Privacy Policy

Last updated: 9 September 2026

This policy explains what personal data we collect when you use wellveil.com, why we use it, who we share it with, and the rights you have. It is written to comply with the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The data controller is:

  • Wellveil — registered name [LEGAL ENTITY NAME — TO BE COMPLETED], NIF/CIF [TO BE COMPLETED]
  • Calle Mercedes Formica 9, Bloque 4, Portal 14, Bajo C, 28232 Las Rozas de Madrid, Spain
  • hello@wellveil.com  ·  +34 634 200 062

For any question about your data, or to exercise any of the rights in section 6, write to that address or email.

2. What we collect

  • Identity and contact data: name, delivery and billing address, email, phone number.
  • Order data: what you bought, order value, delivery details, subscription status, returns and refunds.
  • Payment data: confirmation of payment and the last digits and type of card. We never see or store your full card number — that goes directly to our payment providers.
  • Account data: username and password, if you create an account.
  • Communications: emails and messages you send us, and our replies.
  • Technical and usage data: IP address, device and browser type, pages viewed, what you added to your cart, collected through cookies and similar technologies.
  • Marketing preferences: whether you have consented to receive email marketing.

We do not ask for and do not want health data. Please do not send us details of medical conditions or medication. If you do so in an email, we will keep it only as long as needed to answer you.

3. Why we use it, and our legal basis

  • To fulfil your order and manage your subscription — performance of our contract with you (GDPR Art. 6(1)(b)).
  • To provide customer support — performance of the contract, or our legitimate interest in answering enquiries.
  • To send marketing emails — your consent (Art. 6(1)(a)), which you can withdraw at any time. Every email carries an unsubscribe link.
  • Advertising and analytics cookies — your consent, given through our cookie banner.
  • Fraud prevention and site security — our legitimate interest in protecting the business and our customers.
  • Accounting, tax and legal obligations — compliance with a legal obligation (Art. 6(1)(c)).

4. Who we share it with

We share data only with providers who need it to run the service, under contract and on our instructions:

  • Shopify — the platform hosting this store and processing checkout.
  • Payment providers — to take payment and prevent fraud.
  • Carriers and fulfilment partners — to deliver your order.
  • Email and review platforms — to send order notifications, marketing you have consented to, and review requests.
  • Advertising and analytics providers — only where you have consented.
  • Our accountants and, where legally required, public authorities.

We do not sell your personal data.

5. International transfers

Some of our providers are based outside the European Economic Area, including in the United States. Where data is transferred outside the EEA, we rely on an adequacy decision of the European Commission or on the European Commission’s Standard Contractual Clauses, together with additional safeguards where needed.

6. Your rights

You have the right to:

  • Access the personal data we hold about you
  • Rectify data that is inaccurate or incomplete
  • Erasure of your data, where there is no overriding legal reason for us to keep it
  • Restrict or object to our processing, including profiling for marketing
  • Data portability — receive your data in a machine-readable format
  • Withdraw consent at any time, without affecting processing carried out before you withdrew it

Email hello@wellveil.com. We reply within one month. We may need to verify your identity first. Exercising these rights is free.

7. Complaints

If you think we have handled your data badly, please tell us first. You also have the right to complain to a supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD), www.aepd.es. You may instead complain to the authority in the EU country where you live or work.

8. How long we keep it

  • Order and invoicing records: for as long as tax and commercial law requires (generally 6 years in Spain).
  • Account data: while your account is open, and a reasonable period afterwards.
  • Marketing consent records: until you unsubscribe, plus a record of the withdrawal itself.
  • Support emails: normally up to 2 years after the matter is closed.
  • Cookie data: as set out in the cookie banner, per cookie.

9. Cookies

We use cookies that are strictly necessary to run the site and the cart, and — only with your consent — analytics and advertising cookies. You can accept, refuse or change your choice at any time through the cookie banner or your browser settings. Refusing non-essential cookies does not stop you from shopping.

10. Security

We apply appropriate technical and organisational measures to protect your data. No system is completely secure, so please do not send us sensitive information by unencrypted email.

11. Children

This store is not intended for children. We do not knowingly collect data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.

12. Changes

We may update this policy. The current version is always on this page with its date. If we make a material change, we will tell you.

13. Contact

Wellveil
Calle Mercedes Formica 9, Bloque 4, Portal 14, Bajo C
28232 Las Rozas de Madrid, Spain
Email: hello@wellveil.com
Phone: +34 634 200 062