Privacy policy

PRIVACY POLICY

Last updated: October 5, 2026

This Privacy Policy explains how Projecta Goal ("we", "us") collects, uses and protects your personal data when you visit www.projecta-goal.com (the "Store") or buy from us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

Controller: Projecta Goal

Email: projectagoal@gmail.com

Phone: +34 674 374 842

For any privacy question or request, email us at projectagoal@gmail.com.

2. Personal data we collect

Data you give us:

Identity and contact data: name, email address, phone number, and shipping and billing address.

Order data: products purchased, order value, order history and communications with us.

Payment data: payments are processed directly by our payment providers. We do not receive or store your full card details. We only receive limited information, such as payment confirmation, the type of payment method and the last digits of the card.

Newsletter data: your email address and your consent to receive marketing emails.

Customer service data: the content of messages, photos or videos you send us, for example about a return or a damaged product.

Data collected automatically:

Device and browsing data: IP address, browser, device, operating system, language, approximate location, pages visited, referring website and time spent on the Store.

Cookie and tracking data: collected through cookies and similar technologies, including the Meta Pixel (see section 7).

3. Why we use your data and our legal basis

Processing and delivering your order, sending order and shipping confirmations, and managing returns, refunds and warranty claims. Legal basis: performance of a contract (Art. 6.1.b GDPR).

Answering your questions and providing customer service. Legal basis: performance of a contract and legitimate interest (Art. 6.1.b and 6.1.f GDPR).

Sending our newsletter and promotional emails. Legal basis: your consent (Art. 6.1.a GDPR).

Showing you personalised ads and measuring their performance with the Meta Pixel. Legal basis: your consent through the cookie banner (Art. 6.1.a GDPR).

Preventing fraud and keeping the Store secure. Legal basis: legitimate interest (Art. 6.1.f GDPR).

Keeping invoices and accounting records, and meeting tax and legal obligations. Legal basis: legal obligation (Art. 6.1.c GDPR).

Improving the Store and understanding how it is used. Legal basis: legitimate interest or consent, depending on the cookie (Art. 6.1.f / 6.1.a GDPR).

We do not use your data for automated decision-making that produces legal effects on you.

4. Who we share your data with

We only share your data with the providers who need it to run the Store, and only for the purposes described here:

Shopify (e-commerce platform and hosting).

Payment providers: the methods shown at checkout. Each provider processes your payment data under its own privacy policy.

Shipping carriers and, for shipments outside the European Union, the customs authorities of the destination country, to deliver your order. They receive your name, shipping address, phone number and the order details they need.

Meta Platforms (Facebook and Instagram), for advertising and measurement, only if you accept marketing cookies.

Email marketing provider, to send you the newsletter if you have subscribed.

Public authorities, when required by law.

We do not sell your personal data.

5. International data transfers

Some of our providers, such as Shopify or Meta, may process data outside the European Economic Area, for example in the United States or Canada. In those cases, transfers rely on European Commission adequacy decisions or on appropriate safeguards, such as the Standard Contractual Clauses. You can contact us for more information about these safeguards.

If you order from a country outside the European Economic Area (for example the United Kingdom, Switzerland, Norway, the United States, Canada, Mexico or Australia), your shipping data is transferred to that country because this is necessary to deliver your order (Art. 49.1.b GDPR).

6. How long we keep your data

Order, invoice and accounting data: for the period required by Spanish commercial and tax law, generally 6 years.

Customer service communications: as long as needed to resolve your request, and then for the legal limitation period for possible claims.

Newsletter data: until you unsubscribe or withdraw your consent.

Cookie data: for the duration of each cookie, as shown in the cookie banner.

After these periods, we delete or anonymise your data.

7. Cookies and the Meta Pixel

We use cookies and similar technologies:

Strictly necessary cookies, which make the Store and the cart work. These do not require consent.

Analytics and preference cookies, which help us understand how the Store is used.

Marketing cookies, including the Meta Pixel, which allow Meta to show you relevant ads on Facebook and Instagram and to measure their effectiveness. The pixel may collect information such as the pages you visit, the products you view, what you add to your cart and your purchases.

Non-essential cookies are only placed if you accept them in our cookie banner. You can change or withdraw your consent at any time through the cookie settings link in the Store footer or through your browser settings. To learn more about how Meta processes data, see Meta's Privacy Policy.

8. Newsletter

If you subscribe, we will send you emails about products, offers and news. You can unsubscribe at any time using the "unsubscribe" link in any email or by writing to projectagoal@gmail.com.

9. Your rights

Under the GDPR, you have the right to:

access your personal data;

rectify inaccurate data;

erase your data ("right to be forgotten");

restrict or object to certain processing, including direct marketing;

data portability;

withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, email projectagoal@gmail.com. We may ask you to verify your identity. We will reply within one month.

If you believe we have not handled your data correctly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

If you live outside the European Union, you also have the rights granted by the data protection law of your country (for example in the United Kingdom, Switzerland, the United States, Canada, Mexico or Australia), and you can complain to your country's data protection authority. To exercise them, email us at the same address. We do not sell personal data.

10. Children

The Store is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Security

We use appropriate technical and organisational measures to protect your data, such as encrypted (SSL) connections and secure payment processing. However, no method of transmission over the internet is completely secure.