Política de privacidad
SKLEYS — PRIVACY POLICY
Last Updated: 1 September 2026
1. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA
The data controller responsible for the processing of personal data through skleys.com is:
Brand: SKLEYS
Website: skleys.com
Email: hello@skleys.com
Data protection contact: hello@skleys.com
For privacy or data-protection requests, please use the subject line "Data protection request".
2. PERSONAL DATA WE MAY COLLECT
Depending on how you interact with SKLEYS, we may process the following categories of personal data.
2.1 Information you provide directly
This may include:
- your full name;
- email address;
- telephone number;
- billing address;
- shipping address;
- order information;
- products purchased;
- account information, where customer accounts are available;
- return and refund information;
- information you provide when contacting customer support;
- reviews or other content you voluntarily submit to us.
2.2 Payment and transaction information
Payments are processed through the payment methods and payment service providers made available at checkout.
These may include services such as Shopify Payments, Stripe and PayPal, depending on the payment method available to you.
SKLEYS does not normally receive or store your complete payment-card number or CVV. These details are processed by the relevant payment service provider.
We may receive transaction-related information such as payment status, transaction identifiers, payment method, amount paid, refunds and information necessary to prevent or investigate fraud.
2.3 Information collected automatically
When you access or use our website, certain technical information may be collected automatically.
This may include:
- IP address;
- browser type;
- device information;
- operating system;
- approximate location derived from technical information;
- access date and time;
- pages visited;
- products viewed;
- interactions with the website;
- referral URLs;
- session information;
- cookie and similar technology identifiers;
- consent preferences.
The use of non-essential cookies and similar technologies is subject to the consent requirements described in our Cookie Policy and cookie settings.
2.4 Information received from third parties
We may receive personal data from third parties involved in providing our services, including:
- Shopify and other e-commerce service providers;
- payment processors;
- logistics and fulfilment providers;
- shipping carriers;
- customer-support providers;
- fraud-prevention services;
- analytics providers;
- advertising and marketing platforms, where legally permitted and subject to applicable consent requirements.
3. WHY WE PROCESS YOUR DATA AND OUR LEGAL BASES
We process personal data only where we have a valid legal basis.
3.1 Processing and fulfilling orders
We process personal data to:
- process your order;
- receive and verify payment;
- prepare and fulfil your purchase;
- arrange shipment and delivery;
- provide tracking information;
- process returns and refunds;
- communicate with you about your order;
- provide customer service.
Legal basis: Performance of a contract or taking steps at your request before entering into a contract, under Article 6(1)(b) GDPR.
3.2 Compliance with legal obligations
We may process and retain information where necessary to comply with legal obligations relating to:
- taxation;
- accounting;
- invoicing;
- consumer protection;
- product safety;
- regulatory requirements;
- responding to lawful requests from competent authorities.
Legal basis: Compliance with a legal obligation under Article 6(1)(c) GDPR.
3.3 Fraud prevention and security
We may process information where reasonably necessary to:
- detect and prevent fraudulent transactions;
- protect customer accounts;
- protect our website and systems;
- investigate suspicious activity;
- prevent misuse of our services;
- establish, exercise or defend legal claims.
Legal basis: Our legitimate interests under Article 6(1)(f) GDPR, provided those interests are not overridden by your fundamental rights and freedoms.
3.4 Customer service and improvement of our services
We may use information about customer interactions, orders and website usage to operate, maintain and improve our services.
Where this processing is based on legitimate interests, we assess those interests against the rights and freedoms of affected individuals.
3.5 Marketing communications
Where required by applicable law, we send promotional emails, SMS messages or other electronic marketing only where we have an appropriate legal basis.
Where marketing is based on your consent, you may withdraw that consent at any time.
You can unsubscribe from marketing emails using the unsubscribe link contained in the message or by contacting hello@skleys.com.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
3.6 Cookies, analytics and advertising
Where consent is legally required, analytics, advertising and other non-essential tracking technologies are used only after obtaining the appropriate consent.
You can manage or withdraw your cookie choices through the cookie settings available on our website.
4. WHO WE MAY SHARE YOUR DATA WITH
We do not disclose personal data indiscriminately.
Personal data may be shared where necessary with third parties that help us operate the store, fulfil orders and provide our services.
These may include:
4.1 E-commerce infrastructure
Our online store is powered by Shopify.
Shopify may process personal data as necessary to provide the e-commerce platform and related services.
4.2 Payment providers
Depending on the payment method selected, payment and transaction information may be processed by providers such as:
- Shopify Payments;
- Stripe;
- PayPal;
- other payment methods displayed at checkout.
4.3 Fulfilment, suppliers and logistics partners
Because SKLEYS sells products internationally, personal data necessary to fulfil an order may be provided to fulfilment warehouses, suppliers, logistics operators and shipping carriers.
This may include your:
- name;
- shipping address;
- telephone number;
- email address where necessary for delivery;
- order details;
- other information reasonably required to fulfil or deliver your order.
Only information reasonably necessary for the relevant service should be provided.
4.4 Customer-support and technology providers
We may use third-party providers to operate customer support, hosting, security, fraud prevention, analytics and other technical functions.
4.5 Advertising and analytics providers
Subject to applicable law and your consent choices where required, data may be processed through advertising or analytics technologies provided by companies such as Meta and other platforms used by SKLEYS.
4.6 Professional advisers and authorities
Personal data may be disclosed to:
- lawyers;
- accountants;
- auditors;
- insurers;
- banks;
- payment providers;
- courts;
- regulators;
- tax authorities;
- law-enforcement authorities;
where reasonably necessary or legally required.
4.7 Corporate transactions
If SKLEYS is involved in a merger, acquisition, financing, restructuring, sale of assets or sale of the business, personal data may be disclosed to potential purchasers and professional advisers where reasonably necessary.
Appropriate confidentiality and data-protection measures will be applied where required.
5. INTERNATIONAL TRANSFERS OF PERSONAL DATA
Some of our service providers, fulfilment partners, suppliers or technology providers may be located outside the European Economic Area (EEA).
In particular, fulfilment and logistics operations may require limited customer information to be processed in countries outside the EEA in order to prepare and deliver international orders.
Where the GDPR requires safeguards for an international transfer of personal data, we use or require an appropriate lawful transfer mechanism.
Depending on the recipient and destination, this may include:
- an adequacy decision adopted by the European Commission;
- Standard Contractual Clauses approved by the European Commission;
- another transfer mechanism recognised by applicable data-protection law;
- supplementary technical, contractual or organisational safeguards where required.
Where a provider is covered by an applicable adequacy framework, transfers may rely on that framework where legally appropriate.
You may contact hello@skleys.com for further information about the safeguards applicable to a particular transfer.
6. HOW LONG WE KEEP PERSONAL DATA
We retain personal data only for as long as necessary for the purposes for which it was collected and for any additional period required or permitted by law.
Different retention periods may apply to different categories of data.
6.1 Orders, invoices and accounting information
Information required for accounting, tax and commercial purposes is retained for the periods required under applicable Spanish law.
Certain commercial and accounting documentation may need to be retained for up to six years, without prejudice to longer or different periods that may apply to particular legal, tax or dispute-related obligations.
6.2 Customer accounts
Where customer accounts are available, account information may be retained while the account remains active and afterwards where necessary to comply with legal obligations or resolve disputes.
6.3 Customer-support communications
Customer-service communications may be retained for the period reasonably necessary to resolve the request, document the handling of an order or claim, prevent fraud and establish or defend legal rights.
6.4 Marketing information
Where marketing processing is based on consent, relevant marketing information may be processed until you withdraw your consent or until the information is no longer necessary.
We may retain limited information necessary to record that you opted out so that we can respect your preference in the future.
6.5 Legal claims
Where information is relevant to a dispute, chargeback, fraud investigation, regulatory matter or legal claim, it may be retained for the applicable limitation period and for as long as reasonably necessary to establish, exercise or defend legal rights.
After the relevant retention period, personal data will be deleted, anonymised or otherwise handled in accordance with applicable law.
7. YOUR DATA-PROTECTION RIGHTS
Subject to the conditions established by applicable data-protection law, you may have the right to:
- access your personal data;
- obtain rectification of inaccurate or incomplete data;
- request erasure of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- object at any time to direct marketing;
- receive certain personal data in a structured, commonly used and machine-readable format;
- request transmission of eligible data to another controller where technically feasible;
- withdraw consent where processing is based on consent;
- not be subject to certain decisions based solely on automated processing where the legal requirements apply.
To exercise a data-protection right, contact:
Subject: Data protection request
We may request information reasonably necessary to verify your identity before processing the request.
We will respond within the time limits established by applicable law.
8. RIGHT TO COMPLAIN TO A SUPERVISORY AUTHORITY
If you believe that your personal data has been processed in breach of applicable data-protection law, you have the right to lodge a complaint with a competent supervisory authority.
For Spain, the competent authority is:
Agencia Española de Protección de Datos (AEPD)
You may also have the right to complain to the competent supervisory authority in another EU/EEA Member State where applicable.
9. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses cookies and similar technologies.
Some technologies are strictly necessary for the website, checkout, security or other essential functionality.
Other technologies may be used for purposes such as:
- remembering preferences;
- analytics;
- measuring website performance;
- advertising;
- measuring advertising effectiveness;
- personalisation.
Where applicable law requires consent, non-essential cookies and similar technologies will be subject to the choices made through our cookie consent mechanism.
You can manage your choices through the cookie settings available on the website.
Further information is provided in our Cookie Policy.
10. PROFILING AND AUTOMATED PROCESSING
We may use information about browsing activity, purchases or interactions with our services to create audiences, measure advertising effectiveness or personalise marketing where legally permitted.
Where such activities require consent, they will be subject to your consent choices.
SKLEYS does not intend to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you unless such processing is permitted under applicable law and the required safeguards are provided.
You may object to processing for direct-marketing purposes at any time.
11. CHILDREN AND MINORS
The SKLEYS store is not specifically directed at children.
We do not knowingly seek to collect personal data directly from children in circumstances where parental or guardian authorisation is required by applicable law.
Under Spanish data-protection law, a child under 14 generally cannot independently consent to processing based solely on consent where parental or guardian authorisation is legally required.
If we become aware that personal data has been collected from a child contrary to applicable law, we will take appropriate steps to delete or otherwise lawfully process that information.
12. DATA SECURITY
We implement reasonable and appropriate technical and organisational measures designed to protect personal data against:
- unauthorised access;
- accidental loss;
- alteration;
- unauthorised disclosure;
- destruction;
- other unlawful processing.
These measures may include encryption in transit, access controls, secure hosting and appropriate organisational procedures.
However, no internet transmission, website or electronic storage system can be guaranteed to be completely secure.
Where a personal-data breach occurs, we will assess and handle it in accordance with applicable data-protection law, including notification to the competent supervisory authority and affected individuals where legally required.
13. THIRD-PARTY WEBSITES AND SERVICES
Our website may contain links to websites, social networks or services operated by third parties.
For example, SKLEYS may link to social-media services such as Instagram or TikTok.
Those third parties operate under their own privacy policies and are responsible for their own processing activities.
We recommend reviewing the privacy information provided by the relevant third party before providing personal information to it.
14. CALIFORNIA PRIVACY RIGHTS
If you are a California resident and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), applies to our processing of your personal information, you may have additional rights under California law.
Depending on the circumstances and applicable legal thresholds, these may include rights to:
- know or access certain personal information;
- request deletion;
- request correction;
- receive information about categories of personal information collected, used or disclosed;
- opt out of certain sales or sharing of personal information where applicable;
- limit certain uses of sensitive personal information where applicable;
- not receive discriminatory treatment for exercising applicable privacy rights.
SKLEYS does not sell personal information for monetary consideration.
Certain advertising activities may nevertheless constitute "sharing" for cross-context behavioural advertising under California law where the CCPA/CPRA applies.
Where legally required, appropriate mechanisms will be provided to exercise applicable opt-out rights.
Requests may also be submitted to:
We may need to verify your identity before completing a request.
15. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect:
- changes to our services;
- changes to the technologies or providers we use;
- operational changes;
- changes in applicable law or regulatory guidance.
The latest version will be published on skleys.com with an updated revision date.
Where legally required, we will provide additional notice of material changes.
16. CONTACT
Brand: SKLEYS
Website: skleys.com
Email: hello@skleys.com
Data-protection requests: hello@skleys.com
Recommended subject line: Data protection request
Customer service hours: Monday-Friday 10:00-18:00 CET