Privacy policy
Data controller
FALTA LEGAL_COMPANY en .env, tax ID FALTA LEGAL_TAXID en .env, registered at FALTA LEGAL_ADDRESS en .env. You can reach us at any time at hola@rahu.es.
What we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Handling and shipping your order | Name, postal address, email, phone | Performance of a contract (Art. 6.1.b GDPR) | For the duration of the relationship plus statutory tax periods (6 years) |
| Taking payment | Handled by Stripe; we never see or store your card | Performance of a contract (Art. 6.1.b GDPR) | As required by invoicing law |
| Remembering language and shipping country | Technical preference cookies | Legitimate interest / user request | 12 months |
Who receives your data
So that your parcel can reach you, your shipping details are shared with:
- CJdropshipping — the logistics provider that packs and ships your order. This involves an international transfer outside the European Economic Area (China), covered by the European Commission's standard contractual clauses.
- Stripe — the payment gateway, which processes data as an independent controller under its own privacy policy.
- The carrier that delivers your parcel.
We do not share your data with anyone else, and we never sell it.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hola@rahu.es quoting your order number. If you believe we have not handled your request properly, you may complain to the Spanish Data Protection Agency (www.aepd.es) or to your local supervisory authority.
Security
The site runs over an encrypted connection. Card details are entered directly on Stripe's hosted page: this shop never receives or stores them.