1) Data Controller (who is responsible)
Black Rainbow Caps (Tax ID: Y3979321J) Carretera Tías-Macher – 35571 Tías (Las Palmas), Spain Email: privacy@blackrainbowcaps.com
2) What personal data we collect
Depending on how you use the website, we may collect:
- Identity & contact data: name, email, shipping/billing address, phone number (if provided)
- Account data: username and password (if you create an account)
- Order data: products purchased, order number, order notes, returns/refunds information
- Payment status data: confirmation that a payment was authorised/paid/refunded (we do not store full card details)
- Customer support data: messages you send us and our replies
- Technical & usage data: IP address, device/browser info, pages viewed, approximate location, and interactions (mainly via cookies)
3) Why we use your data (purposes)
We process personal data to:
- Create and manage customer accounts (optional)
- Process orders, payments, shipping, returns, and refunds
- Provide customer support and order-related communications
- Prevent fraud and keep the website secure
- Measure and improve website performance (analytics cookies only if you consent)
4) Legal bases for processing
We rely on:
- Contract performance: to sell and deliver products, manage returns/refunds
- Legal obligation: accounting/tax and consumer-law compliance
- Legitimate interests: fraud prevention, website security, service improvement
- Consent: for analytics cookies (Google Analytics)
5) Who we share data with (recipients / processors)
We share data only when necessary to run the store and deliver orders, including:
- WooCommerce / WordPress service providers and plugins required to operate the store
- WooPayments (card payment processing). We do not receive or store full card details.
- Fulfilment and shipping partners to produce and deliver your order:
- EU & UK orders: fulfilled/shipped from Latvia
- All other destinations: fulfilled/shipped from the United States
- Hosting, security, and IT providers supporting the website
Some providers may be located outside the European Economic Area. Where international transfers occur, we apply appropriate safeguards required by data protection law.
6) How long we keep your data
We keep personal data only for as long as needed:
- Orders/invoices: for the period required by applicable tax and accounting laws
- Account data: until you delete your account or request deletion (subject to legal retention)
- Support communications: as long as necessary to resolve the request and for reasonable follow-up
- Analytics data: according to the retention settings configured in Google Analytics and/or our cookie tool
7) Your rights
You may have the right to access, rectify, erase, object, restrict processing, and request portability of your data, as applicable.
To exercise your rights, contact privacy@blackrainbowcaps.com .
You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD).
8) Cookies
Cookies are small files stored on your device. We use:
- Strictly necessary cookies (always active): required for core website functions (e.g., security, shopping cart, checkout)
- Analytics cookies (optional): to measure traffic and improve the website
9) Google Analytics
If you accept analytics cookies, we use Google Analytics to understand how visitors use the website (e.g., pages visited, approximate location, device information). This helps us improve content and user experience.
Analytics cookies will not be placed and Google Analytics will not run unless you provide consent through the cookie banner/settings.
10) Managing cookie preferences
On your first visit you can accept, reject, or configure cookies via the cookie banner. You can change your preferences at any time using the Cookie settings link on the website (typically in the footer).