Legal

Privacy policy.

What data of yours we use, what for, who it’s shared with and how you exercise your rights.

Last updated: 16 October 2026

This English version is provided for convenience. If it differs from the Spanish version, the Spanish version prevails.

Controller

The data controller is the owner of Mablow (Mablow). Full details in the legal notice. For any privacy matter, email [email protected].

What data we use and what for

  • When you buy: name, email, delivery and billing address, phone number if you give it and the order details, to manage the order, deliver it to you, handle the guarantee and issue the invoice. Legal basis: the contract you make with us and our legal invoicing obligations.
  • When you write to us: your email, your name and what you tell us, to reply to you. Legal basis: your own request.
  • When you browse: the server logs technical data (IP address, browser, page requested) so the website works and to protect it from attacks. Legal basis: our legitimate interest in the website’s security.

We don’t sell your data, we don’t send you advertising without your consent and we don’t make automated decisions about you. Your card details are handled only by the payment gateway; we never see them.

Who else processes your data

  • Shopify (Shopify International Ltd., Ireland): shop platform, payments and customer accounts.
  • Cloudflare (Cloudflare, Inc.): hosting and security for this website.
  • Google (Gmail): the customer service email.
  • Suppliers and carriers for physical products: they receive only the delivery name, address and phone number to prepare and ship your order.

Some of them may process data outside the European Economic Area. Cloudflare and Google do so with the safeguards of the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. If a product is shipped by a supplier outside the European Economic Area, it receives only the delivery details, because this is necessary to fulfil your order (Article 49(1)(b) GDPR).

How long we keep it

Order data, for as long as the relationship lasts and then for the periods required by law (for example, 6 years for accounting records). Messages, for the time needed to resolve your query. Technical server logs, only a few days.

Your rights

You can ask to access your data, correct it, delete it, object to its use, restrict it or take it to another service. Email [email protected] stating which right you want to exercise; we’ll reply within one month at most. If you believe we haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Minors

The shop is aimed at adults. We don’t knowingly process data of children under 14.