Privacy Policy

1. Information We Collect

We collect personal information that you provide directly to us or that is automatically gathered when using our store:

• Order information: Full name, shipping address, billing address, email address, and telephone number.
• Payment details: Payments are processed directly through secure third-party gateways (Stripe, PayPal). We never view or store full credit/debit card numbers.
• Account information: Login email, username, and order history (if you create a customer account).
• Communications: Records and correspondence when you contact us via email, support forms, or chat.
• Technical & Usage data: IP address, browser type, device information, operating system, pages visited, and interaction data collected via cookies and analytics.

2. Legal Basis & How We Use Your Information

We process your data under the following legal bases (GDPR Art. 6):

• Contractual Performance: To fulfill and deliver orders, process payments, and provide order status updates.
• Legitimate Interests: To prevent fraud, secure our site, analyze performance, and improve product offerings.
• Legal Obligation: To maintain accounting records and satisfy statutory tax requirements.
• Consent: To send marketing communications or activate non-essential cookies (you may withdraw consent at any time).

3. Sharing Your Information

We share personal data only with trusted service providers essential for store operations:

• Print-on-Demand Partner (Printful): To fulfill, manufacture, and ship physical products to your address.
• Payment Processors (Stripe, Revolut): To securely process transactions and prevent financial fraud.
• Shipping Carriers: Postal services and couriers to ensure physical order delivery.
• Analytics & Advertising Tools: Google Analytics and Meta Pixel to assess site traffic and optimize campaigns (subject to your consent).
• Legal Authorities: When legally required by law, court order, or to protect our legal rights.

4. Cookies & Tracking Technologies

We use cookies to maintain shopping cart items, remember user preferences, analyze site traffic, and deliver personalized ads. You can manage cookie preferences through your browser settings or via our on-site cookie banner.

5. Your Rights Under GDPR (EU / UK Residents)

If you are located in the European Economic Area (EEA) or United Kingdom, you hold specific rights under the General Data Protection Regulation:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your data when no longer needed for legal or operational reasons.
• Right to Restrict or Object: Object to processing based on legitimate interests or direct marketing.
• Right to Data Portability: Request transfer of your data to another service provider in a structured format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority (such as the Data Protection Commission in Ireland).

6. Your Rights Under CCPA / CPRA & US State Laws (US Residents)

If you are a resident of California or another US state with applicable privacy regulations (e.g., VCDPA, CPA, CTDPA):

• Right to Know & Access: You may request disclosure of personal data categories collected, sources, and third parties shared with.
• Right to Opt-Out of Sale / Sharing: We do not sell your personal data for monetary consideration. We do not share data for cross-context behavioral advertising without consent.
• Right to Non-Discrimination: We will never discriminate against you for exercising any of your privacy rights.

To submit a CCPA/CPRA request or opt out, email us with the subject line “US Privacy Request” at admin@buencamino.store.

7. Data Retention

We retain order transaction records for legal and tax compliance obligations (typically up to 6 years in accordance with Irish revenue regulations). Customer account data remains active until deletion is requested.

8. International Data Transfers & Security

Your information may be processed in countries outside your residence (our primary data center is located in Ireland). Where international transfers occur, we enforce Standard Contractual Clauses (SCCs) to ensure equivalent data protection. We implement SSL encryption and industry safeguards to maintain data security.

9. Third-Party Links

Our website may contain links to third-party platforms. We are not responsible for the privacy policies or practices of external websites.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in legal mandates or store operations. Revisions take effect immediately upon publication on this page.

11. Contact Us

For questions, privacy requests, or exercising your legal rights, please contact our Data Protection point of contact at:

admin@buencamino.store | +353 83 040 2503