates will be published directly on this page with an updated "Last Updated" date.
---
### 9. Contact Us
For any questions or privacy-related inquiries, please email us at **servabeauty@gmail.com**.