Privacy Policy
Last updated: June 16, 2026
At Dar Warda, we attach great importance to the protection of your personal data. This privacy policy describes the information we collect, how we use, share, and protect it, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the Spanish Organic Law 3/2018 on Personal Data Protection.
1. Data Controller
The data controller for your data is:
- Business name: Dar Warda
- Address: Rúa Leonardo da Vinci 19, Spain
- Email: contact@darwarda.es
- Website: https://darwarda.es
2. Personal Data Collected
We collect the following categories of data:
- Identification data: first name, last name, email address, phone number
- Shipping data: full postal address
- Payment data: payment information is processed directly by our secure payment provider (Shopify Payments) and is not stored on our servers
- Browsing data: IP address, browser type, pages viewed, visit duration, cookies (see our Cookie Policy)
- Communication data: content of messages sent through our contact form or by email
3. Purposes and Legal Basis for Processing
Your data is processed for the following purposes:
| Purpose | Legal basis |
|---|---|
| Order execution and management | Contract performance (Art. 6.1.b GDPR) |
| Product delivery | Contract performance (Art. 6.1.b GDPR) |
| Customer service management | Contract performance (Art. 6.1.b GDPR) |
| Sending newsletters and promotional offers | Consent (Art. 6.1.a GDPR) |
| Improving our website and services | Legitimate interest (Art. 6.1.f GDPR) |
| Compliance with legal and tax obligations | Legal obligation (Art. 6.1.c GDPR) |
| Statistical and marketing analysis | Consent (Art. 6.1.a GDPR) |
4. Data Recipients
Your personal data may be disclosed to the following recipients:
- Shopify Inc. – online store hosting and payment processing
- Shipping carriers – for the delivery of your orders (shared information is limited to name and delivery address)
- Google Analytics – for statistical analysis of site traffic (anonymized data)
- Marketing providers – only with your prior consent
We never sell your personal data to third parties. Data transfers outside the European Economic Area (EEA) are safeguarded by appropriate guarantees (European Commission standard contractual clauses).
5. Data Retention Periods
We retain your data for the following periods:
- Customer data (orders): 5 years from the last order (Spanish accounting and tax obligations)
- Prospecting data: 3 years from the last contact
- Cookies and browsing data: maximum 13 months
- Contact form data: 3 years from the request
After these periods, your data will be deleted or anonymized.
6. Your Rights
In accordance with the GDPR, you have the following rights:
- Right of access: obtain confirmation that your data is being processed and receive a copy
- Right to rectification: correct inaccurate or incomplete data
- Right to erasure: request the deletion of your data under the conditions provided by law
- Right to restriction of processing: restrict processing in certain cases
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interest or direct marketing
- Right to withdraw consent: at any time, without affecting the lawfulness of prior processing
To exercise your rights, contact us at: contact@darwarda.es
We will respond to your request within a maximum of 30 days.
7. Data Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction, or alteration. Our website uses the SSL/TLS protocol to encrypt communications. Payments are processed through PCI-DSS compliant platforms.
8. Cookies
Our website uses cookies to improve your browsing experience. To learn more about the cookies we use and how to manage them, please see our Cookie Policy.
9. Changes
We reserve the right to modify this privacy policy at any time. Any changes will be posted on this page with an updated date. We encourage you to check this page regularly.
10. Supervisory Authority
If you believe that the processing of your data constitutes a violation of the GDPR, you have the right to lodge a complaint with the competent supervisory authority:
Spanish Data Protection Agency (AEPD)
C/ Jorge Juan, 6 – 28001 Madrid
Website: www.aepd.es
11. Contact
For any questions regarding this privacy policy or the processing of your personal data, please contact us:
- Email: contact@darwarda.es
- Address: Dar Warda, Rúa Leonardo da Vinci 19, Spain