Privacy policy
Who is responsible. The data controller is House of Caos S.L. (FHOR), CIF B-93796571, Av. Pío XII, 1, Esc. 5, Piso 6º, Pta. 11, 46009 Valencia, Spain. Contact: hello@fhor.me.
What data we process. Identification and contact data (name, email, phone, shipping and billing address), order and subscription data, account data, communications with us, and technical browsing data (IP address, device, cookies). Payment card data is processed by the payment provider; we do not store it.
Purposes and legal basis.
|
Purpose |
Legal basis |
|---|---|
|
Process orders and subscriptions, deliveries, returns and customer service |
Performance of the contract (art. 6.1.b GDPR) |
|
Invoicing, tax and accounting obligations |
Legal obligation (art. 6.1.c GDPR) |
|
Fraud prevention and website security |
Legitimate interest (art. 6.1.f GDPR) |
|
Marketing emails and newsletter |
Your consent (art. 6.1.a GDPR), which you can withdraw at any time |
|
Non-essential cookies (analytics, advertising) |
Your consent, given through the cookie banner |
How long we keep it. For as long as the contractual relationship lasts and, afterwards, for the periods required by law (for example, 6 years for accounting records). Marketing data is kept until you withdraw consent.
Who we share it with. Only with providers that help us run the store, under data processing agreements: Shopify (e-commerce platform and payments), Terra Logistika Servicios Integrales S.L. (order preparation), parcel carriers (delivery), and email and analytics providers where applicable. We do not sell your data.
International transfers. Some providers, such as Shopify, may process data outside the European Economic Area. In that case transfers rely on adequacy decisions or the European Commission's Standard Contractual Clauses.
Your rights. You can request access, rectification, erasure, restriction, portability and objection, and withdraw consent at any time, by writing to hello@fhor.me. If you believe your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).