At SÓLLERIA, we take your privacy very seriously and are committed to protecting it. We believe in transparency, ensuring that you understand what personal data we collect, how we use it, and what your rights are regarding your personal information.

This Privacy Policy explains our policies and practices regarding the collection, use, and disclosure of personal data through our website, events, or any other digital platforms. We encourage you to read this Privacy Policy carefully as it provides important information about how we handle your personal data.

This policy is designed to help you easily navigate and find the sections that are relevant to you. You can print the full text of our Privacy Policy by clicking [here]. You can also request a copy of this policy by contacting our customer service.

If you have any questions or comments about this Privacy Policy, please feel free to reach out to us. See the “How to Contact Us” section below for more information.

In this Privacy Policy, "SÓLLERIA," "we," "us," and "our" refer to SÓLLERIA as the controller of your personal data, unless otherwise specified in this Privacy Policy.

• SÓLLERIA is operated by La Casa de Solleria, located at Avenida de Manoteras 8, 28050 Madrid, Spain. We are responsible for processing your personal data when you engage with our website, events, or services.

You can find our full contact details in the “How to Contact Us” section below.

Personal data refers to any information that identifies or can identify an individual, such as a name, address, or email. We may collect personal data either directly from you (for example, when you purchase a product), or indirectly (for example, from your device when interacting with our website or mobile app).

3.1 Information You Provide Directly to Us

You may provide us with personal data in the following ways:

• When you create an account on our website;
• When you subscribe to our newsletter;
• When you make purchases or book services online;
• When you attend our events;
• When you contact our customer service team.

This personal data may include:

• Identity information (e.g., first name, last name, gender, image, nationality);
• Contact information (e.g., postal address, email, phone number);
• Purchase and order details (e.g., purchase history, order details);
• Payment information (e.g., billing address, payment method);
• Preferences (e.g., product preferences, sizing);
• Any other information you provide via forms or communication with us (e.g., feedback, correspondence).

When we request personal information to process your orders or queries, we will inform you of its importance. If you choose not to provide the necessary information, this may delay or prevent us from processing your request.

To ensure that your personal data remains accurate, we encourage you to keep your information up to date. We may also prompt you to update your information periodically.

We ask that you only provide the data that is necessary for your query or purchase, and refrain from sharing sensitive information (e.g., racial or ethnic origin, political opinions, religious beliefs, health data).

3.2 Information Collected Indirectly

We may also collect personal data when you use our digital platforms, such as:

• Browsing data: IP address, device type, browser, operating system, and usage data.
• Cookies and similar technologies: These help us track your browsing activity, enabling us to provide you with a better, personalized digital experience. Some cookies are necessary for the website to function, while others help us with analytics and marketing. For more information on cookies, and to adjust your preferences, please refer to our Cookie Policy.

Additionally, we may collect data about you from third parties, such as a friend or family member who provides your details for event invitations.

If you provide personal data on behalf of someone else, please ensure you have their permission to share this information with us and that they are aware of how we will use it according to this Privacy Policy.

3.3 Minimum Age

We do not knowingly collect personal data from individuals under the age of 16, or any other applicable minimum age set by local law. If you are under this age, please do not provide us with your personal data.

With your express prior consent, you may receive information about SÓLLERIA's offers, services, products, or events (referred to as "Promotional Communications"). This consent is typically obtained when you subscribe to our newsletter, sign up for events, or check a specific box in our forms.

By giving your consent, you agree to receive promotional content directly from SÓLLERIA. We rely on your consent to process the personal data you provide for this purpose. If you no longer wish to receive promotional communications, you can withdraw your consent at any time (see section: "What Rights Do You Have Over Your Personal Data?").

We may ask you to confirm or update your preferences for receiving promotional communications in the following cases:

• If you request additional products or services in the future;
• If there are changes in the law or our business structure.

Your personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, and for the period necessary to establish, exercise, or defend any legal claims.

To determine the most appropriate retention periods, we take into account several factors, including the amount, nature, and sensitivity of your personal data, the reasons for which it was collected, the service you expect from us, and applicable legal requirements. Examples include:

• Prospective customers: If you are a potential customer, your data will be retained for three years from your last interaction with us, after which it will be deleted or archived to meet legal retention obligations.
• Customers: For customers, your data will be retained for the duration of our commercial relationship, and for up to ten years thereafter to comply with legal obligations.
• Cookies: Cookies used on our digital platforms will be stored for up to 13 months from the date they were installed on your device.

We take your privacy seriously and will only disclose your personal data for the purposes listed below:

• Internal Use: Your personal data may be shared with authorized Solleria employees and departments (e.g., customer service, marketing, finance) to process your orders and enhance our services.
• Shopify and Other Service Providers: Since Solleria operates via Shopify’s platform, Shopify acts as a processor of your data to fulfill services on our behalf. Shopify adheres to stringent security measures and privacy policies to ensure your data is protected. For international data transfers, Shopify uses mechanisms such as Standard Contractual Clauses to ensure lawful transfers. Further details can be found in Shopify's Privacy Policy.
• Third-Party Service Providers: We may share your data with trusted third-party providers (e.g., payment processors, marketing services, delivery partners), which are required to process your personal data in line with our instructions and privacy policy.
• Legal Obligations: Solleria may disclose your personal data when required by law, or when necessary to protect the rights, property, or safety of our customers, employees, or third parties.

By using Solleria, you agree to the transfer of your data as described here. For more information on how Shopify handles data, visit their Privacy Policy.

We treat all your personal data as strictly confidential, accessible only to authorized personnel of SÓLLERIA and our trusted third-party providers. These individuals and entities act on our behalf with appropriate technical and organizational safeguards in place to ensure the security and confidentiality of your personal data.

SÓLLERIA has implemented robust security measures to protect your data from unauthorized access, disclosure, and misuse. We follow industry-standard security protocols to prevent data breaches, including encryption, secure storage systems, and access controls. We ensure that only those with a genuine business need can access your data, and they are required to adhere to strict confidentiality agreements.

We also have procedures in place to address any suspected data breaches. Should a breach occur, we will notify you and any applicable regulatory authority as required by law.

While we take significant steps to protect your personal data, it is important to note that transmission over the internet is not entirely secure. Although we do our best to protect your data, we cannot guarantee its complete security during transmission. Any transmission of personal data is at your own risk, and you agree that SÓLLERIA cannot be held responsible for any unauthorized access or use of your data unless legally required.

Once we receive your data, we apply strict security measures to prevent unauthorized access or misuse.

Under applicable data protection laws, you have the following rights regarding your personal data. You may request:

• Right of Access: Obtain a copy of your personal data that we hold.
• Right to Rectification: Correct any inaccuracies or complete your personal data if it's incomplete.
• Right to Erasure (Right to Be Forgotten): Request the deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Restrict the processing of your personal data under certain conditions (e.g., if you dispute its accuracy).
• Right to Data Portability: Receive the personal data you provided in a structured, machine-readable format, or request the transfer of that data to a third party.
• Right to Object to Processing: Object to the processing of your personal data:

If your data processing is based on consent (e.g., for marketing), you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the processing of your data on other legal grounds, such as fulfilling your orders.

If you no longer wish to receive marketing or promotional messages, you can unsubscribe at any time using the link provided in each of our promotional emails. We will update our records promptly, but you may still receive service-related communications as necessary for the products or services you have requested.

Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority if you believe we have infringed upon your data protection rights.

To exercise any of these rights, please contact us using the details in the "How to Contact Us" section. When making a request, you may be required to provide identification information to help protect against fraudulent requests from third parties.

For any inquiries related to your account, withdrawing your consent, general questions, or filing a complaint, you can reach our Customer Service team through the following methods:

• By email: hello@solleria.com

If you have any questions specifically related to marketing emails, you can unsubscribe at any time by clicking the “unsubscribe” link in any of the electronic marketing messages you receive from us.

If you have concerns or questions about our Privacy Policy or how we handle your personal data, please contact our Data Protection Officer at: hello@solleria.com.

This Privacy Policy reflects our current practices and is subject to change or update from time to time. Whenever we make changes, we will update the "Effective Date" at the top of this Privacy Policy to indicate when such changes take effect.

If there are any significant changes to this Privacy Policy, we will notify you through a notice at the beginning of this Privacy Policy and prominently on the SÓLLERIA website homepage.