Privacy Policy

Last updated: June 2026

At OÄKI Craft Studio we take the protection of your personal data very seriously. This policy explains what data we collect, how we use it and what your rights are under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data (LOPDGDD).

1. Data Controller

OÄKI Craft Studio
Contact email: info@oaki.es
Website: www.oaki.es

2. Data We Collect

When you place an order or register in our shop, we may collect the following data:

  • First name and surname
  • Delivery and billing address
  • Email address
  • Phone number
  • Payment details (processed securely by Stripe or PayPal; we do not store card details)
  • Product customisation preferences (thread colours, frame type)
  • Browsing data (technical and analytics cookies)

3. Purpose and Legal Basis for Processing

Purpose Legal basis
Processing and shipping your order Performance of a contract (Art. 6.1.b GDPR)
Customer service and complaint handling Legitimate interest / performance of a contract
Newsletter and marketing communications Consent (Art. 6.1.a GDPR)
Accounting and tax obligations Legal obligation (Art. 6.1.c GDPR)
Statistical analysis of the online shop Legitimate interest (Art. 6.1.f GDPR)

4. Recipients of the Data

Your data may be shared with:

  • Shopify Inc. — e-commerce platform (data processor)
  • Stripe / PayPal — payment processors
  • Carrier — for delivery of the order
  • Public authorities — when legally required

We do not sell or transfer your data to third parties for their own commercial purposes.

5. International Transfers

Shopify Inc. is based in Canada, a country considered adequate by the European Commission. For transfers to other countries outside the EEA, the safeguards set out in Art. 46 GDPR (standard contractual clauses) apply.

6. Retention Period

  • Order data: 5 years (tax and commercial obligations)
  • Newsletter: until you withdraw your consent
  • Browsing data / cookies: depending on the type of cookie (see Cookie Policy)

7. Your Rights

You have the right to:

  • Access — know what data we process about you
  • Rectification — correct inaccurate data
  • Erasure — request the deletion of your data
  • Objection — object to certain processing
  • Restriction — ask us to restrict processing
  • Portability — receive your data in a structured format
  • Withdraw your consent at any time, without affecting the lawfulness of prior processing

To exercise your rights, write to us at info@oaki.es. If you are not satisfied with our response, you can lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

8. Cookies

Our shop uses technical cookies necessary for the site to work and, with your consent, analytics cookies to improve the shopping experience. You can manage your preferences in the cookie banner.

9. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or accidental destruction, in accordance with Art. 32 GDPR.

10. Changes to this Policy

We may update this policy when necessary. We will inform you of significant changes through a visible notice in the shop or by email.

OÄKI Craft Studio · info@oaki.es · www.oaki.es