Privacy Policy

Last updated: 20-10-2025
Website Owner: Ivyra Sartoria
Email: info@ivyrasartoria
Website: https://www.ivyrasartoria.com
Registered Address: Zaragoza, Spain
Country of Registration: Spain

1. Introduction

At Ivyra Sartoria, we respect your privacy and are committed to protecting your personal data in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and Organic Law 3/2018, on the Protection of Personal Data and Guarantee of Digital Rights.
This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding that information.

By using this website, you consent to the collection and use of your information in accordance with this policy.

2. What Information We Collect

When you visit our website or make a purchase, we may collect the following types of personal information:

Identification data: name, surname, and contact details.
Contact information: email address and shipping (if applicable).
Payment data: processed securely by third-party platforms (e.g., PayPal, Stripe, Etsy). Ivyra Sartoria does not store full credit card details.
Technical data: browser type, IP address, device information, and cookies for analytics and functionality.
User interaction data: pages visited, time on site, downloads, or actions taken on the website.

3. How We Use Your Data

We use your personal data only for legitimate and transparent purposes, including:

Processing and delivering digital product orders.
Managing customer service and responding to inquiries.
Sending purchase confirmations, pattern updates, or essential communications.
Providing access to exclusive content or newsletters (with your consent).
Analysing site performance and improving user experience.
Complying with legal obligations under Spanish and EU law.

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

Your personal data is processed under the following lawful bases as outlined in the GDPR:

Contractual necessity: to process and deliver your digital purchase.
Legal obligation: to comply with Spanish tax or consumer protection laws.
Consent: for newsletters, marketing, or optional contact forms.
Legitimate interest: to maintain and improve website performance and customer experience.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting obligations.

Order and billing data are kept for a minimum of 5 years in accordance with Spanish tax law.
Email communication data may be stored for up to 2 years for customer support tracking.
You may request deletion of your personal data at any time (see Section 8).

6. Data Sharing and Third Parties

We only share your personal data with trusted third-party providers essential to the operation of our business, such as:

Payment processors (PayPal, Stripe, Etsy, etc.)
Email marketing tools (Mailchimp, Klaviyo, etc.)
Website analytics services (Google Analytics, etc.)

All third-party partners comply with GDPR and have data processing agreements ensuring your data remains secure.
We never sell or share personal information with unauthorised entities.

7. Data Security

Ivyra Sartoria implements appropriate technical and organisational measures to safeguard your information from unauthorised access, loss, or misuse.
All personal data is stored on secure servers, and communications through our website use SSL encryption.

8. Your Data Rights (Under GDPR)

As a data subject, you have the following rights:

Right of access: to request a copy of your personal data.
Right to rectification: to correct inaccurate or incomplete information.
Right to erasure (“right to be forgotten”): to request deletion of your data.
Right to restriction: to limit processing in certain circumstances.
Right to portability: to receive your data in a structured, machine-readable format.
Right to object: to object to processing for legitimate interests or direct marketing.

To exercise these rights, contact us at info@ivyrasartoria.com.
You also have the right to file a complaint with the Agencia Española de Protección de Datos (AEPD) if you believe your rights have been violated.

9. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience and analyse website performance.
Cookies are small text files stored on your device that help us recognise returning visitors and track preferences.

You can manage or disable cookies in your browser settings at any time. For more details, see our Cookie Policy.

10. International Data Transfers

In cases where personal data is transferred outside the European Economic Area (EEA), Ivyra Sartoria ensures that appropriate safeguards — such as Standard Contractual Clauses (SCCs) — are applied in accordance with GDPR requirements.

11. Policy Updates

We may update this Privacy Policy periodically to reflect changes in legal requirements or our practices.
Any updates will be posted on this page with a revised “Last Updated” date. We encourage you to review this policy regularly.

12. Contact Information

For all privacy-related questions, data access requests, or complaints, please contact:
info@ivyrasartoria.com
Supervisory Authority: Agencia Española de Protección de Datos (AEPD) – www.aepd.es