Privacy Policy

Last updated: May 2026

1. Who We Are

FND SCENTS (“we”, “us”, “our”) is the data controller responsible for your personal data. We operate a niche perfumery boutique located at:

Calle Constitución 7, Bajos 18 · 07001 Palma de Mallorca · Islas Baleares, España
📧 hello@fndscents.com

2. What Personal Data We Collect

We collect personal data when you place an order, contact us, or subscribe to our communications. This may include:

Identity data: first name, last name
Contact data: email address, phone number, delivery address
Transaction data: details of purchases made through our store
Technical data: IP address, browser type, device data, pages visited (collected via cookies)
Marketing preferences: your opt-in or opt-out choices for our communications

We do not collect or store payment card data. Payment transactions are processed securely by Shopify Payments and third-party payment providers.

3. How We Use Your Data

We use your personal data for the following purposes:

Order fulfillment: to process and deliver your orders, send confirmation and shipping updates (legal basis: performance of a contract)
Customer service: to respond to your enquiries and resolve any issues (legal basis: legitimate interest)
Marketing communications: to send you news about new arrivals, events or offers, only if you have explicitly consented (legal basis: consent — you can withdraw at any time)
Legal compliance: to meet our obligations under applicable law, including tax and accounting requirements (legal basis: legal obligation)
Website improvement: to analyse how our website is used and improve the user experience (legal basis: legitimate interest)

4. Who We Share Your Data With

We do not sell your personal data. We may share it with the following trusted third parties who act as data processors on our behalf:

Shopify Inc. — our e-commerce platform provider, which hosts our store and processes order data. Shopify is GDPR-compliant. See Shopify’s Privacy Policy.
Shipping providers — couriers and logistics companies who need your name and delivery address to fulfil your order.
Email service providers — used exclusively to send transactional emails (order confirmations, shipping notifications) and, with your consent, marketing communications.
Legal authorities — where required by law or to protect our legal rights.

5. International Data Transfers

Some of our service providers (including Shopify) may process your data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

6. How Long We Keep Your Data

Order and transaction data: 5 years from the date of purchase, as required by Spanish tax law.
Customer account data: for as long as you maintain an active account, and for up to 3 years after your last interaction with us.
Marketing consents: until you withdraw your consent.
Technical/analytics data: up to 13 months.

7. Cookies

Our website uses cookies — small text files stored on your device — to make the site work properly, remember your preferences, and analyse how the site is used.

Essential cookies: required for the site to function (shopping cart, login sessions). Cannot be disabled.
Analytics cookies: help us understand how visitors interact with the site. We use anonymised data only.
Marketing cookies: used only with your explicit consent to personalise advertising.

You can manage your cookie preferences through your browser settings at any time.

8. Your Rights Under GDPR

Under the General Data Protection Regulation (EU) 2016/679 and Spanish data protection law (LOPDGDD), you have the following rights:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to correct inaccurate or incomplete data.
Right to erasure (“right to be forgotten”): to request deletion of your data, subject to legal retention requirements.
Right to restriction: to request that we limit processing of your data in certain circumstances.
Right to data portability: to receive your data in a structured, machine-readable format.
Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@fndscents.com. We will respond within one month.

9. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Authority:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6 · 28001 Madrid
www.aepd.es

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.