Privacy Policy

PRIVACY POLICY

Last updated: April 2025

1. DATA CONTROLLER

Company name: Koladent
Brand: KOLADENT — CollaGum
Email: hola@koladent.com
Hereinafter, "Koladent", "we" or "the company".

2. DATA WE COLLECT

We collect the following personal data when
you interact with our store:

— Identification data: first and last name.
— Contact data: email, phone,
  postal address.
— Payment data: securely managed by external payment gateways (Stripe, PayPal, or others).
  Koladent does not store bank or card data.
— Browsing data: IP address, browser type,
  pages visited, session time (via
  cookies and analytics tools).
— Communication data: messages you send us by
  email, contact form, or WhatsApp.

3. PURPOSE AND LEGAL BASIS FOR PROCESSING

We process your data for the following purposes:

a) Order and shipping management
   Legal basis: contract execution (Art. 6.1.b GDPR).

b) Customer service
   Legal basis: legitimate interest (Art. 6.1.f GDPR).

c) Sending commercial communications (newsletter)
   Legal basis: explicit consent (Art. 6.1.a GDPR).
   You can withdraw your consent at any time.

d) Store improvement and behavior analysis
   Legal basis: legitimate interest (Art. 6.1.f GDPR).

e) Compliance with legal obligations
   Legal basis: legal obligation (Art. 6.1.c GDPR).

4. DATA RETENTION

We keep your data for the time necessary to
fulfill the purpose for which it was collected:

— Order data: 5 years (tax obligation).
— Newsletter data: until you withdraw
  consent.
— Customer service data: 2 years from the last
  interaction.

5. RECIPIENTS AND TRANSFERS

Your data may be shared with:

— E-commerce platforms: Shopify Inc. (data processor
  under data processing agreement compliant with GDPR).
— Carriers and logistics operators: for order
  delivery.
— Payment gateways: Stripe, PayPal, or others, to
  securely process transactions.
— Marketing tools: only if you have given your
  consent (e.g., Klaviyo, Mailchimp).
— Public authorities: when required by law.

We do not sell, rent, or share your data with third parties
for our own commercial purposes.

Shopify Inc. is certified under the EU-US Data
Privacy Framework. You can review their policy at
shopify.com/legal/privacy.

6. YOUR RIGHTS

Under the GDPR and LOPDGDD, you have the right to:

— Access: know what data we process about you.
— Rectification: correct inaccurate or incomplete data.
— Deletion: request the removal of your data
  ("right to be forgotten").
— Objection: object to processing in certain
  circumstances.
— Restriction: request restriction of processing.
— Portability: receive your data in a structured format.
— Withdrawal of consent: at any time,
  without affecting the lawfulness of prior processing.

To exercise your rights, write to us at:
hola@koladent.com

If you believe the processing does not comply with
the regulations, you may file a complaint with the
Spanish Data Protection Agency (AEPD):
www.aepd.es

7. COOKIES

Our store uses first-party and third-party cookies.
You can manage your cookie preferences in the
banner that appears when you first access the store.

For more information, see our Cookies Policy.

8. SECURITY

We apply appropriate technical and organizational measures to
protect your data against unauthorized access,
loss, alteration, or disclosure, including SSL encryption
on all store communications.

9. CHANGES

Koladent reserves the right to update this policy.
We will notify you of significant changes by email
or through a visible notice in the store.
The date of the last update appears at the beginning
of this document.

10. CONTACT

For any questions related to this policy:
hola@koladent.com