Privacy Policy
1. Data controller
- Company: GRUPO ORGGEÏL, S.L.
- Tax ID (NIF): B10582963
- Address: Pso. Marítimo Alcalde Fco. Vázquez 55, 5ºD, 15002 A Coruña (Spain)
- Privacy contact: management@orggeil.com
- Website: www.orggeil.com
2. What data we process
- Identity and contact: first and last name, email, phone number, shipping and billing address.
- Orders and transactions: products purchased, amounts, payment method (we do not store your full card details: they are handled by the payment provider), returns and exchanges.
- Customer account and Members Club: login credentials, membership level, purchase history and preferences.
- Communications: messages you send us by email, chat or social media.
- Browsing: IP address, device, pages visited and cookie data, according to your consent preferences.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Managing your order: payment, shipping, exchanges, returns and warranties | Performance of a contract (art. 6.1.b) |
| Managing your customer account and your access to the Members Club | Performance of a contract (art. 6.1.b) |
| Answering your questions and complaints | Performance of a contract or legitimate interest (art. 6.1.b and f) |
| Sending you our newsletter, launch alerts and promotions | Consent (art. 6.1.a), which you can withdraw at any time |
| Sending you communications about products similar to those you have bought | Legitimate interest (art. 21.2 of Spanish law LSSI), with an unsubscribe option in every email |
| Measuring website use and showing personalised advertising | Consent through the cookie banner (art. 6.1.a) |
| Preventing payment fraud | Legitimate interest (art. 6.1.f) |
| Meeting accounting, tax and consumer law obligations | Legal obligation (art. 6.1.c) |
4. How long we keep it
- Orders and invoicing: for the duration of the business relationship and then for the period required by law (6 years for commercial records, art. 30 of the Spanish Commercial Code).
- Customer account and Members Club: while the account is active; if you close it, the data is blocked and deleted when the legal periods end.
- Newsletter and marketing: until you withdraw your consent or unsubscribe.
- Enquiries and customer service: for as long as needed to resolve them and then for the period in which claims may arise.
- Cookies: for the period stated in our Cookie Policy.
Once these periods end, the data is blocked and only kept available to courts and public authorities while liability may arise (art. 32 of Spanish law LOPDGDD).
5. Who we share your data with
We do not sell your data. We only share it when needed to provide our service or when required by law:
- Public authorities (for example, the tax authority) when required by law.
- Providers processing data on behalf of Orggeïl (data processors), under contracts that guarantee confidentiality and security:
| Service | Provider |
|---|---|
| Online store platform | Shopify |
| Email marketing and forms | Klaviyo |
| Shipping | DHL Express, Correos Express |
| Payments | Shopify Payments, PayPal, Klarna, Clearpay, Revolut, BBVA |
| Returns and exchanges | REVER |
| Web analytics | Google Analytics |
| Advertising | Meta, Google, TikTok, Pinterest |
6. International transfers
Some providers may process data outside the European Economic Area, for example in the United States, Canada or the United Kingdom. In those cases, the transfer relies on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework for certified companies) or on standard contractual clauses approved by the Commission. You can ask us for more information at management@orggeil.com.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and withdraw any consent you have given, without affecting processing carried out before.
Email us at management@orggeil.com stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We will reply within one month, which may be extended by two further months for complex requests.
You can also unsubscribe from our newsletter using the link in every email.
If you believe we have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the authority in your country (in the UK, the ICO: ico.org.uk).
8. Cookies
We use our own and third-party cookies. Technical cookies, needed for the website to work, are always set; analytics and advertising cookies only if you accept them in the banner. You can change your choice at any time. Full details are in our Cookie Policy.
9. Children
Our website is not aimed at children under 14. If you are under 14, please do not give us personal data without the consent of your parents or guardians (art. 7 of Spanish law LOPDGDD).
10. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The current version will always be published on this page, with its update date.
Last updated: 7 November 2026
