Privacy policy

This policy explains how Bendíra handles your personal data, in line with the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Who is responsible

[Owner or company name] · NIF [NIF] · [Registered address] · hello@bendira.art

What we collect and why

• Orders and your account — name, addresses, email, phone and order history, to process and deliver your order and manage your account (contract performance) and to keep invoices (legal obligation).
• Newsletter — your email address, only if you subscribe (consent). You can unsubscribe at any time.
• Messages — what you send us by email, to answer you (legitimate interest).

Who receives your data

Only the providers we need to run the shop: Stripe (card payments), Packlink and Correos (shipping), and Hostinger (website hosting, within the EU). Each acts under a data processing agreement. We don’t sell your data.

How long we keep it

Order data for as long as required by tax and commercial law (generally six years); account data until you delete your account; newsletter data until you unsubscribe.

Your rights

You can ask to access, correct, delete, restrict or port your data, or object to its use, by writing to hello@bendira.art. You can also complain to the Spanish Data Protection Agency (www.aepd.es).