Skip to content
MALEJA

Privacy policy

Last updated: 15 January 2026

Data controller

, Tax ID [NIF pendiente], registered at [Dirección pendiente], email .

What data do we process and why?

  • Order data (name, shipping address, email, phone): to process, manufacture and deliver your purchase. Legal basis: performance of the contract.
  • Your email if you subscribe to the newsletter: to send you news. Legal basis: your consent, revocable at any time.
  • Billing data: to comply with our tax and accounting obligations. Legal basis: legal obligation.
  • Strictly necessary technical browsing data: so the site works. Legal basis: legitimate interest.

Who do we share it with?

Only with the providers essential to delivering the service, all bound by a data processing agreement:

  • Stripe Payments Europe, Ltd. — payment processing. We never see or store your card number.
  • Printify, Inc. — manufacturing and shipping. Receives your name and delivery address.
  • Supabase, Inc. — database hosting (EU servers).
  • Vercel, Inc. — website hosting.

Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is covered by the Standard Contractual Clauses approved by the European Commission.

How long do we keep it?

Order and billing data for the statutory tax and commercial limitation periods (up to 6 years). Newsletter data until you withdraw your consent.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to . If you believe your request has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

If you have any questions about this document, write to us at .