Privacy Policy
VEYRALIS PRIVACY POLICY
Last updated: September 6, 2026
At Veyralis, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and, where applicable, disclose your personal data when you visit, use, or make a purchase through https://veyralis.es/ (hereinafter, the “Site”).
1. DATA CONTROLLER
The data controller for personal data collected through the Site is:
Controller: Pablo Lopez
Trade name: Veyralis
Address: Calle Rioja 3, Málaga, MA, 29740, Spain
Email: supportveyralis@gmail.com
Website: https://veyralis.es/
For any questions related to the processing of your personal data or to exercise your rights, you can contact us at supportveyralis@gmail.com.
2. PERSONAL DATA WE COLLECT
We may collect different types of information depending on how you use our Site.
Order and Contact Data
When you place or attempt to place a purchase, we may collect information such as:
-
first and last name;
-
billing address;
-
shipping address;
-
email address;
-
phone number;
-
order-related information;
-
any other information necessary to manage and deliver your purchase.
Payment-Related Data
Payments may be managed through Shopify Payments or PayPal, depending on the method you select.
Payment providers may collect and process data necessary to process the transaction, verify payment, prevent fraudulent operations, and comply with their legal obligations. Shopify Payments allows processing various payment methods in Spain, and PayPal has its own privacy practices applicable to its services.
Veyralis does not intend to store your full credit card details when they are processed directly by the respective payment provider.
Technical and Browsing Data
When you visit our Site, we may automatically collect certain technical information, which may include:
-
IP address;
-
browser type and version;
-
device type;
-
operating system;
-
time zone;
-
pages visited;
-
products viewed;
-
information about navigation and interaction with the Site;
-
information related to cookies and similar technologies.
Data you provide when contacting us
If you contact Veyralis via email or other available channels, we may retain the information you provide to address your query, request, or complaint.
3. HOW WE COLLECT DATA
We may obtain personal data:
Directly from you, when you make a purchase, complete a form, write to us, or interact with certain elements of the store.
Automatically, through cookies, similar technologies, and technical logs when you browse the Site.
Through technology providers, when certain services we use need to process information related to your order or the operation of the store.
4. PURPOSES OF PROCESSING
We use the personal data we collect for the following purposes:
Order Management
To process and manage purchases made through Veyralis, including order confirmation, payment processing, preparation, tracking, and delivery.
Customer Service
To respond to questions, requests, incidents, returns, complaints, and other communications related to our products or services.
Site Operation and Security
To maintain, protect, and improve the operation of our online store, detect errors, prevent fraudulent or abusive uses, and protect the security of the Site.
Compliance with Legal Obligations
To comply with applicable legal, tax, accounting, and administrative obligations.
Service Improvement
To understand how our store is used and improve its operation, user experience, products, and services, always within the limits established by applicable regulations.
Commercial Communications
When applicable and there is a valid legal basis, we may use your data to send you commercial communications related to Veyralis.
When consent is necessary, it will be requested appropriately, and you may withdraw it later.
The AEPD (Spanish Data Protection Agency) establishes that each processing activity must be supported by a valid legal basis, such as the performance of a contract, a legal obligation, consent, or an applicable legitimate interest.
5. LEGAL BASES
Depending on the purpose, the processing of your data may be based on:
Performance of a contract: when we need to process your data to manage a purchase or provide the requested services.
Compliance with legal obligations: when legislation requires us to retain, use, or disclose certain data.
Consent: when processing requires your consent, for example, for certain cookies or commercial communications.
Legitimate interest: when we have a legitimate interest in carrying out processing and this is not overridden by your rights and freedoms.
The specific legal basis will depend on the processing performed.
6. COOKIES
Our Site uses cookies and similar technologies for certain functions.
These may be used, among other purposes, to:
-
enable the technical operation of the store;
-
maintain certain sessions;
-
manage the shopping cart;
-
remember certain preferences;
-
ensure security;
-
obtain information about Site usage;
-
manage certain privacy functions and, where applicable, marketing.
Shopify provides privacy configuration tools that allow managing certain cookies, pixels, and visitor preferences.
Non-strictly necessary cookies will be managed according to the preferences and consent applicable in each case.
For more detailed information about the cookies used on Veyralis and their purpose, please consult our Cookie Policy.
7. PROVIDERS AND THIRD PARTIES
To provide our services, we use certain technology providers.
Shopify
Our online store is hosted and managed using Shopify.
Shopify provides the necessary infrastructure to operate the store, manage orders, customer accounts, certain privacy functions, and other e-commerce related functionalities. As a Shopify merchant, we remain responsible for complying with the privacy obligations applicable to our business.
Shopify Payments
We use Shopify Payments to process certain payments.
Shopify Payments allows accepting payments through different methods available in Spain and uses security and fraud detection measures for payment processing.
PayPal
We also offer PayPal as a payment method.
When you choose to pay via PayPal, certain personal and transaction data may be processed by PayPal in accordance with its own privacy policy. PayPal's privacy policy currently describes the processing of personal information related to its accounts, sites, and services.
AutoDS
We use AutoDS for certain functions related to order automation and management.
Depending on the service used, AutoDS may process personal information necessary to provide its services. AutoDS's privacy policy, updated in August 2026, describes the categories of information it may collect, its purposes, and the third parties with whom it may share information.
Other providers
We may also use shipping, logistics, email, customer service, security, and other technology service providers when necessary to manage the store and fulfill the purposes described in this Policy.
Only the data necessary for the provision of the corresponding service will be disclosed.
8. INTERNATIONAL TRANSFERS
Some technology providers used by Veyralis may process personal data from countries located outside the European Economic Area.
When international transfers occur, they must be carried out in accordance with the safeguards provided by applicable regulations, such as adequacy decisions, appropriate safeguards, or other legally foreseen mechanisms.
The AEPD explains that transfers to third countries must comply with the conditions established by the GDPR and, where applicable, use mechanisms such as adequacy decisions or appropriate safeguards.
By using third-party services such as Shopify, PayPal, or AutoDS, certain data may be processed internationally in accordance with the terms and policies of these providers. AutoDS, for example, states that it processes personal information in various jurisdictions.
9. DATA RETENTION
We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected.
When there is a legal retention obligation, data may be kept for the period required by applicable law.
Order-related data may be retained for the time necessary to comply with tax, accounting, and legal obligations, and to manage possible claims, returns, or incidents.
When data is no longer needed, it will be deleted or anonymized where possible.
10. MANDATORY DATA
When certain data is necessary to make a purchase, we will indicate what information you must provide.
If you do not provide the necessary data to manage an order, we may not be able to process or deliver the purchase.
The AEPD considers it relevant to inform the data subject whether certain data is mandatory and about the consequences of not providing it.
11. SECURITY
We adopt reasonable technical and organizational measures to protect personal data against loss, destruction, alteration, unauthorized access, or improper disclosure.
However, no electronic transmission or storage system can guarantee absolute security.
12. YOUR RIGHTS
Where applicable, you can exercise the following rights:
Access: request information about the personal data we process about you.
Rectification: request the correction of inaccurate or incomplete data.
Erasure: request the deletion of your data where legally appropriate.
Objection: object to certain processing.
Restriction: request the restriction of processing in legally provided cases.
Data portability: receive certain data in a structured format and, where appropriate, request its transmission to another controller.
Withdrawal of consent: withdraw consent when processing is based on it.
The AEPD contemplates these rights and recommends clearly informing on how to exercise them and on the right to lodge a complaint with a supervisory authority.
To exercise your rights, you can write to:
We may request reasonable information to verify your identity when necessary to protect your data.
13. RIGHT TO LODGE A COMPLAINT
If you believe that your personal data is not being processed correctly, you can contact us to try to resolve the situation.
You also have the right to lodge a complaint with the relevant data protection authority.
In Spain, the supervisory authority is the:
Spanish Data Protection Agency (AEPD)
14. MINORS
Veyralis is not specifically directed at minors.
We do not knowingly collect personal data from children under 14 years of age without the guarantees or authorizations required by applicable legislation.
15. CHANGES TO THIS POLICY
We may modify this Privacy Policy as necessary to reflect changes in our services, providers, data processing practices, or applicable legislation.
When relevant changes occur, we will update the date indicated at the beginning of this Policy.
16. CONTACT
For any questions related to this Privacy Policy, the processing of your data, or the exercise of your rights, you can contact:
Pablo Lopez – Veyralis
Calle Rioja 3, Málaga, MA, 29740, Spain
Email: supportveyralis@gmail.com
Website: https://veyralis.es/