Last updated: March 7, 2025

1. Introduction

At Haroy Collection, SL, we take the privacy and security of your personal data very seriously. This policy describes how we collect, use, share, and protect your information when you visit our website. www.haroycollection.com and use our services. By accessing our website and using our services, you agree to the terms of this policy.

2. Data Controller

Haroy Collection, SL is the controller of the personal data collected through this website. You can contact us via email. info@haroycollection.com for any questions related to this policy or your personal data.

3. Information We Collect

We collect the following types of personal information:

• Contact Information: Name, postal address, email address, telephone number.
• Payment Information: Credit or debit card details, PayPal account information, or other payment service provider information.
• Demographic Information: Age, gender, geographic location.
• Purchase History: Products purchased, purchase dates, amounts spent.
• Device Information: IP address, browser type, operating system, browsing data (pages visited, time spent on the site, links clicked).
• Account Information: Username, Password (when creating an account on our website).
• Social Media Information: If you interact with us through social media, we may collect information from your profile (name, profile picture, etc.).

4. How We Collect Information

We collect information in the following ways:

• Directly from you: When you fill out forms on our website, create an account, make a purchase, subscribe to our newsletter, contact us, or interact with us through social media.
• Automatically: Through cookies and other tracking technologies when you visit our website.

5. Use of Information

We use the information collected for the following purposes:

• Process orders: Manage your purchases, ship products, process payments.
• Customer Service: Answering your questions and resolving problems.
• Marketing: Sending information about products, promotions, special offers, and news (if you have consented to receive these communications).
• Personalization: Tailoring the content of our website and our communications to your interests and preferences.
• Analysis: Conduct market analysis and demographic studies to improve our products and services.
• Fraud prevention: Detect and prevent fraudulent activities.
• Legal compliance: Comply with our legal obligations and respond to requests from authorities.
• Improve user experience: To ensure that content from our site is presented in the most effective manner for you and your computer.

6. Sharing Information

We may share your personal information with the following third parties:

• Payment service providers: PayPal, Stripe, Redsys, Shopify Payments (for processing payments).
• Shipping companies: To deliver the products you have purchased.
• Marketing service providers: Mailchimp, Klaviyo (to send promotional emails and newsletters, provided you have given your consent).
• Data analytics service providers: To analyze website traffic and improve our services.
• Web hosting providers: Shopify service providers (for hosting our website and general data access).
• Government authorities: If we are required to do so by law or in response to a valid legal request.

7. Data Security

At Haroy Collection, SL, we are committed to protecting the security of your personal information. We implement reasonable and appropriate security measures designed to protect your information from unauthorized access, use, alteration, and disclosure. These measures include, among others:

• Shopify Platform Security: Our online store is hosted on Shopify Inc. Shopify provides a secure infrastructure and follows industry standards to protect personal information. You can learn more about Shopify's security measures on their website: [Link to Shopify's security page, if found.]
• SSL Encryption: We use Secure Socket Layer (SSL) encryption to protect the transmission of sensitive information, such as payment details, during transmission over the Internet.
• PCI DSS Compliance: If we process credit card information directly, we ensure compliance with the Payment Card Industry Data Security Standards (PCI DSS).
• Limited Access: We limit access to personal information to those employees, agents, contractors, and other third parties who need to know that information to operate, develop, or improve our services. These parties are contractually obligated to maintain the confidentiality of this information.
• Intrusion Monitoring and Detection: We regularly monitor our systems to detect and prevent suspicious or unauthorized activity.

While we strive to protect your personal information, please be aware that no data transmission over the Internet or electronic storage system is completely secure. Therefore, we cannot guarantee the absolute security of your information.