Privacy policy

1. Who is responsible

Sunloom Living S.L., a company established in Spain and trading as Sunloom Living, runs this storefront. For anything to do with your data — a copy, a correction, a deletion, a question — write to hello@sunloomliving.com.

2. The short version

This site has no accounts and no server-side database of visitors. Your basket, your saved pieces, a discount code you have typed in and your cookie choice are stored in your own browser’s local storage, on your device. They are not sent to us and we cannot read them. Clearing the site’s data in your browser removes them completely. An order, once placed, is the first moment any personal data reaches us.

3. What we hold and why

Data	Purpose	Basis	Retention
Name, delivery address, email, optional phone	Fulfilling and delivering an order	Contract	6 years (Spanish commercial and tax law)
What you ordered and what you paid	Order handling, returns, the repair promise	Contract	6 years, then anonymised
Payment confirmation, never card numbers	Knowing an order is paid	Contract	6 years
Email address on its own	The newsletter, if you asked for it	Consent	Until you unsubscribe
Basket, saved pieces, discount code, cookie choice	Keeping your basket between visits	Strictly necessary	In your browser only, never on our servers
Aggregate page views	Seeing which pieces get looked at	Consent	13 months, aggregated, no individual profiles

Card details go directly to the payment provider over their own connection. We never see them and never store them.

4. Cookies and local storage

• Necessary. Local storage entries for your basket, your saved pieces, your cookie choice and the last order reference, so you can see it after checkout. Set regardless, because the shop does not work without a basket. They live in your browser and are not transmitted.
• Measurement. An aggregate count of page and product views. Set only if you choose “That is fine” on the cookie bar, and not set at all if you choose “Basket only”. It can be changed later by clearing the site’s data.

No advertising cookies, no cross-site tracking, no social-network pixels, no data brokers. The Instagram and Pinterest icons in the footer are plain links and load nothing from those services.

5. Who else sees it

Only the processors needed to run the shop, each under a data processing agreement and each given only what it needs:

• The payment provider — name, email, amount
• The carrier — name, address, phone if you gave one
• The email service — your address, for order mail and the newsletter
• The hosting provider — server logs including IP addresses, kept 30 days

We do not sell personal data and we do not pass it on for anyone else’s marketing.

6. Outside the EEA

Our processors are inside the European Economic Area wherever we can arrange it. Where one is not, the transfer is covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.

7. Your rights

Under the GDPR and the Spanish data protection law (LOPDGDD) you can ask for a copy of your data, have it corrected or deleted, restrict how it is used, object to processing based on legitimate interests, have it passed to another provider, and withdraw consent at any time. Email hello@sunloomliving.com; we answer within 30 days and usually within a few.

Where tax law obliges us to keep an invoice, we will say so rather than delete it, and delete it when the period ends.

8. Complaints

You can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), or to the authority in the country where you live. We would rather hear from you first so we can put it right.

9. Changes

If this policy changes in a way that matters, the date at the top changes and we note what moved. Earlier versions are available on request.

Terms & conditions