Privacy policy

 

LAST UPDATED: June 5, 2026

This Privacy Policy describes how Glory The Shop (legally operated by Laura Rodríguez Portela, hereinafter "the Site," "we," or "the Data Controller") collects, uses, and protects your personal information when you visit, use, or make a purchase at www.glorytheshop.com (the "Site") or communicate with us by any other means.

Please read this policy carefully. By checking the acceptance box on our forms or during the purchase process, you consent to the processing of your data as described herein.

 

1. Information We Collect

When you visit the Site, we collect certain information about your device, your interaction with the Site, and the information necessary to process your purchases. We may also collect additional information if you contact us for customer support. For the purposes of this Policy, we refer to any data that allows you to be directly identified as "Personal Information".

A) Device Information

  • Purpose of collection: To load the Site accurately for you and perform analytics on Site usage to optimize our website.
  • Source of collection: Automatically collected when you access our Site through cookies, log files, web beacons, tags, and pixels.
  • Personal information collected: Web browser version, IP address, time zone, cookie information, which sites or products you view, search terms, and how you interact with the Site.

B) Order Information

  • Purpose of collection: To provide you with products or services to fulfill our sales contract, process your payment information, arrange shipping, provide you with invoices and order confirmations, communicate with you, and examine our orders to detect potential risks or fraud. Additionally, when consistent with the preferences you have shared with us, to provide you with information or advertising related to our products.
  • Source of collection: Collected directly from you when you make a purchase or attempt to purchase.
  • Personal information collected: Name, billing address, shipping address, payment information (credit/debit card data is processed securely by our certified payment gateways and we never store this complete information on our servers), email address, and phone number.

C) Customer Support Information

  • Purpose of collection: To provide assistance and customer support before, during, and after purchase.
  • Source of collection: Collected directly from you (via email, chat, or contact form).
  • Personal information collected: The data you choose to share in your inquiry to resolve the issue.

 

2. Minors

The Site is not intended for persons under 18 years of age. We do not knowingly collect personal information from minors. If you are a parent, guardian, or legal representative and believe your child has provided us with personal information, please contact us at info@glorytheshop.com to request its immediate deletion.

 

3. How We Share Your Personal Information

We share your Personal Information only with trusted service providers to help us provide our services and fulfill our contracts with you. We never sell or rent your personal information to third parties for commercial purposes unrelated to our business.

  • Shopify: We use Shopify Inc. to host and power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
  • Logistics and Shipping Providers: We share only what is strictly necessary (name, address, and phone number) with shipping companies to ensure order delivery.
  • Payment Processors: Your payment data is securely processed and encrypted by certified gateways (Shopify Payments, PayPal, digital wallets such as Apple Pay and Google Pay, and local methods including Bancontact, BLIK, and iDEAL). We do not store or have access to your full bank details. Use of Klarna: In order to offer you Klarna's flexible payment options, we will pass to Klarna certain aspects of your personal information, such as contact and order details, at checkout, for Klarna to assess whether you qualify for their payment methods and to tailor those methods for you. Your transferred data is processed in line with Klarna's privacy policy.
  • Legal Compliance: We may share your Personal Information to comply with applicable laws and regulations (such as Spanish tax regulations and GDPR), to respond to a subpoena, court order, or other legal request for information, or to protect our legitimate rights.

 

4. Marketing and Advertising

Only with your explicit consent (for example, when subscribing to the Newsletter or accepting marketing cookies) do we use your Personal Information to provide you with targeted advertisements or marketing communications that we believe may be of interest to you.

  • Google Analytics: An analytics tool to understand how users use the Site. Google's privacy policy: https://policies.google.com/privacy.
  • Meta Pixel (Facebook/Instagram): We use Meta's pixel to measure the effectiveness of our advertising campaigns and show you personalized ads on these platforms.
  • Right to opt-out: You can unsubscribe at any time:
    • From our Newsletter: By clicking the "Unsubscribe" link at the bottom of each email.
    • From Facebook targeted advertising: Ad Settings
    • From Google targeted advertising: Ad Settings
    • Third-party advertising networks: Through the European Interactive Digital Advertising Alliance (EDAA) portal: http://www.youronlinechoices.eu/

 

5. Legal Basis for Processing (GDPR)

If you are a resident of the European Economic Area (EEA) or the United Kingdom, we process your personal information under the following legal bases established in the General Data Protection Regulation (GDPR):

  • Consent: For sending commercial communications (Newsletter) and using analytical and marketing cookies.
  • Performance of contract: To process your order, manage shipping and returns, and provide customer support.
  • Legal obligation: To comply with tax, accounting, and commercial regulations (for example, retaining invoices for 6 years according to Spanish Tax Law).
  • Legitimate interest: To improve website security, prevent fraud, and optimize user experience.

 

6. Data Retention

We will retain your Order Information for our records unless and until you request that we delete this information. However, certain information (such as invoices, tax data, and transaction records) must be retained for a minimum period of 6 years to comply with Spanish Tax Law and the Commercial Code, after which it will be duly deleted or anonymized.

Browsing data collected through cookies is retained for a maximum of 25 months, in accordance with the guidelines of the Spanish Data Protection Agency (AEPD).

 

7. Your Rights (GDPR and LOPDGDD)

As a resident of the EEA, United Kingdom, or Spain, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right of Rectification: Correct inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request the deletion of your personal data, unless there is a legal obligation to retain it.
  • Right to Data Portability: Receive your data in a structured, commonly used format to transfer it to another controller.
  • Right to Object: Object to the processing of your data for direct marketing purposes.
  • Right to Restriction of Processing: Request that we restrict the use of your data under certain circumstances.

To exercise any of these rights, contact us at info@glorytheshop.com, clearly indicating which right you wish to exercise and attaching a copy of your identity document. We will respond to your request within a maximum of 30 calendar days.

International Data Transfers: Your information may be processed and stored outside the European Economic Area (EEA), specifically in Canada and the United States through Shopify's servers. These transfers are made under appropriate protection mechanisms, such as Standard Contractual Clauses (SCCs) approved by the European Commission or current privacy adequacy frameworks, ensuring a level of protection equivalent to that of the GDPR.

 

8. Cookies

We use our own and third-party cookies to improve your browsing experience, analyze site traffic, and personalize content and ads. There are different types of cookies:

  • Technical or essential cookies: Necessary for the basic functioning of the site (shopping cart, user session). They do not require consent.
  • Analytical cookies: Allow us to measure and analyze how users use the site (Google Analytics).
  • Marketing cookies: Allow us to show you personalized advertising on other platforms (Meta Pixel, Google Ads).

You can configure or reject cookies at any time through the cookie configuration banner that appears when accessing our website or through your browser settings. Please note that rejecting certain cookies may limit the Site's functionality.

For more information about the cookies we use and how to manage them, see our cookie settings or the Shopify Cookie Policy.

 

9. Data Security

We take the security of your personal information very seriously. We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction, or alteration. These measures include:

  • SSL/TLS Encryption: All transactions and communications on our site are protected by high-security encryption.
  • PCI-DSS Compliance: Our payment processors comply with the Payment Card Industry Data Security Standard.
  • Restricted Access: Only authorized personnel have access to your personal information, and only when necessary to provide our services.

However, no Internet transmission system or electronic storage is 100% secure. Although we strive to protect your personal information, we cannot guarantee its absolute security.

 

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, applicable legislation, or for other operational, legal, or regulatory reasons. The "Last updated" date at the beginning of this document indicates when it was last modified.

We recommend that you review this policy periodically. If we make substantial changes, we will make reasonable efforts to notify you (for example, through a prominent notice on the website or by email).

 

11. Contact and Data Controller

For any questions about this Privacy Policy or to exercise your rights, you can contact us at:

Glory The Shop
Data Controller: Laura Rodríguez Portela
Tax ID (NIF/DNI): 39487404S
Address: Rúa As Teixugueiras, 16, P1 7C, 36212 Vigo (Pontevedra), Spain
Email: info@glorytheshop.com
Phone: +34 645 50 60 03

Supervisory Authority: If you believe that we have not processed your personal data appropriately or have violated your rights, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD):