Order by Sunday 8 November, delivered by 4 December. Free delivery in the Netherlands on every box.

Privacy policy

Courtesy translation. The Dutch version of this policy is the binding text.

Last updated: 3 October 2026

This policy explains how SpanishSecrets handles your personal data when you visit spanishsecrets.com, order, create an account or contact us. If our Terms of service and this policy differ on personal data, this policy applies.

Who is responsible

SpanishSecrets, a sole proprietorship (eenmanszaak) registered in the Netherlands, KVK 42158466, VAT NL005543388B76. Postal address: Oder 20 (E4455), 2491DC Den Haag, The Netherlands. Email: info@spanishsecrets.com. You can also reach us through the contact form. We have no data protection officer.

What we collect, why, and on what basis

  • Your order. Name, delivery and billing address, email, phone number if you give one, what you ordered, and whether you paid. We use it to process, pay for and deliver your order and to handle returns. Basis: performing the agreement with you.
  • Payment. Your card or bank details go straight to the payment provider. We do not see or store them; we only get the status of the payment. Basis: performing the agreement.
  • Invoices and tax records. Order and invoice data. Basis: legal obligation.
  • Your account. If you create an account or sign in (for example with Shop), your contact details and order history. Basis: performing the agreement; your consent for the sign-in option you choose.
  • Your messages. What you write to us through the contact form, the withdrawal form or email, with your name, email and order number. We use it to answer you and to handle complaints and withdrawals. Basis: performing the agreement and our legitimate interest in answering you.
  • Producer introductions. Name, business, place, email, phone, website and message from the producers form. Basis: our legitimate interest in finding suppliers.
  • Newsletter. Your email address when you sign up. Basis: your consent, which you can withdraw at any time. We do not send a newsletter yet; when we do, you can unsubscribe in every message.
  • Security and fraud prevention. Technical data such as your IP address and device information. Basis: our legitimate interest in a secure shop, and the legal duties of our payment provider.

We do not sell your data. We do not take decisions about you based only on automated processing, apart from the fraud checks that Shopify and the payment providers run when you pay.

How long we keep it

  • Order and invoice data: 7 years, because tax law requires it.
  • Messages sent through the forms or by email: 12 months after the last contact, unless they belong to an order. Then we keep them with the order.
  • Producer introductions: 12 months after the last contact, unless we start working together.
  • Newsletter email address: until you unsubscribe.
  • Account data: until you ask us to delete the account, unless we must keep order data (see above).

Who receives your data

We share only what each party needs:

  • Shopify, which runs our shop, checkout, customer accounts and Shop Pay.
  • The payment providers shown at checkout (Shopify Payments, and PayPal if it is offered).
  • The carrier that delivers your parcel.
  • Hostinger (Titan Mail), which hosts our mailbox info@spanishsecrets.com.
  • Our accountant or bookkeeper, when we use one.
  • Authorities, if the law requires it.

These parties handle your data on our behalf or for their own legal duties.

Outside the European Economic Area

Some of these parties, including Shopify, may handle data outside the European Economic Area. They do so with the safeguards the law requires, such as the standard contractual clauses of the European Commission.

Cookies

Our shop uses cookies that are needed to run it, for example for your cart, checkout, security and language. With your consent it also uses analytics cookies from Shopify. We do not use advertising or tracking cookies from other companies. You can change your choice at any time with the "Cookie preferences" link at the bottom of every page.

Your rights

You may ask us for access to your data, correction, deletion, restriction, a copy in a usable format, or object to our use of it. You may withdraw your consent at any time. Email info@spanishsecrets.com. We answer within one month.

Complaints

If you are not satisfied with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or to the authority in your own EU country.

Changes

We may change this policy. The date at the top shows the latest version.