Privacy policy

Last updated: July 12, 2026

This is Pepa manages this store and website, including the data, content, features, tools, products, and services to provide you with a personalized shopping experience (the "Services"). To do this, I use Shopify technology, which allows me to operate the store and provide these Services.

In this Privacy Policy, I explain how I collect, use, and, when necessary, share your personal information when you visit the website, make a purchase or any other transaction, or contact me through any other means. In the event of any conflict between the Terms of Service and this Privacy Policy, this Privacy Policy will prevail with respect to the collection, processing, and disclosure of your personal information.

I encourage you to read this Privacy Policy carefully. By accessing or using any of the Services, you confirm that you have read and understood how I collect, use, and share your personal information in accordance with this Privacy Policy.

Personal Information I Collect or Process

When I refer to "personal information" in this Privacy Policy, I mean any data that can be used to identify you or reasonably link you or another person.

Information collected anonymously or anonymized so that it can no longer be used to identify you is not considered personal information.

Depending on how you interact with the website, where you live, and applicable law, I may collect or process the following categories of personal information, including any inferences that can be drawn from it:

  • Contact information, such as your name, address, billing address, shipping address, telephone number, and email address.
  • Financial information, such as the data necessary to process payments, including credit or debit card information, transaction details, the payment method used, payment confirmation, and any other information related to the purchase process.
  • Your account information, such as your username, password, security questions, preferences, or settings, where applicable.
  • Information about your orders and transactions, including the products you view, add to your cart, save to your wish list, purchase, return, exchange, or cancel, as well as your order history.
  • Communications with me, including the information you share when you contact me by email or through any other means to ask a question, request assistance, or report an issue related to an order.
  • Information about your device, such as the type of device you use, your browser, network connection, IP address, and other technical identifiers necessary for the website to function.
  • Information about your website usage, that is, data related to how you browse and interact with the Services, such as the pages you visit, when you access them, or how you use the online store.

Sources of Personal Information

I may collect your personal information in different ways, depending on how you interact with my website and the Services.

Specifically, I may obtain it:

  • Directly from you, when you place an order, create an account, visit the website, contact me, or choose to provide me with your personal information through any other means.
  • Automatically, while you browse the website or use the Services, through information provided by your device, as well as through cookies and similar technologies that allow us to improve the website's functionality and understand how it is used.
  • Through service providers I work with to offer you certain features or manage the online store. These providers may collect or process personal information on my behalf when necessary to provide their services.
  • Through partners or third parties, when permitted by applicable law or necessary for the provision of the Services.

How I Use Your Personal Information

Depending on how you interact with me and the Services you use, I may use your personal information for the following purposes:

Providing, Personalizing, and Improving the Services

I use your personal information to properly manage the store and provide you with the Services you request. This includes processing your payments, preparing and managing your orders, arranging shipments, handling returns or exchanges where applicable, maintaining your account if you choose to create one, remembering your preferences, and providing you with a more personalized shopping experience, for example, by showing you products related to your interests or previous purchases. I may also use this information to further improve the website and the Services.

Marketing and Advertising

Where permitted by law or with your consent, I may use your personal information to send you marketing communications, news, or promotions via email or other means, as well as to show you advertising related to This is Pepa on this website and other platforms, taking into account, for example, the products you have previously viewed, added to your cart, or purchased.

Security and Fraud Prevention

I use your personal information to maintain the security of the store, verify certain transactions, detect, investigate, and prevent potential fraudulent, illegal, or malicious activity, and protect both users and the proper functioning of the Services.

If you choose to create an account, you are responsible for maintaining the confidentiality of your login credentials. I recommend that you do not share your password or login information with anyone else.

Communication with You

I use your personal information to respond to your inquiries, provide customer support, resolve issues related to your orders, and maintain necessary communication throughout the purchase process.

Compliance with Legal Obligations

I may also use your personal information when necessary to comply with applicable law, respond to requests from competent authorities, attend to legal proceedings, or protect my rights, as well as to enforce the Terms of Service and other applicable policies.

How I share your personal information

In certain circumstances, it may be necessary to share your personal information with third parties to properly provide you with the Services or to comply with legal obligations. Whenever this occurs, I will do so in accordance with this Privacy Policy and only when there is a legitimate reason to do so.

I may share your personal information in the following situations:

  • With Shopify, as well as with service providers and other companies that work with me to enable the operation of the online store. This includes, but is not limited to, services related to the technical management of the website, payment processing, data analysis, customer support, cloud storage, order fulfillment, and shipping.
  • With marketing and sales partners, when necessary to provide you with personalized advertising or to carry out marketing activities. For example, I use Shopify tools that allow me to display personalized ads through third-party services, taking into account your activity on this store and other websites. These partners will process your information in accordance with their own privacy policies. Depending on where you live, you may have the right to object to your information being used for personalized advertising.
  • We may share your information when you expressly authorize or request it, for example, if it is necessary to share certain information to complete a shipment, use certain third-party integrations or functionalities, or when you provide your consent.
  • We may also share your information with affiliated or related companies when necessary for the proper provision of the Services.
  • We may also share your information when there is a legal obligation or when it is necessary to protect your rights, for example, to comply with requests from competent authorities, respond to legal proceedings, enforce the Terms of Service, or protect the security of the store, your customers, or any other person.

Relationship with Shopify

This store is hosted on Shopify, the platform I use to manage the online store and provide you with the Services.

For the store to function properly, Shopify collects and processes certain personal information related to your access to and use of the website. Some of the information you provide when placing an order or using the Services is transmitted to Shopify and may be shared with third parties who collaborate with the platform, some of whom may be located outside your country of residence.

In addition, I use certain advanced Shopify features that help me manage and improve my business. To provide these features, Shopify may process information related to your interactions with this store and other businesses that use its platform.

In these cases, Shopify acts as the data controller and handles requests related to your rights regarding data processed directly by the platform.

If you would like more information about how Shopify uses your personal information or to learn about the rights you can exercise regarding data processed by Shopify, you can consult its Privacy Policy and Privacy Portal.

Third-Party Websites and Links

This website may occasionally include links to websites, applications, or platforms managed by third parties.

If you access any of these links, I recommend that you review their privacy policies, terms of use, and security, as I have no control over the content or how these sites collect or process your personal information.

I cannot guarantee or assume any responsibility for the privacy practices, security, or content of these third-party websites.

Similarly, any information you choose to share in public or semi-public spaces, such as social networks or other external platforms, may be visible to other users of those platforms and will be subject to their own privacy policies.

The inclusion of links to third-party websites on this page does not, in itself, imply a relationship of collaboration, recommendation, or endorsement of their content, unless expressly stated.

Children's Information

The Services are not directed to children, and I do not knowingly collect personal information from children where applicable law prohibits it.

If you are a parent or legal guardian and believe that a child has provided me with personal information, you may contact me to request its deletion.

To the best of my knowledge, I do not knowingly sell or share personal information of children under 16 for commercial or advertising purposes, in accordance with applicable law.

Security and Retention of Your Information

I strive to implement appropriate technical and organizational measures to protect your personal information from unauthorized access, loss, alteration, or misuse.

However, you should be aware that no data transmission or storage system over the Internet can guarantee absolute security. Therefore, although I take all reasonable measures to protect your information, I cannot guarantee completely infallible protection.

I also recommend that you do not send me particularly sensitive information through unsecured means.

I will retain your personal information only for as long as necessary to provide you with the Services, process your orders, comply with applicable legal obligations, resolve any issues, or enforce any rights I may have.

Once the legal retention periods have expired or when the information is no longer needed for these purposes, your data will be securely deleted or anonymized.

Your Rights and Options

Depending on where you live, applicable law may grant you certain rights regarding your personal information. Although these rights may vary from country to country and may not always apply in every circumstance, you can exercise them when permitted by applicable law.

These rights include:

  • Right of access, to know what personal information I hold about you.
  • Right to erasure, to request the deletion of your personal information where possible.
  • Right to rectification, to request the correction of any inaccurate or incomplete data.
  • Right to data portability, to receive a copy of your personal information or request its transfer to a third party, where permitted by law.
  • Right to object to the use of your data for personalized advertising or marketing purposes, where permitted by applicable law. If you visit this website with the Global Privacy Control (GPC) signal activated, and depending on your place of residence, I may automatically interpret this signal as a request to limit certain processing related to personalized advertising. You can find more information about Global Privacy Control at https://globalprivacycontrol.org/.
  • Management of commercial communications. If you agree to receive promotional communications, you can unsubscribe at any time using the link included in those emails. Even if you choose to stop receiving marketing communications, I will continue to send you messages necessary to manage your orders, your account, or any services you have requested.

If you reside in the United Kingdom or the European Economic Area (EEA), and in accordance with applicable law, you may also exercise the following rights:

  • Right to object to or restrict processing, to request that I stop processing your personal information or limit its processing in certain circumstances.
  • Right to withdraw your consent, when the processing of your data is based on it. Withdrawing your consent will not affect the lawfulness of processing carried out beforehand.

You can exercise any of these rights by contacting me via the email address provided at the end of this Privacy Policy.

If some of your personal information is processed directly by Shopify, you can consult how Shopify exercises these rights and obtain more information in its own Privacy Policy and on its Privacy Portal.

Exercising any of these rights will not result in any discriminatory treatment on my part.

When necessary, I may request additional information to verify your identity before processing your request. Furthermore, the law may allow an authorized representative to exercise these rights on your behalf, provided they duly demonstrate such representation.

I will respond to your request within the timeframes established by applicable law.

Complaints

If you have any questions or complaints about how I handle your personal information, you can contact me using the details at the end of this Privacy Policy.

If, after contacting me, you believe that the processing of your data does not comply with current regulations, you can also file a complaint with the competent data protection authority in your country of residence. If you reside in Spain, you can contact the Spanish Data Protection Agency (AEPD).

International Transfers

Some of the suppliers I work with may process, store, or transfer your personal information outside the country where you reside.

When these transfers take place outside the European Economic Area or the United Kingdom, they will be carried out using the safeguards recognized by applicable law, such as the Standard Contractual Clauses approved by the European Commission or other equivalent safeguards, unless the transfer is to a country that has been declared to have an adequate level of protection.

Changes to this Privacy Policy

I may update this Privacy Policy when necessary to reflect changes in legislation, the operation of the store, or how I handle personal information.

When this happens, I will post the updated version on this page and indicate the date of the last update. Where required by law, I will also inform you of these changes through appropriate channels.

Contact

If you have any questions about this Privacy Policy, how I handle your personal information, or if you wish to exercise any of your rights, you can contact me using the following information:

This is Pepa

📍 Plaça d'Espanya s/n, 07002 Palma, Balearic Islands, Spain

📧 thisispepashop@gmail.com

📞 +34 655 85 62 79

For the purposes of applicable data protection regulations, This is Pepa is the data controller of the personal information collected through this website.