Privacy Policy

1. Introduction

This Privacy Policy describes how CHILIS LAB SL (“we”, “us”, “our”) collects, uses, and protects the personal data of users (“you”) who visit and place orders on compraveloce.com (the “Website”), in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish data protection legislation (LOPDGDD, Ley Orgánica 3/2018).

2. Data We Collect

When you interact with our Website or place an order, we may collect the following personal data:

• Identity data: first name, last name.
• Contact data: email address, phone number.
• Delivery data: shipping address, country, postal code.
• Order data: products purchased, order value, order date, payment method (Cash on Delivery).
• Technical data: IP address, browser type, operating system, pages visited, referring URL, time and date of visit.
• Communication data: any messages you send us via email or contact forms.

We do not collect payment card data. All orders are fulfilled via Cash on Delivery (COD); no financial data is processed through our Website.

3. Legal Basis for Processing

4. How We Use Your Data

• To process and deliver your orders.
• To communicate order status, updates, and notifications.
• To respond to your inquiries and provide customer support.
• To comply with applicable legal and tax obligations.
• To detect and prevent fraud.
• To analyse Website usage and improve our services.
• To send promotional communications where you have given consent.

5. Data Sharing and Recipients

• Logistics and courier partners: to fulfil and deliver your orders.
• IT service providers: hosting, email, website infrastructure.
• Analytics platforms: for Website traffic analysis (e.g. Google Analytics).
• Advertising platforms: Meta Platforms, TikTok, for advertising purposes where applicable.
• Legal and regulatory authorities: when required by law.

All data processors are bound by appropriate data processing agreements in compliance with GDPR. We do not sell your personal data to third parties.

6. International Transfers

Some service providers may be located outside the EEA. In such cases, data transfers are protected by Standard Contractual Clauses approved by the European Commission or other appropriate safeguards in accordance with GDPR Chapter V.

7. Data Retention

• Order and transaction data: 5 years (Spanish commercial and tax law obligations).
• Customer support communications: 2 years from resolution.
• Marketing data: until you withdraw consent or unsubscribe.
• Website analytics data: up to 26 months.

8. Your Rights

Under GDPR and LOPDGDD, you have the right of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. To exercise any of these rights, contact us at info@compraveloce.com. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a revised effective date.

11. Contact