Privacy policy

PRIVACY POLICY

Last updated: 20 July 2026

1. INTRODUCTION

This Privacy Policy explains how Kaynotomia S.L., trading as Kaynotomia, collects, uses, stores and discloses personal information when you visit kaynotomia.com, create an account, place an order, purchase or return a product, contact us, subscribe to communications or otherwise interact with our website, products and services, collectively referred to as the “Services”.

The terms “Kaynotomia”, “we”, “us” and “our” refer to:

Kaynotomia S.L.
Tax identification number: B22633085
VAT number: ESB22633085

Business address:

Calle de Valverde 37
28004 Madrid
Spain

Email: s.l@kaynotomia.com
Telephone: +34 611 871 554

Commercial Registry:

Registered in the Commercial Registry of Madrid, Sheet M-859748, Electronic Folio, Entry 1.

For the purposes of applicable data protection laws, including the General Data Protection Regulation, Kaynotomia S.L. is the data controller of the personal information described in this Privacy Policy, except where another party is expressly identified as an independent controller.

Our online store is hosted by Shopify, which provides the ecommerce platform that allows us to offer and sell our products.

This Privacy Policy should be read together with our Terms of Service, Refund Policy, Shipping Policy and Cookie settings.

This Privacy Policy is provided for information purposes. You are not required to “accept” the Privacy Policy itself. Where consent is legally required for a particular activity, such as certain marketing communications or non-essential cookies, we will request that consent separately.

2. PERSONAL INFORMATION WE COLLECT

“Personal information” means information that identifies you or can reasonably be linked to you.

Depending on how you interact with the Services, we may collect the following categories of personal information.

2.1 Contact and identification information

This may include:

Your full name.
Billing and shipping addresses.
Email address.
Telephone number.
Country or region.
Information required to verify your identity when you exercise a data protection right.

2.2 Order and transaction information

This may include:

Products viewed, selected or purchased.
Products added to your cart.
Order numbers and order history.
Order value and currency.
Returns, refunds, cancellations or complaints.
Shipping method and tracking information.
Delivery status.
Discounts or promotional codes used.
Information relating to damaged, defective or incorrect products.

2.3 Personalization information

When you order a personalized or made-to-order product, we may process:

Your selected colors, components, finishes or configurations.
Text, initials or other personalization instructions.
Measurements or specifications voluntarily provided by you.
Images, files or references voluntarily submitted for the purpose of producing the personalized item.
Communications relating to approval or modification of the personalized design.

Please do not provide sensitive personal information through personalization instructions or uploaded files unless it is strictly necessary and we have expressly requested it.

2.4 Payment information

Payments are processed by Shopify Payments or other payment providers made available during checkout.

Payment providers may process information such as:

Payment card details.
Billing information.
Payment authorization.
Payment status.
Transaction identifiers.
Fraud-prevention information.

Kaynotomia does not normally receive or store your complete payment card number. We generally receive confirmation of payment, limited payment details and transaction information required to manage the order, refund or accounting record.

2.5 Account information

If customer accounts are available, we may process:

Account username or email.
Encrypted authentication credentials.
Account preferences and settings.
Saved addresses.
Order history.
Account activity.

You are responsible for maintaining the confidentiality of your account credentials and should contact us if you believe that your account has been accessed without authorization.

2.6 Communications and customer service

We process information contained in communications you send to us, including:

Emails and contact-form submissions.
Customer service requests.
Questions about products, orders or deliveries.
Complaints and return requests.
Photographs of products, packaging or shipping labels.
Reviews, comments or feedback.
Social media communications directed to Kaynotomia.

2.7 Device, technical and usage information

When you access the Services, we or our service providers may automatically collect:

IP address.
Browser type and version.
Device type.
Operating system.
Language and regional settings.
Network and connection information.
Device or online identifiers.
Pages visited.
Products viewed.
Referring website or source.
Dates and times of visits.
Interactions with the website.
Cart and checkout activity.
Cookie and consent preferences.
Information about errors, security events or technical performance.

2.8 Marketing and advertising information

Where applicable, we may process:

Your marketing subscription status.
Your communication preferences.
Your interactions with marketing emails.
Information about advertisements viewed or selected.
Information about products viewed or added to your cart.
Online identifiers used for measuring or personalizing advertising, where legally permitted and subject to your consent when required.

3. HOW WE COLLECT PERSONAL INFORMATION

We may obtain personal information from the following sources.

3.1 Directly from you

For example, when you:

Place an order.
Create or use an account.
Contact customer service.
Request a return or refund.
Subscribe to marketing communications.
Submit a review.
Provide personalization instructions.
Participate in a promotion or survey.
Exercise a data protection right.

3.2 Automatically through the Services

We may collect technical and usage information through:

Cookies.
Pixels.
Tags.
Local storage.
Server logs.
Analytics technologies.
Similar tracking or measurement technologies.

Where required by applicable law, non-essential technologies will only be used after obtaining your consent.

3.3 From service providers

We may receive information from providers that help us operate the business, including:

Shopify.
Payment processors.
Shipping and logistics providers.
Customer-support providers.
Hosting and cloud service providers.
Analytics providers.
Marketing and advertising providers.
Fraud-prevention and security providers.

3.4 From partners and third parties

We may receive information from:

Social media platforms.
Advertising platforms.
Commercial partners.
Professional advisers.
Publicly available sources.
Authorities or organizations where disclosure is legally permitted or required.

4. PURPOSES AND LEGAL BASES FOR PROCESSING

We process personal information only when we have an appropriate legal basis.

4.1 Processing orders and performing our contract

We process personal information where necessary to take steps at your request or perform a contract with you.

This includes:

Processing and confirming orders.
Collecting and confirming payment.
Producing standard, personalized or made-to-order products.
Delivering products.
Providing order and tracking notifications.
Managing accounts.
Responding to product or order questions.
Processing returns, refunds and complaints.
Providing legal guarantees and after-sales support.
Preventing delivery errors.

The legal basis for this processing is the performance of a contract or taking steps before entering into a contract.

4.2 Compliance with legal obligations

We process information when necessary to comply with legal obligations, including:

Tax and accounting obligations.
Commercial record-keeping obligations.
Consumer protection requirements.
Product safety obligations.
Fraud and money-laundering prevention requirements where applicable.
Responding to lawful requests from courts, regulators or public authorities.

The legal basis is compliance with applicable legal obligations.

4.3 Legitimate interests

We may process personal information where necessary for our legitimate business interests, provided that those interests do not override your fundamental rights and freedoms.

These interests may include:

Operating, maintaining and improving the Services.
Understanding how customers use the website.
Protecting our systems, customers and business.
Preventing fraud, misuse and security incidents.
Establishing, exercising or defending legal claims.
Responding to customer communications.
Maintaining internal business records.
Improving our products and customer experience.
Measuring the general performance of our business and website.

Where required, we assess whether our legitimate interests are proportionate and compatible with your rights.

4.4 Consent

We rely on consent where required by law, including for:

Certain email or electronic marketing communications.
Non-essential cookies and tracking technologies.
Certain personalized advertising activities.
Optional publication or promotional use of customer photographs or content.

You may withdraw consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

5. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

5.1 Provide and manage the Services

This includes:

Operating the website and online store.
Processing payments.
Accepting and fulfilling orders.
Manufacturing personalized products.
Arranging shipping.
Providing tracking information.
Managing customer accounts.
Handling returns and refunds.
Providing customer service.
Managing warranties and conformity claims.

5.2 Personalize and improve the customer experience

This may include:

Remembering selected preferences.
Showing relevant products.
Improving navigation and usability.
Understanding which pages or products receive interest.
Testing and improving website features.
Improving product descriptions, collections and services.

5.3 Marketing and advertising

Subject to applicable law and your consent where required, we may:

Send marketing emails or other promotional communications.
Show advertisements for Kaynotomia products.
Measure the effectiveness of advertising.
Create audiences or carry out advertising attribution.
Show advertising based on interactions with our website.

You may unsubscribe from marketing emails at any time using the unsubscribe link included in the message or by contacting us.

Even after unsubscribing from promotional communications, you may still receive transactional or service-related messages about your account, orders, payments, deliveries, returns or legal notices.

5.4 Security and fraud prevention

We may use information to:

Authenticate accounts and payments.
Identify suspicious activity.
Prevent unauthorized transactions.
Detect fraud or misuse.
Protect the security of customers, systems and the Services.
Investigate security incidents.
Enforce our policies and legal rights.

5.5 Legal and administrative purposes

We may use information to:

Maintain accounting and tax records.
Respond to authorities and legal proceedings.
Establish, exercise or defend legal claims.
Resolve disputes.
Comply with product safety or consumer obligations.
Comply with applicable laws and regulations.

6. COOKIES AND SIMILAR TECHNOLOGIES

We and our service providers may use cookies and similar technologies to operate, secure, analyze and improve the Services.

Cookies may be categorized as:

6.1 Strictly necessary cookies

These cookies are required for the website and checkout to function, including:

Maintaining the shopping cart.
Processing checkout.
Providing account access.
Maintaining security.
Remembering privacy choices.

These cookies do not normally require consent where they are strictly necessary to provide a service requested by the user.

6.2 Analytics and performance cookies

These technologies help us understand how visitors interact with the Services, identify technical issues and measure website performance.

Where required by law, we will use these technologies only after receiving consent.

6.3 Functional cookies

These technologies may remember preferences or provide optional functionality.

Where legally required, they will be activated only after consent.

6.4 Advertising cookies

Advertising and marketing technologies may be used to:

Measure advertising.
Understand interactions with campaigns.
Limit repeated advertisements.
Show more relevant advertising.
Create or measure advertising audiences.

Where required by law, advertising technologies will not be activated until you provide consent.

You can accept, reject or manage non-essential cookies through the cookie banner or privacy-preferences interface available on the website.

Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

7. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information only where necessary and for the purposes described in this Privacy Policy.

7.1 Shopify

Our online store is hosted by Shopify.

Shopify processes information relating to your access to and use of the Services in order to provide, secure and improve its ecommerce services.

Shopify may also process information in accordance with its own privacy responsibilities, including when enhanced or network-based Shopify services are enabled.

You can review Shopify’s Consumer Privacy Policy at:

https://www.shopify.com/legal/privacy/consumers

You can access Shopify’s Privacy Portal at:

https://privacy.shopify.com/en

7.2 Payment providers

Payment information may be disclosed to payment processors, banks, card networks and fraud-prevention providers in order to:

Authorize and process payment.
Prevent fraud.
Process refunds.
Resolve payment disputes.
Comply with financial or legal obligations.

7.3 Shipping and logistics providers

We may disclose contact and order information to delivery companies and logistics providers for the purpose of:

Preparing shipments.
Delivering orders.
Providing tracking information.
Managing customs procedures.
Investigating lost or damaged parcels.
Processing shipping-related returns.

7.4 Technology and business service providers

We may use providers that support:

Website hosting and operation.
Data storage.
Customer support.
Email delivery.
Analytics.
Cybersecurity.
Fraud prevention.
Accounting.
Business administration.

These providers are authorized to process information only for agreed purposes and subject to applicable contractual and legal safeguards.

7.5 Marketing and advertising partners

Subject to applicable law and consent requirements, information may be disclosed to marketing, analytics, social media or advertising providers to:

Deliver marketing communications.
Measure campaign performance.
Understand website activity.
Provide or measure personalized advertising.

Kaynotomia does not sell personal information in exchange for money.

However, certain privacy laws may define some disclosures for targeted advertising as a “sale” or “sharing”. Where these laws apply, we will provide the required opt-out mechanisms.

7.6 Professional advisers and authorities

We may disclose information to:

Accountants.
Lawyers.
Auditors.
Insurers.
Banks.
Regulators.
Courts.
Law-enforcement authorities.
Public administrations.

Such disclosure will occur only where necessary to obtain professional advice, comply with legal obligations, respond to valid legal procedures or protect legal rights.

7.7 Business transactions

If Kaynotomia is involved in a merger, acquisition, restructuring, investment, insolvency or sale of all or part of its business, information may be disclosed to relevant parties and advisers, subject to appropriate confidentiality and data protection safeguards.

8. RELATIONSHIP WITH SHOPIFY

Shopify provides the technical ecommerce infrastructure used by the Store.

Information submitted through the Services may be transmitted to Shopify and its subprocessors in order to operate the website, checkout, customer accounts, payment functions and related ecommerce services.

Shopify may process information in countries outside the country where you reside.

Depending on the Shopify services and settings enabled, Shopify may also process information obtained through your interactions with this Store, other merchants and Shopify.

In some circumstances, Shopify acts as a processor on behalf of Kaynotomia. In other circumstances, Shopify may act as an independent controller responsible for its own processing activities.

Requests relating specifically to processing controlled by Shopify may be submitted through Shopify’s Privacy Portal:

https://privacy.shopify.com/en

9. INTERNATIONAL DATA TRANSFERS

Some of our providers, including Shopify and certain technology, payment, logistics or advertising providers, may process personal information outside Spain or the European Economic Area.

Where personal information is transferred outside the European Economic Area, we will rely on a legally recognized transfer mechanism where required, such as:

A European Commission adequacy decision.
Standard Contractual Clauses approved by the European Commission.
Binding corporate rules.
Another legally permitted transfer mechanism.

Additional technical, organizational or contractual safeguards may also be applied where appropriate.

10. DATA RETENTION

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy.

The applicable retention period depends on factors including:

The duration of our contractual relationship.
Whether you maintain an active account.
The time required to process an order, return or complaint.
Applicable tax, accounting and commercial record-keeping obligations.
Consumer warranty and conformity periods.
The need to establish, exercise or defend legal claims.
Fraud-prevention and security requirements.
Consent and marketing preferences.

As general criteria:

Order, payment and invoicing records may be retained for the periods required by applicable tax, commercial and accounting laws.
Account information may be retained while the account remains active and for a reasonable period afterwards, unless earlier deletion is requested and no legal basis requires continued retention.
Customer-service communications may be retained until the request is resolved and for a reasonable period afterwards in case further action is required.
Marketing information is retained until you unsubscribe, withdraw consent or object to the processing, unless retention is otherwise required by law.
Cookie information is retained according to the lifespan of each cookie and the relevant consent settings.

When personal information is no longer required, we will delete, anonymize or securely restrict access to it, subject to any legal retention obligation.

11. SECURITY

We use reasonable technical and organizational measures designed to protect personal information against:

Unauthorized access.
Accidental loss.
Unlawful use.
Alteration.
Disclosure.
Destruction.

Security measures may include access controls, authentication, encrypted communications, service-provider safeguards and internal security procedures.

No system or transmission method is completely secure. You should avoid sending sensitive or confidential information through unsecured communication channels.

If we become aware of a personal data breach, we will assess it and make any legally required notifications to the competent authority and affected individuals.

12. CHILDREN’S PRIVACY

The Services are not intended for children under 18 years of age, and we do not knowingly collect personal information directly from children for the purpose of selling products to them.

If you are a parent or legal guardian and believe that a child has provided us with personal information without appropriate authorization, contact us at s.l@kaynotomia.com.

Where required, we will investigate and delete the information unless another legal basis requires its retention.

13. AUTOMATED DECISION-MAKING

We or our payment and fraud-prevention providers may use automated tools to identify suspicious transactions, security risks or potential fraud.

These systems may review technical, account, transaction or payment information.

Kaynotomia does not intend to make decisions based solely on automated processing that produce legal or similarly significant effects on you unless:

The processing is necessary to enter into or perform a contract.
The processing is authorized by applicable law.
You have provided explicit consent.

Appropriate safeguards and rights will apply where legally required.

14. YOUR DATA PROTECTION RIGHTS

Depending on applicable law and the circumstances, you may exercise the following rights:

14.1 Right of access

You may request confirmation of whether we process your personal information and obtain access to that information.

14.2 Right to rectification

You may request correction of inaccurate or incomplete personal information.

14.3 Right to erasure

You may request deletion of personal information where the legal requirements for erasure are met.

14.4 Right to restriction

You may request that we restrict the processing of personal information in certain circumstances.

14.5 Right to object

You may object to processing based on legitimate interests.

You have the right to object at any time to the use of personal information for direct marketing.

14.6 Right to data portability

Where processing is based on consent or a contract and carried out by automated means, you may request your information in a structured, commonly used and machine-readable format and, where technically feasible, request its transfer to another controller.

14.7 Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

14.8 Rights relating to automated decisions

Where applicable, you may request human intervention, express your point of view and contest a decision based solely on automated processing that produces legal or similarly significant effects.

14.9 Right to lodge a complaint

You have the right to lodge a complaint with the competent data protection supervisory authority.

In Spain, the competent authority is:

Agencia Española de Protección de Datos
Spanish Data Protection Agency

https://www.aepd.es

If you reside in another European Economic Area country, you may also contact the supervisory authority in your country of habitual residence, place of work or place of the alleged infringement.

15. HOW TO EXERCISE YOUR RIGHTS

You may exercise your rights by contacting:

Kaynotomia S.L.

Email:
s.l@kaynotomia.com

Postal address:

Calle de Valverde 37
28004 Madrid
Spain

Telephone:
+34 611 871 554

Please identify the right you wish to exercise and provide enough information for us to locate the relevant records.

We may request reasonable information to verify your identity and prevent unauthorized disclosure.

You may also authorize another person to submit a request on your behalf. We may request evidence that the representative is authorized to act for you.

We will respond within the period required by applicable law.

Exercising your rights is generally free of charge. Where a request is manifestly unfounded or excessive, applicable law may allow us to charge a reasonable administrative fee or refuse the request.

16. MARKETING PREFERENCES

You may unsubscribe from marketing emails by using the unsubscribe link included in the communication.

You may also contact us at s.l@kaynotomia.com to change your marketing preferences.

Unsubscribing from marketing does not prevent us from sending necessary communications relating to:

Your order.
Payment.
Account.
Delivery.
Return or refund.
Product safety.
Changes to contractual or legal information.

17. THIRD-PARTY WEBSITES AND SOCIAL MEDIA

The Services may contain links to websites, applications or social media platforms operated by third parties.

Kaynotomia does not control the privacy, security or data-processing practices of independent third parties.

Before providing information to an external website or platform, you should review its applicable privacy policy.

Information posted publicly or semi-publicly on social media or other platforms may be visible and used by other users or third parties according to the settings and policies of those platforms.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect:

Changes to our Services.
Changes to our providers or business practices.
New legal or regulatory requirements.
Security or technical developments.
Clarifications or corrections.

When we update this Privacy Policy, we will revise the “Last updated” date.

Where required by applicable law, we will provide additional notice of material changes.

19. CONTACT

Questions about this Privacy Policy, our privacy practices or the exercise of data protection rights may be sent to:

Kaynotomia S.L.

Trading name:
Kaynotomia

Email:
s.l@kaynotomia.com

Telephone:
+34 611 871 554

Business address:

Calle de Valverde 37
28004 Madrid
Spain

Tax identification number:
B22633085

VAT number:
ESB22633085

Commercial Registry:

Registered in the Commercial Registry of Madrid, Sheet M-859748, Electronic Folio, Entry 1.