Privacy policy

Privacy Policy

Tallora (tallora.store) is operated by Lucas Diez, a sole trader based in Spain ("we", "us", "our"). We operate this store and website, including all related information, content, features, products and services (the "Services"). Tallora is powered by Shopify.

This Privacy Policy explains how we collect, use and share your personal information when you visit our store, make a purchase or contact us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy applies with respect to your personal information. By using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Information we collect

Depending on how you use the Services, we may collect:

  • Contact details: name, billing and shipping address, phone number and email address.
  • Payment information: payment card details, transaction details and payment confirmation. Payments are processed securely by our payment providers; we do not store your full card details.
  • Account information: username, password, preferences and settings.
  • Order information: products you view, add to your cart, purchase, return or cancel.
  • Communications: any information you share when you contact us.
  • Device and usage information: IP address, browser, device type and how you interact with our store.

2. Where we get your information

  • Directly from you, when you place an order, create an account or contact us.
  • Automatically, through cookies and similar technologies when you browse our store.
  • From our service providers, such as Shopify and payment processors, when they process information on our behalf.

3. How we use your information

  • To provide our Services: process your order and payment, arrange delivery, handle returns and refunds, and manage your account.
  • Marketing and advertising: send you promotional emails (only if you have agreed) and show you relevant online ads, including on social media.
  • Security and fraud prevention: protect your account, payments and our store from fraud and misuse.
  • Customer support: answer your questions and keep you updated about your order.
  • Legal reasons: comply with the law, tax and accounting obligations, and protect our rights.

4. Legal basis for processing (UK and EEA)

If you are in the United Kingdom or the European Economic Area, we process your personal information on the following legal bases:

  • Contract: to process your order, payment and delivery.
  • Legal obligation: to keep tax and accounting records.
  • Legitimate interests: to prevent fraud, secure the Services and improve our store, where these interests are not overridden by your rights.
  • Consent: for marketing emails and non-essential cookies. You can withdraw your consent at any time.

5. Who we share your information with

We only share your personal information when necessary, with:

  • Shopify and our service providers, who help us run the store (payment processing, hosting, analytics, customer support, fulfilment and shipping).
  • Marketing and advertising partners, such as Meta (Facebook and Instagram) and TikTok, to show you relevant ads. Depending on where you live, you can ask us not to share your information for targeted advertising.
  • Delivery companies, to ship your order.
  • Authorities, when required by law or to protect our rights.

We never sell your personal information.

6. Shopify

Our store is hosted by Shopify, which processes personal information to provide and improve the Services. Your information may be transferred to and processed by Shopify and other providers in countries outside your own. To learn more about how Shopify uses your information and your rights, visit the Shopify Consumer Privacy Policy and the Shopify Privacy Portal at https://privacy.shopify.com/en.

7. Third-party websites

Our store may include links to other websites or social media platforms. We are not responsible for their privacy practices, so we recommend reading their own privacy policies.

8. Children

Our Services are not intended for children. We do not knowingly collect personal information from anyone under the age of majority in their country. If you believe a child has given us personal information, please contact us and we will delete it.

9. How long we keep your information

  • Order and transaction records: up to 6 years, to meet tax and accounting obligations.
  • Marketing data: until you unsubscribe or withdraw your consent.
  • Customer support messages: up to 2 years after our last contact with you.

No security measure is perfect, but we take reasonable steps to protect your information. Please avoid sending sensitive information to us through insecure channels.

10. Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your information.
  • Receive a copy of your information and transfer it to another provider.
  • Unsubscribe from marketing emails at any time, using the link in our emails.

If you are in the UK or EEA, you also have the right to:

  • Object to or restrict how we process your information.
  • Withdraw your consent at any time, without affecting processing carried out before.

To exercise any of these rights, email us at lucasdiezbolso@gmail.com. We may need to verify your identity first. We will reply within the time limits set by law and will never treat you differently for exercising your rights.

11. International transfers

Your information may be transferred to and processed in countries outside the UK or EEA. When this happens, we rely on recognised safeguards, such as the European Commission's Standard Contractual Clauses or the UK equivalent, unless the country has been recognised as providing an adequate level of protection.

12. Complaints

If you have a complaint about how we handle your personal information, please contact us first and we will do our best to resolve it. You also have the right to complain to a data protection authority:

  • United Kingdom: Information Commissioner's Office (ICO), www.ico.org.uk
  • Spain: Agencia Española de Protección de Datos (AEPD), www.aepd.es
  • Other EEA countries: your local data protection authority.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Last updated" date above.

14. Contact us

For any questions about this Privacy Policy or your personal information, contact us at:

Lucas Diez – Tallora
Email: lucasdiezbolso@gmail.com
Address: Carrer de la pea 18, 46191 Vilamarxant, Valencia, Spain

For the purposes of data protection law, Lucas Diez is the data controller of your personal information.