Privacy policy

PRIVACY POLICY

Last updated: April 2025

1. DATA CONTROLLER

Company Name: Koladent
Trade Name: KOLADENT — CollaGum
Email: hola@koladent.com
Hereinafter, "Koladent", "we", or "the company".

2. DATA WE COLLECT

We collect the following personal data when you
interact with our store:

— Identification data: name and surname.
— Contact data: email, phone number,
  mailing address.
— Payment data: securely managed by external
  payment gateways (Stripe, PayPal, or others).
  Koladent does not store bank or card details.
— Browsing data: IP address, browser type,
  pages visited, session duration (via
  cookies and analytics tools).
— Communication data: messages you send us via
  email, contact form, or WhatsApp.

3. PURPOSE AND LEGAL BASIS FOR PROCESSING

We manage your data for the following purposes:

a) Order and shipping management
   Legal basis: performance of a contract (Art. 6.1.b GDPR).

b) Customer service
   Legal basis: legitimate interest (Art. 6.1.f GDPR).

c) Sending commercial communications (newsletter)
   Legal basis: explicit consent (Art. 6.1.a GDPR).
   You can withdraw your consent at any time.

d) Store improvement and behavior analysis
   Legal basis: legitimate interest (Art. 6.1.f GDPR).

e) Compliance with legal obligations
   Legal basis: legal obligation (Art. 6.1.c GDPR).

4. DATA RETENTION

We retain your data for the time necessary to fulfill
the purpose for which it was collected:

— Order data: 5 years (tax obligation).
— Newsletter data: until you withdraw your
  consent.
— Customer service data: 2 years from the last
  interaction.

5. RECIPIENTS AND TRANSFERS

Your data may be shared with:

— E-commerce platforms: Shopify Inc. (data processor
  under a processing contract compliant with GDPR).
— Carriers and logistics operators: for order
  delivery.
— Payment gateways: Stripe, PayPal, or others, to
  securely process transactions.
— Marketing tools: only if you have given your
  consent (e.g., Klaviyo, Mailchimp).
— Public authorities: when required by law.

We do not sell, rent, or transfer your data to third parties
for their own commercial purposes.

Shopify Inc. is certified under the EU-US Data
Privacy Framework. You can consult their policy at
shopify.com/legal/privacy.

6. YOUR RIGHTS

In accordance with the GDPR and LOPDGDD, you have the right to:

— Access: know what data we process about you.
— Rectification: correct inaccurate or incomplete data.
— Erasure: request the deletion of your data
  ("right to be forgotten").
— Objection: object to processing in certain
  circumstances.
— Restriction: request restriction of processing.
— Data portability: receive your data in a structured format.
— Withdrawal of consent: at any time,
  without affecting the lawfulness of prior processing.

To exercise your rights, please write to:
hola@koladent.com

If you believe that the processing is not compliant with the
regulations, you can file a complaint with the
Spanish Data Protection Agency (AEPD):
www.aepd.es

7. COOKIES

Our store uses first-party and third-party cookies.
You can manage your cookie preferences in the
banner that appears when you first access the store.

For more information, please consult our Cookie Policy.

8. SECURITY

We implement appropriate technical and organizational measures to
protect your data against unauthorized access,
loss, alteration, or disclosure, including SSL encryption
in all store communications.

9. MODIFICATIONS

Koladent reserves the right to update this policy.
We will notify you of significant changes via email
or by a visible notice in the store.
The last updated date appears at the beginning
of this document.

10. CONTACT

For any questions related to this policy:
hola@koladent.com