Privacy policy
Last updated: 29 October 2026
Privacy Policy
1. Data controller
Controller: Leonardo Lorenzo Sánchez (trading name: CamisetasDePeliculas.com)
Tax ID (NIF): 46755516N
Address: Calle Zacatín 7, 18001 Granada (Spain)
Email: camisetasdepeliculas@gmail.com
2. What data we process
Depending on how you use the store, we may process the following data:
- Contact and shipping details: name, shipping and billing address, email and phone number.
- Order details: products purchased, amounts, dates, returns, exchanges and cancellations.
- Payment details: payment method and payment confirmation. We do not have access to your full card number, as payments are handled directly by Shopify Payments and PayPal.
- Communications: the information you provide when you contact us.
- Browsing data: IP address, device and browser type, and how you use the website. Non-necessary cookies are only used if you give your consent.
The data marked as mandatory during checkout is required to process your order. If you do not provide it, we will not be able to complete your order.
3. Why we use your data and on what legal basis
- Processing your order: processing payment, producing and shipping the product, and handling returns, exchanges, cancellations and warranty claims. Legal basis: performance of the sales contract.
- Complying with legal obligations: invoicing, accounting and tax obligations, and responding to requests from authorities. Legal basis: compliance with legal obligations.
- Responding to your enquiries: replying to the messages you send us. Legal basis: our legitimate interest in assisting you or, if the enquiry relates to an order, performance of the contract.
- Preventing fraud and keeping the store secure. Legal basis: our legitimate interest in protecting the store and our customers.
- Analysing website usage to improve it. Legal basis: your consent, which you can withdraw at any time through the cookie banner.
We do not make automated decisions that produce legal effects concerning you, nor do we carry out profiling for that purpose.
4. How long we keep your data
- Order and billing data: for the duration of the contractual relationship and, afterwards, for the periods required by law. This is generally 6 years for accounting records, and it may be longer while any claims remain possible.
- Enquiries: for as long as necessary to resolve them and, afterwards, for the limitation period of any resulting liabilities.
- Browsing data: as set out in our Cookie Policy.
Once these periods have expired, the data is deleted or anonymised.
5. Who we share your data with
We only share your data when necessary to provide our service or when required by law:
- Shopify, the platform that hosts the store and manages orders.
- Payment providers (Shopify Payments and PayPal), to process payments. PayPal processes your data as an independent controller in accordance with its own privacy policy.
- Carriers (Correos and, where applicable, the postal operators of the destination country), to deliver your order.
- Customs authorities, for shipments outside the European Union, to declare the goods.
- Public authorities, courts and tribunals, where there is a legal obligation.
We do not sell your data to third parties.
6. International transfers
Some of our providers, such as Shopify and PayPal, may process data outside the European Economic Area. In such cases, transfers are based on adequacy decisions of the European Commission or on standard contractual clauses approved by the Commission.
If your order is shipped to a country outside the European Economic Area, we will share your shipping details with the carrier and the customs authorities of that country. This is necessary to perform the sales contract.
7. Relationship with Shopify
Shopify hosts the store and processes your data on our behalf to provide our service. In addition, Shopify may use certain data from your interaction with the store for its own purposes, such as security and fraud prevention. In that case, Shopify acts as the controller of that processing. You can find more information and exercise your rights with Shopify through its Privacy Portal: https://privacy.shopify.com/en
8. Your rights
You may exercise the following rights at any time:
- Access: find out what data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data when it is no longer necessary.
- Objection: object to processing based on our legitimate interest.
- Restriction of processing: ask us to restrict the use of your data in certain cases.
- Portability: receive your data in a structured, commonly used format.
- Withdrawal of consent, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise these rights, email us at camisetasdepeliculas@gmail.com stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you for additional information to verify it. We will respond within one month at most, which may be extended in the cases provided for by law.
9. Complaints
If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es), C/ Jorge Juan 6, 28001 Madrid, or with the data protection authority of your country of residence. We would appreciate it if you contacted us first so we can try to resolve the issue.
10. Minors
You must be of legal age to make a purchase in the store. We do not knowingly collect data from children under 14. If you are a parent or guardian and believe that a minor has provided us with their data, please contact us and we will delete it.
11. Security
We apply reasonable technical and organisational measures to protect your data against loss, unauthorised access or misuse. However, no system is completely infallible.
12. Cookies
You can find out how we use cookies in our Cookie Policy.
13. Changes to this policy
We may update this policy to reflect legal changes or changes in the way we work. We will publish the updated version on this page with its last updated date.