Privacy Policy

Data Controller

Deck Lab is the controller of personal data you provide.

• Email: contacto@decklab.es
• Tax/administrative address: Alhaurín el Grande, Málaga. Entirely online store, without in-person service.

Data We Collect

We collect the following personal data:

• Contact details: name, email, shipping address
• Payment details: securely processed by Stripe (we do not store card details)
• Browsing data: technical and analytics cookies

Purposes of Processing

Your data is used to:

Manage orders: process purchases and shipping

Provide customer service: answer enquiries and complaints

Improve the service: analyse website use anonymously

Legal Basis

Processing is based on:

• Performance of a contract: to process purchases
• Consent: for marketing communications
• Legitimate interest: to improve our services

Your Rights (ARCO)

You may exercise these rights:

• ✅ Access: know what data we hold about you
• ✅ Rectification: correct inaccurate data
• ✅ Cancellation: request deletion of your data
• ✅ Objection: object to certain processing

To exercise these rights, email contacto@decklab.es

Data Retention

We retain data for:

• Purchase data: 5 years (tax obligation)
• Browsing data: a maximum of 2 years
• Marketing communications: until consent is withdrawn

Security

We implement technical and organisational security measures to protect data, including SSL encryption and secure storage.