Privacy policy

Last updated: August 7, 2026

Privacy Policy

This Privacy Policy explains how personal data is processed when you visit www.renaroque.com, make a purchase, create or use a customer account, communicate with Renaroque, subscribe to marketing communications, interact with review features, or use other features of the store.

The data controller is Pablo González Martín, a natural person and self-employed individual established in Spain, trading under the commercial name Renaroque.

Spanish tax identification number (NIF): 12332833A
Business and postal address: Calle Camino de Cabrerizos 4, 1.º C, 37439 Castellanos de Moriscos, Salamanca, España
Email address: renaroquedesigns@gmail.com
Telephone: +34 651 18 70 63

The address above is not premises open to the public.

People this policy applies to

Depending on the circumstances, this policy may apply to website visitors, customers, order recipients, people who submit inquiries, customer account holders, review authors, email marketing subscribers, and people who purchase or contact Renaroque on behalf of a business or professional.

Personal data we process

Depending on how you interact with the store, we may process the following categories of data:

Identification and contact data: name, email address, billing and shipping address, and telephone number.
Order and transaction data: products viewed or purchased, selected variants, order number and status, amount, returns, cancellations, incidents, and communications related to the purchase.
Limited payment data: selected payment method, amount, payment status, confirmations, and transaction identifiers. Full card details or other financial credentials are processed primarily by the relevant payment providers and are not ordinarily accessible to Renaroque.
Account data: information required to create and manage a customer account and its associated preferences. Renaroque does not use customer passwords as its own commercial data.
Billing data: information required to issue and retain invoices and comply with tax and accounting obligations.
Delivery and logistics data: recipient name, delivery address, telephone number, tracking information, and data relating to shipping incidents.
Communications: the content of inquiries, requests, complaints, and other messages sent to Renaroque.
Marketing data: email address, subscription status, consent, and unsubscribe status for marketing communications.
Review data: data required to request, verify, manage, or publish a review, such as name or display name, email address, related product or order, rating, and content submitted by the author.
Technical and usage data: IP address, device and browser type, technical identifiers, browsing information, interactions with the website, and data associated with cookies or similar technologies, to the extent processed by Shopify or active integrations.

Where the data comes from

Data may come:

directly from you, when you make a purchase, create an account, subscribe, contact Renaroque, or submit a review;
automatically, when you use the website, through Shopify and the applicable cookies or similar technologies;
from Shopify and the providers used for payments, logistics, reviews, analytics, or measurement, when they provide Renaroque with information necessary regarding a transaction, delivery, interaction, or incident;
from the purchaser, when they designate another person as the recipient of an order. In that case, the name, address, telephone number, and other data strictly necessary to make the delivery and resolve logistics incidents may be processed.

Recipient data provided by another person

If you receive a Renaroque order as the recipient without having made the purchase yourself, your data was provided by the purchaser to manage delivery. Renaroque uses it only to prepare, transport, and deliver the order and to resolve related incidents. The rights set out in this Privacy Policy also apply to these individuals.

Required data and consequences of not providing it

Data marked as required during the purchase process is necessary to process the order.

For physical orders, the purchaser's telephone number is required to arrange transportation, manage delivery, and resolve logistics incidents. If it is not provided, checkout does not allow the order to be completed. The telephone number is not used for telephone or SMS marketing without an independent legal basis.

Subscription to email marketing is voluntary and is not a condition of making a purchase.

Purposes and legal bases

Purpose	Legal basis
Responding to inquiries directly related to a potential purchase or preparing a transaction requested by you	Pre-contractual measures, Article 6(1)(b) GDPR
Responding to general inquiries not connected with entering into a contract	Renaroque's legitimate interest in responding to communications received and properly managing its relationship with people who contact it, Article 6(1)(f) GDPR
Creating and managing a customer account when requested	Performance of the relationship requested by the customer, Article 6(1)(b) GDPR
Managing orders, payments, manufacturing, delivery, changes, cancellations, returns, and incidents in relation to the purchaser	Performance of the contract, Article 6(1)(b) GDPR
Managing delivery when the recipient is a person other than the purchaser	The legitimate interests of Renaroque and the purchaser in carrying out the delivery designated by the latter, Article 6(1)(f) GDPR, limited to the data necessary for that purpose
Using the purchaser's required telephone number to arrange and manage transportation	Performance of the contract, Article 6(1)(b) GDPR
Issuing invoices, keeping accounts, and complying with tax, administrative, or other legally required obligations	Compliance with legal obligations, Article 6(1)(c) GDPR
Preventing fraud, abusive use, and unauthorized access and protecting the security of the store and transactions	Legitimate interest in protecting the business, the store, and its customers, Article 6(1)(f) GDPR, without prejudice to any legal obligations that may apply
Bringing or defending claims and retaining the information necessary for that purpose	Legitimate interest in the defense of rights and legitimate interests, Article 6(1)(f) GDPR, and compliance with legal obligations where applicable
Sending newsletters, updates, and promotions through Shopify Email	Consent, Article 6(1)(a) GDPR
Using non-essential analytics, personalization, or marketing technologies where consent is required	Consent, Article 6(1)(a) GDPR, together with the applicable rules on cookies and similar technologies
Sending purchase-related review requests through Judge.me, provided they remain requests for feedback and do not include promotional content	Renaroque's legitimate interest in learning about the purchaser's experience and maintaining a system of verifiable reviews, Article 6(1)(f) GDPR, with the possibility to object or unsubscribe
Publishing and managing a review voluntarily submitted for that purpose	Consent expressed by submitting the review for publication, Article 6(1)(a) GDPR

Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Shopify and Shopify Network Intelligence

The store is hosted and operates using Shopify technology. Shopify processes personal data to provide the platform, checkout, customer accounts, order management, certain payment services, privacy tools, and other functions necessary to operate the store.

Renaroque has Shopify Network Intelligence enabled. Shopify states that this feature may use data from customers' interactions with this store, other merchants, and Shopify to generate information that enables advanced features or “Enhanced Services”, such as product improvements, personalization, performance, and support for certain marketing functions.

For certain processing carried out by Shopify for its own purposes or Enhanced Services, Shopify directly determines how it uses that data and provides consumers with its own rights and choices. You can review the Shopify Consumer Privacy Policy and manage certain choices through the Shopify Privacy Portal.

Shopify states that, where the consent rules of the EEA, United Kingdom, or Switzerland apply, the use of data for certain Enhanced Services, including advertising based on activity with this store, other merchants, and Shopify, must respect the user's choice and allow withdrawal. When Shopify privacy tools or compatible integrations transmit a consent or objection choice, Shopify states that it applies that choice to Shopify Network Intelligence in the circumstances described by the provider itself.

Email marketing

Renaroque uses Shopify Email to send newsletters, updates, and promotional communications to people who have subscribed.

The marketing checkbox at checkout is not preselected. Subscription requires an affirmative action. You may unsubscribe at any time using the link included in the emails or by contacting Renaroque.

Communications necessary to process an order, provide information about its status, respond to inquiries, or manage an incident are not considered newsletters and may continue to be sent even if you have unsubscribed from marketing.

Reviews and Judge.me

Renaroque uses Judge.me to manage requests for and publication of product and store reviews.

For this purpose, purchase- and customer-related data may be shared with Judge.me, such as name, email address, purchased product, order information, and review data. Judge.me states that, depending on the features used, it may also process technical data and events associated with its emails or forms.

The review requests used by Renaroque are linked to a purchase and allow recipients to object to future requests through the unsubscribe mechanism included in them.

When a person interacts directly with Judge.me's own services, such as certain forms or reviewer profiles, Judge.me may process certain data for its own purposes in accordance with its Privacy Policy.

Analytics, Google, and Pinterest

Google & YouTube

Renaroque uses Shopify's Google & YouTube integration for Google Merchant Center, Google Analytics, and conversion measurement. These features may involve the processing of technical information, browsing data, product interactions, and conversion-related data, depending on the feature used and the applicable privacy preferences.

In regions subject to consent, these features are used in accordance with the privacy preferences transmitted by Shopify. You can review the Google Privacy Policy.

Renaroque uses Pinterest to synchronize the catalog, publish Product Pins, and measure interactions through Pinterest Tag and the Conversions API. These features may process information about browsing, interactions with products, and conversions.

Pinterest's Marketing and Analytics features are subject to the applicable privacy preferences and, where consent is required, are used in accordance with the choice made by the user. You can review the Pinterest Privacy Policy.

Cookies and similar technologies

The store uses cookies and similar technologies for necessary functions, preferences, analytics, and, where applicable, marketing.

In regions where Shopify displays the consent banner, the non-essential categories of Personalization, Marketing, and Analytics are initially presented as unchecked. You may accept, reject, or configure these categories and later change your choice through the cookie preferences available in the store.

Strictly necessary technologies may be used without consent to provide a service expressly requested, maintain essential functions of the purchasing process, or ensure the operation and technical security of the store. Where they also involve the processing of personal data, the legal basis under the GDPR will depend on the specific purpose, principally the performance of measures requested by the user or the legitimate interest in maintaining a secure and operational service.

Non-essential technologies are used in accordance with the consent choice where consent is required. Integrations compatible with Shopify's Customer Privacy API may receive the preferences selected by the user.

Recipients and providers

Data is shared only to the extent necessary for the purposes described. The main categories of recipients are:

Shopify and its authorized providers, to host and operate the store, manage checkout, accounts, orders, privacy, Shopify Email, and other platform functions.
Payment providers, according to the method selected by the customer, to authorize and process payment, manage refunds, and prevent fraud. Available methods may include Shopify Payments, PayPal, Shop Pay, Apple Pay, Google Pay, and other local methods enabled by Shopify depending on the country.
Carriers and postal networks used for each shipment, which receive the data necessary to accept, transport, deliver, and manage incidents, principally name, address, telephone number, and shipment data.
Judge.me, for the review functions described above.
Google, for Merchant Center, Google Analytics, and conversion measurement on the terms indicated.
Pinterest, for the catalog, Product Pins, and measurement through the active features indicated.
Public administrations, authorities, courts, or tribunals, where there is a legal obligation or a legally valid request.

International transfers

Some technology providers may process data from countries outside the European Economic Area or allow international access to their systems. The fact that Shopify displays the European Union as the storage location does not mean that all access to or processing by all providers takes place exclusively within the EEA.

Where an international transfer takes place, the applicable safeguard depends on the provider, the country, and the specific data flow. Depending on the circumstances, it may consist of a European Commission adequacy decision, Standard Contractual Clauses, or another mechanism permitted by applicable law.

Shopify states in its Data Processing Addendum that data may be transferred to and processed in countries where Shopify, its affiliated entities, or its service providers are located, and identifies Canada and Singapore among them. Judge.me, Google, and Pinterest also publish information about their own processing and transfers. The specific safeguards that apply depend on the provider, service, data flow, and destination country.

You may request additional information about the safeguards applicable to a specific processing activity by writing to renaroquedesigns@gmail.com.

Data retention

Data is retained only for as long as necessary for the relevant purpose and to comply with legal obligations or address potential liabilities.

In particular:

Inquiries and communications: for the time necessary to respond to them and, afterward, for as long as reasonably necessary to demonstrate how they were handled or address potential liabilities.
Orders, billing, and commercial documentation: for the duration of the contractual relationship and the legally required periods. Commercial documentation related to the business may be retained for six years, without prejudice to tax, limitation, or other applicable periods or obligations.
Customer account: while it remains active and, afterward, for the time necessary to manage pending requests and retain order documentation that must be kept by law.
Email marketing: until you withdraw consent or unsubscribe. The minimum information necessary to demonstrate consent, unsubscription, or objection may be retained for as long as necessary to demonstrate compliance with these obligations.
Reviews: for as long as they remain published or until deletion is appropriate, without prejudice to data that the provider must retain under its own obligations when acting for its own purposes.
Privacy preferences and cookies: for the time necessary to remember and respect the choice made and, where appropriate, demonstrate consent or objection.
Security and claims: for the time strictly necessary to investigate incidents, prevent abuse, or bring or defend claims, in accordance with the applicable periods.

When the relevant period ends, the data is deleted, anonymized, or blocked where required by law.

Data protection rights

Where the GDPR applies, you may exercise the following rights:

access, to find out whether Renaroque processes your data and obtain information about and a copy of it;
rectification, to correct inaccurate or incomplete data;
erasure, where applicable;
objection, particularly to processing based on legitimate interests and to direct marketing;
restriction of processing, in the circumstances provided by law;
data portability, where processing is based on consent or contract and is carried out by automated means;
withdrawal of consent, at any time in relation to processing based on consent.

You may exercise these rights free of charge by writing to renaroquedesigns@gmail.com. To avoid disclosing data to someone other than the data subject, Renaroque may request information reasonably necessary to verify identity where there are justified doubts.

Requests will be handled within the legally established time limits, generally within one month, without prejudice to extensions permitted by law where the request is particularly complex or there are numerous requests.

You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) if you believe that the processing of your data infringes applicable law.

Privacy choices for United States residents

Certain U.S. state laws use concepts such as “sale”, “sharing”, or “targeted advertising” and may recognize specific rights when their applicability requirements are met.

Where one of those laws applies, you may use the store's [privacy choices]() to opt out, where applicable, of the sale or sharing of data or targeted advertising. Shopify may also recognize the Global Privacy Control (GPC) signal in the circumstances and regions where applicable.

The technical existence of this page or of territorial options in Shopify does not mean that all state laws displayed by the platform necessarily apply to Renaroque.

For certain forms of processing carried out directly by Shopify, you may also use the Shopify Privacy Portal.

Automated decision-making and fraud prevention

Renaroque does not make decisions based solely on automated processing that produce legal effects concerning the customer or similarly significantly affect them.

Shopify and payment providers may generate automated risk or fraud indicators. Renaroque reviews the available information about the order before processing it and does not assign the final contractual decision to its own algorithm.

Security

Processing is carried out through Shopify and other specialized providers used to operate the store. No transmission or storage system can guarantee absolute security.

Do not send full card details, passwords, or other financial or particularly sensitive information by email where it is not necessary to resolve an inquiry.

Minors

The store and its products are not specifically directed at minors. Renaroque does not seek to deliberately collect personal data from minors for purposes independent of a legitimate purchase or contact.

If a parent or legal guardian believes that a minor has improperly provided personal data, they may request its review or deletion through renaroquedesigns@gmail.com.

Third-party links and services

The website may include links to or features from external services. When you leave the store or interact directly with a third-party service, any processing carried out by that third party for its own purposes is governed by its own privacy policy. This Privacy Policy does not replace the terms of those third parties.

Changes to this policy

This Privacy Policy may be updated when Renaroque's operations, the providers used, or the applicable legal obligations change. The current version will be published on this page together with the corresponding update date.

Contact

For any privacy-related inquiry or to exercise your rights, you can contact:

Pablo González Martín — Renaroque
Calle Camino de Cabrerizos 4, 1.º C
37439 Castellanos de Moriscos, Salamanca, España
Email address: renaroquedesigns@gmail.com
Telephone: +34 651 18 70 63