check_circle error info report
Section 1 — Marquee Banner
Free shipping on orders over £50 Buy 2, get 1 free 30 days to change your mind 100% secure payment Natural & clean formulas Free shipping on orders over £50 Buy 2, get 1 free 30 days to change your mind 100% secure payment Natural and clean formulas
Home Catalog Contact
local_mall 0
local_mall 0

Cart

Ajoutez £50.00 pour la livraison offerte 🚚
50€
70€
140€

Complétez votre rituel

Your cart is empty

Privacy policy

Privacy Policy

Last updated: 3 June 2026

1. Identity of the Data Controller

The controller responsible for processing your personal data is:

Solambra

NIF/NIE: Z2549138F

Registered Office: Avda Pierre Cibié 10, 23600 Martos (Jaén), Spain

Email: hello@solambra.uk

Telephone: +34 634 28 91 42

Website: solambra.uk

Any questions regarding this Privacy Policy or the exercise of your rights may be sent to hello@solambra.uk.


2. Legal Framework

This Privacy Policy has been drafted in accordance with:

  • UK General Data Protection Regulation (UK GDPR)

  • Data Protection Act 2018


3. Personal Data Collected

3.1 Data you provide directly

Category Data When
Identity First name, last name Account creation, order
Contact details Postal address, email address, telephone number Order, contact, newsletter
Account data Username, encrypted password Account creation
Order data Products purchased, amounts, order history When making a purchase
Payment data Processed directly by Shopify Payments / Stripe — we never store card numbers When making a purchase
Communications Content of your messages Contact, customer service

3.2 Data collected automatically

When you browse our website, we collect data through cookies and similar technologies:

  • IP address, browser type, operating system, language

  • Pages viewed, visit duration, browsing behaviour

  • Device information

  • Source of your visit (referrer, advertising campaign)


4. Purposes and Legal Bases for Processing

Purpose Legal Basis (UK GDPR)
Process and dispatch your orders Performance of a contract (Article 6(1)(b))
Manage your customer account Performance of a contract (Article 6(1)(b))
Issue and retain invoices and accounting records Legal obligation (Article 6(1)(c))
Send marketing emails and newsletters Consent (Article 6(1)(a)) — which may be withdrawn at any time
Deliver targeted advertising (Meta, Pinterest) Consent (Article 6(1)(a)) — through the cookie banner
Audience measurement and statistical analysis Legitimate interest (Article 6(1)(f)) or consent depending on the cookies used
Prevent fraud and secure the website Legitimate interest (Article 6(1)(f))
Respond to your requests (customer service, returns) Performance of a contract (Article 6(1)(b))

5. Recipients of Your Data

Your personal data is never sold. It is shared only with the following recipients, strictly for the purposes of carrying out their services.

5.1 Technical Service Providers

  • Shopify Inc. (Canada) — online store hosting and order processing

  • Shopify Payments / Stripe — secure payment processing

  • Klaviyo, Inc. (United States) — marketing and transactional emails

  • Shipping carriers (depending on the delivery method) — for delivering your orders

5.2 Marketing and Advertising Partners (with your consent)

  • Meta Platforms Ireland Ltd. (Ireland/EU + transfers to Meta US) — Meta Pixel for Facebook and Instagram advertising

  • Pinterest Europe Ltd. (Ireland/EU) — Pinterest Tag for Pinterest advertising

  • Google Analytics (if used) — audience measurement

5.3 Other Recipients

  • Tax and social security authorities (Agencia Tributaria, Tesorería General de la Seguridad Social) — legal obligations

  • Judicial authorities — where legally required

  • 6. Transfers of Personal Data Outside the European Union

    Some of our service providers (Shopify, Klaviyo, Meta and Pinterest) may process your personal data in the United States or Canada.

    These transfers are governed by:

    • For the United States: participation in the EU–US Data Privacy Framework (European Commission adequacy decision of 10 July 2023)

    • Where applicable: Standard Contractual Clauses adopted by the European Commission (Article 46(2)(c) GDPR)


    7. Data Retention Periods

    Data Category Retention Period
    Customer account data For the duration of the account + 3 years after the last activity
    Order and invoicing data 6 years (Spanish accounting and tax obligations)
    Prospect data (newsletter without purchase) 3 years from the last contact or click
    Cookies Depending on their nature, from the session duration up to a maximum of 13 months
    Customer service data 3 years after the last contact
    Payment data Not stored by us (processed by Shopify Payments / Stripe according to their own policies)

    After these periods, your personal data is deleted or anonymised.


    8. Cookies

    Our website uses different categories of cookies:

    • Strictly necessary cookies (shopping cart, session, security) — no consent required

    • Analytics cookies — subject to consent

    • Marketing and advertising cookies (Meta Pixel, Pinterest Tag) — consent required

    You may modify or withdraw your consent at any time via the cookie banner available on our website (the "Manage my cookies" link at the bottom of the page).

    You may also configure your browser to block certain cookies. Please note that blocking essential cookies may prevent the website from functioning correctly.


    9. Your Rights

    In accordance with the UK GDPR, you have the following rights regarding your personal data:

    • Right of access: obtain a copy of the personal data we hold about you

    • Right to rectification: request the correction of inaccurate personal data

    • Right to erasure ("right to be forgotten"): request the deletion of your personal data

    • Right to restriction of processing: request that we suspend certain processing activities

    • Right to data portability: receive your personal data in a structured, commonly used and machine-readable format

    • Right to object: object to certain processing activities, particularly direct marketing

    • Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal

    To exercise these rights, please email us at hello@solambra.uk, specifying your request. We may ask you to provide proof of identity in order to process your request securely.

    We will respond within a maximum period of one month (which may be extended to three months for complex requests).


    10. Right to Lodge a Complaint with a Supervisory Authority

    If you believe that the processing of your personal data does not comply with the applicable regulations, you may lodge a complaint with the competent supervisory authority:

    United Kingdom: Information Commissioner's Office (ICO) — https://ico.org.uk

    Spain: Agencia Española de Protección de Datos (AEPD) — www.aepd.es 

  • 11. Data Security

    We implement technical and organisational measures to protect your personal data, including HTTPS/SSL encryption, regular backups, restricted access for authorised personnel only, and hosting with GDPR-compliant service providers.

    As no security measure can guarantee absolute protection, we recommend that you do not transmit sensitive information through unsecured channels (unencrypted email, non-HTTPS forms).

    In the event of a personal data breach likely to result in a high risk to your rights and freedoms, you will be informed as soon as possible in accordance with the applicable data protection legislation.


    12. Children's Data

    Our services are not intended for individuals under the age of 13.

    We do not knowingly collect personal data from children. If you are the parent or legal guardian of a child under the age of 13 who has provided personal data through our website, please contact us at hello@solambra.uk to request its deletion.


    13. Links to Third-Party Websites

    Our website may contain links to other websites (social media, partners, etc.). This Privacy Policy applies only to solambra.uk.

    We encourage you to consult the privacy policies of any third-party websites you visit.


    14. Changes to this Privacy Policy

    This Privacy Policy may be updated to reflect changes in our practices or legal requirements.

    The "Last updated" date at the top of this document indicates the latest version.

    In the event of a significant change, you will be informed by means of a notice on our website and/or by email.


    15. Contact

    For any questions regarding this Privacy Policy or your personal data, please contact:

    Solambra

    Email: hello@solambra.uk