Note on providers. Payment-processor and courier provider names in §§ below are still to be filled when those contracts are set. Lawyer review
against the actual processors used (payment method, courier, email tooling), which are not all
decided yet. The Spanish version (politica-privacidad.md) is the one that must be published.
1. Who is responsible for your data
| Controller | Sanson Berriedale Johnson, trading as San Pedro Shop (autónomo) |
| Tax ID | X3316772B |
| Address | Calle Sorolla 14, 03560 El Campello, Alicante, Spain |
| info@sanpedro.shop |
2. What data we collect
- When you place an order: name, delivery and billing address, email address, telephone number,
and the contents and value of your order. - When you pay: we do not receive or store your card or wallet details. Payment is handled
by our payment provider; we receive only confirmation of whether payment succeeded, and a
reference. - When you contact us: the content of your message and your contact details.
- When you browse: IP address, browser and device information, and pages visited, via cookies
and server logs. - If you subscribe to our newsletter: your email address.
We do not knowingly collect data from children, and we do not collect special-category data.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Processing and delivering your order | Performance of a contract — Art. 6(1)(b) |
| Issuing invoices and meeting tax obligations | Legal obligation — Art. 6(1)(c) |
| Answering your enquiries | Contract / legitimate interest — Art. 6(1)(b)/(f) |
| Site security, fraud prevention, and keeping the shop working | Legitimate interest — Art. 6(1)(f) |
| Sending marketing emails | Consent — Art. 6(1)(a), withdrawable at any time |
| Non-essential cookies and analytics | Consent — Art. 6(1)(a) |
4. Who we share it with
Only those who need it to fulfil your order:
- Our payment provider, to take payment.
- The courier, to deliver — name, address and telephone number.
- Our hosting provider, which stores the site and its database.
- Public authorities, where we are legally required to disclose.
Payment today is handled by Revolut (bank transfer). The courier and any card-payment processor
are being contracted; this section will be updated when they are in place.
We do not sell your data, and we do not share it for anyone else’s marketing.
5. International transfers
Our hosting and any providers are expected to be within the EU/EEA. Where a provider processes data
outside the EEA, that transfer relies on an adequacy decision or on Standard Contractual Clauses.
Where applicable, we will update this section with the specific legal basis each non-EEA provider
relies on, once those providers are contracted.
6. How long we keep it
- Order and invoicing records: as long as required by Spanish commercial and tax law — generally
several years from the transaction. - Enquiries: for as long as needed to deal with them, and a reasonable period afterwards.
- Newsletter: until you unsubscribe.
- Server logs and cookies: short retention; see the cookie notice.
7. Your rights
You may request access to your data, correction of it, erasure, restriction of processing, or
portability; you may object to processing based on legitimate interest; and you may withdraw
consent at any time without affecting processing already carried out. Write to
info@sanpedro.shop. We may need to verify your identity.
If you believe your data has been handled improperly, you may complain to the Spanish data
protection authority, the Agencia Española de Protección de Datos (AEPD), at
www.aepd.es.
8. Cookies
This site uses cookies that are strictly necessary for the shop and cart to work, and — with your
consent — cookies for analytics. You can change or withdraw your choice at any time via the cookie
settings. A full list of cookies in use will appear here once the cookie banner is installed.
9. Changes
We may update this policy. The current version is always the one published here, with the date of
last revision shown.
Last revised: 2026-10-02