This page says what personal data Acacia Supplies collects on acaciasupplies.com, why, who else handles it and what you can do about it. It follows the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Who is responsible
202 Acacia Trade BCN S.L., tax ID B44791994, trading as Acacia Supplies. Email: info@acaciasupplies.com. Registered office and company details are on the Legal notice. We have no data protection officer; the law does not require one for a company of this size and activity.
What we collect
- Notice list. Your email address when you ask to hear about a Supply or an object, the box you ticked to allow it, and what you asked about.
- Orders and account. Name, email, delivery address, phone number if you give one, what you ordered, when, and the payment confirmation. We never see your card number: it goes to the payment provider. If you sign in to your account, the code we send to your email and the orders listed there.
- Messages. What you write to us by email and the address you write from.
- Technical. IP address, browser and device, pages requested and the cookies on the Cookies page.
We do not ask for anything else and we do not buy data about you from anyone.
Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Send you a message when the Supply or the object you asked about opens. | Your consent (art. 6.1.a GDPR). You can withdraw it at any time. |
| Take, pack, ship and invoice your order; answer about it afterwards. | The contract with you (art. 6.1.b GDPR). |
| Keep invoices and accounting records. | Legal obligation (art. 6.1.c GDPR; Spanish tax and commercial law). |
| Run your account and show you your orders. | The contract with you (art. 6.1.b GDPR). |
| Answer your questions. | Steps taken at your request (art. 6.1.b GDPR). |
| Run and secure the website; prevent fraud. | Our legitimate interest in a working, secure website (art. 6.1.f GDPR). |
| Count visits and see which pages are read, with analytics cookies. | Your consent (art. 6.1.a GDPR), given in the cookie banner. Without it, no analytics cookie is set. |
Who else processes it
These companies process data on our behalf, under a data processing agreement, and only for the purpose stated:
- Shopify International Limited (Ireland): the website, the cart and the checkout, your account, the notice list and the emails we send you through Shopify Email. Card, Apple Pay, Google Pay and Shop Pay payments go through Shopify Payments.
- Mollie B.V. (Netherlands): iDEAL, Bancontact and Klarna payments.
- Klarna Bank AB (Sweden): if you pay with Klarna, Klarna processes your data as a controller under its own privacy notice, which it shows you before you confirm.
- PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg): if you pay with PayPal, under its own privacy notice.
- The carrier named in your shipping email (we ship from Barcelona with carriers based in the EU): name, address and phone number, to deliver the parcel and to tell you where it is.
- Google Ireland Limited (Google Analytics 4): visit statistics, only if you accept analytics cookies in the banner.
We do not sell your data and we do not share it for advertising.
Transfers outside the EU
Shopify may process data in Canada, which the European Commission recognises as providing adequate protection, and in the United States, under the EU–US Data Privacy Framework and the standard contractual clauses of the European Commission. Google Ireland may transfer analytics data to the United States under the same framework. Nothing is transferred to any other country.
How long we keep it
- Notice list: until you unsubscribe or ask us to delete it.
- Orders, invoices and account: six years after the order, which is what Spanish commercial and tax law requires us to keep.
- Messages: for as long as needed to answer, and at most 12 months afterwards.
- Technical logs: the time Shopify keeps them to run and secure the service.
Your rights
You can ask us to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to info@acaciasupplies.com from the address we hold; if we cannot tell it is you, we may ask for more. Where we rely on your consent, you can withdraw it at any time, with the unsubscribe link in any email or by writing to us; withdrawing it does not affect anything done before.
If you think we have not handled your data properly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at aepd.es.
Fonts and third parties
The website serves its own fonts and loads nothing from Google for typography. The only third parties that receive data from this website are the ones listed above.
Cookies
Which cookies the website sets, what each one does and how to change your choice: Cookies.
Children
This website is not directed at people under 14 and we do not knowingly collect their data.
Changes
If this page changes, the date at the top changes with it.