Privacy policy

Privacy policy

This policy explains what personal data we collect when you use this website, why we collect it and what rights you have. It is written to comply with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.

Who is responsible for your data

The data controller is Redline Rugs. You can contact us about anything in this policy at redlinerugs.shop@gmail.com.

What we collect

  • Order data: name, delivery and billing address, email, phone number, and what you bought.
  • Payment data: handled directly by our payment providers. We never see or store your full card number.
  • Technical data: IP address, browser, device and pages visited, collected through cookies and similar technologies.
  • Communications: what you write to us by email, and our replies.

Why we use it and on what legal basis

  • To process and deliver your order — performance of the contract with you.
  • To answer your questions and handle returns — performance of the contract and our legitimate interest in supporting customers.
  • To keep accounting and tax records — legal obligation.
  • To prevent fraud and keep the site secure — our legitimate interest.
  • To send marketing emails — only with your consent, which you can withdraw at any time using the unsubscribe link.
  • Analytics and advertising cookies — only with your consent, given through the cookie banner.

Who we share it with

We share the minimum necessary with: Shopify (our store platform and host), our payment providers, the carrier delivering your parcel, and our fulfilment partner who dispatches the rug. Each acts as a processor under contract. We do not sell your personal data to anyone.

International transfers

Some of these providers process data outside the European Economic Area, including our fulfilment partner in Asia, who receives only the name, address and phone number needed to deliver your parcel. Such transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep it

Order and invoicing data is kept for 6 years as required by Spanish commercial and tax law. Marketing data is kept until you withdraw consent. Analytics data is kept for a maximum of 24 months.

Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, and to data portability. To exercise any of them, email redlinerugs.shop@gmail.com. We will answer within one month.

If you believe we have not handled your data correctly, you may complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Cookies

We use cookies that are strictly necessary for the site to work (shopping cart, session, security) — these do not require consent. We also use analytics and advertising cookies, which are only set if you accept them in the cookie banner. You can change your choice at any time from the cookie settings link.

Changes

If we update this policy we will publish the new version on this page.