Cart
Your cart is empty
Last updated: 3 June 2026
The controller responsible for processing your personal data is:
Solambra
NIF/NIE: Z2549138F
Registered Office: Avda Pierre Cibié 10, 23600 Martos (Jaén), Spain
Email: hello@solambra.uk
Telephone: +34 634 28 91 42
Website: solambra.uk
Any questions regarding this Privacy Policy or the exercise of your rights may be sent to hello@solambra.uk.
This Privacy Policy has been drafted in accordance with:
UK General Data Protection Regulation (UK GDPR)
Data Protection Act 2018
| Category | Data | When |
|---|---|---|
| Identity | First name, last name | Account creation, order |
| Contact details | Postal address, email address, telephone number | Order, contact, newsletter |
| Account data | Username, encrypted password | Account creation |
| Order data | Products purchased, amounts, order history | When making a purchase |
| Payment data | Processed directly by Shopify Payments / Stripe — we never store card numbers | When making a purchase |
| Communications | Content of your messages | Contact, customer service |
When you browse our website, we collect data through cookies and similar technologies:
IP address, browser type, operating system, language
Pages viewed, visit duration, browsing behaviour
Device information
Source of your visit (referrer, advertising campaign)
| Purpose | Legal Basis (UK GDPR) |
|---|---|
| Process and dispatch your orders | Performance of a contract (Article 6(1)(b)) |
| Manage your customer account | Performance of a contract (Article 6(1)(b)) |
| Issue and retain invoices and accounting records | Legal obligation (Article 6(1)(c)) |
| Send marketing emails and newsletters | Consent (Article 6(1)(a)) — which may be withdrawn at any time |
| Deliver targeted advertising (Meta, Pinterest) | Consent (Article 6(1)(a)) — through the cookie banner |
| Audience measurement and statistical analysis | Legitimate interest (Article 6(1)(f)) or consent depending on the cookies used |
| Prevent fraud and secure the website | Legitimate interest (Article 6(1)(f)) |
| Respond to your requests (customer service, returns) | Performance of a contract (Article 6(1)(b)) |
Your personal data is never sold. It is shared only with the following recipients, strictly for the purposes of carrying out their services.
Shopify Inc. (Canada) — online store hosting and order processing
Shopify Payments / Stripe — secure payment processing
Klaviyo, Inc. (United States) — marketing and transactional emails
Shipping carriers (depending on the delivery method) — for delivering your orders
Meta Platforms Ireland Ltd. (Ireland/EU + transfers to Meta US) — Meta Pixel for Facebook and Instagram advertising
Pinterest Europe Ltd. (Ireland/EU) — Pinterest Tag for Pinterest advertising
Google Analytics (if used) — audience measurement
Tax and social security authorities (Agencia Tributaria, Tesorería General de la Seguridad Social) — legal obligations
Judicial authorities — where legally required
Some of our service providers (Shopify, Klaviyo, Meta and Pinterest) may process your personal data in the United States or Canada.
These transfers are governed by:
For the United States: participation in the EU–US Data Privacy Framework (European Commission adequacy decision of 10 July 2023)
Where applicable: Standard Contractual Clauses adopted by the European Commission (Article 46(2)(c) GDPR)
| Data Category | Retention Period |
|---|---|
| Customer account data | For the duration of the account + 3 years after the last activity |
| Order and invoicing data | 6 years (Spanish accounting and tax obligations) |
| Prospect data (newsletter without purchase) | 3 years from the last contact or click |
| Cookies | Depending on their nature, from the session duration up to a maximum of 13 months |
| Customer service data | 3 years after the last contact |
| Payment data | Not stored by us (processed by Shopify Payments / Stripe according to their own policies) |
After these periods, your personal data is deleted or anonymised.
Our website uses different categories of cookies:
Strictly necessary cookies (shopping cart, session, security) — no consent required
Analytics cookies — subject to consent
Marketing and advertising cookies (Meta Pixel, Pinterest Tag) — consent required
You may modify or withdraw your consent at any time via the cookie banner available on our website (the "Manage my cookies" link at the bottom of the page).
You may also configure your browser to block certain cookies. Please note that blocking essential cookies may prevent the website from functioning correctly.
In accordance with the UK GDPR, you have the following rights regarding your personal data:
Right of access: obtain a copy of the personal data we hold about you
Right to rectification: request the correction of inaccurate personal data
Right to erasure ("right to be forgotten"): request the deletion of your personal data
Right to restriction of processing: request that we suspend certain processing activities
Right to data portability: receive your personal data in a structured, commonly used and machine-readable format
Right to object: object to certain processing activities, particularly direct marketing
Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal
To exercise these rights, please email us at hello@solambra.uk, specifying your request. We may ask you to provide proof of identity in order to process your request securely.
We will respond within a maximum period of one month (which may be extended to three months for complex requests).
If you believe that the processing of your personal data does not comply with the applicable regulations, you may lodge a complaint with the competent supervisory authority:
United Kingdom: Information Commissioner's Office (ICO) — https://ico.org.uk
Spain: Agencia Española de Protección de Datos (AEPD) — www.aepd.es
We implement technical and organisational measures to protect your personal data, including HTTPS/SSL encryption, regular backups, restricted access for authorised personnel only, and hosting with GDPR-compliant service providers.
As no security measure can guarantee absolute protection, we recommend that you do not transmit sensitive information through unsecured channels (unencrypted email, non-HTTPS forms).
In the event of a personal data breach likely to result in a high risk to your rights and freedoms, you will be informed as soon as possible in accordance with the applicable data protection legislation.
Our services are not intended for individuals under the age of 13.
We do not knowingly collect personal data from children. If you are the parent or legal guardian of a child under the age of 13 who has provided personal data through our website, please contact us at hello@solambra.uk to request its deletion.
Our website may contain links to other websites (social media, partners, etc.). This Privacy Policy applies only to solambra.uk.
We encourage you to consult the privacy policies of any third-party websites you visit.
This Privacy Policy may be updated to reflect changes in our practices or legal requirements.
The "Last updated" date at the top of this document indicates the latest version.
In the event of a significant change, you will be informed by means of a notice on our website and/or by email.
For any questions regarding this Privacy Policy or your personal data, please contact:
Solambra
Email: hello@solambra.uk