Privacy policy
Last updated: 7 November 2026
Who is responsible
MERMAID The Mermaid Shop, Calle Aracataca 18, 2º derecha, 28033 Madrid, Spain. Email hola@the-mermaid-shop.com. We are the data controller for the information described here.
What we collect
Name, shipping address, email, phone number and order details when you buy. Your WhatsApp number and the messages you send us when you contact the studio. Basic analytics (pages visited, device type, country) if you accept the analytics cookie. We do not collect card numbers: payment happens on the payment provider page.
Why we use it
To process and ship your order, to answer your messages, to handle returns and repairs, to comply with tax and consumer law, and, only with your consent, to understand which pages are useful. We do not sell data and we do not run advertising profiles.
Who sees it
Our shipping carrier (name, address, phone), our payment provider (order amount and reference), our email provider and our hosting provider. Each is bound by a data processing agreement. Transfers outside the EU use standard contractual clauses.
How long we keep it
Order and invoice data: six years, because Spanish tax law requires it. WhatsApp conversations: two years. Analytics: fourteen months. Marketing consent: until you withdraw it.
Your rights
Access, correction, deletion, restriction, portability and objection. Write to hola@the-mermaid-shop.com and we answer within 30 days. You can also complain to the Spanish data protection authority, the AEPD.