Privacy & Cookies

Last updated: June 2026

Who we are

This website is operated by [Business / trading name] ("we", "us"), trading as Olive & Almond Woodcraft, based in Huércal-Overa, Andalucía, Spain. We are the data controller for the personal data described here. You can reach us at hello@oliveandalmondwood.com.

What we collect

• When you contact us: your name, email address and the content of your message.
• When you create an account: your name, email and a securely hashed password (never stored in plain text). You can ask us to delete your account at any time.
• When you place an order: your name, delivery address, email and order details. Card payments are processed securely by our payment provider Stripe — we never see or store your full card details.
• Automatically: basic technical data (such as IP address and browser type) kept by our web host in standard server logs.

How and why we use it

• To reply to your enquiries (our legitimate interest in responding to you).
• To process and deliver your order and provide support (to perform our contract with you).
• To meet our legal obligations, such as keeping tax and order records.

Who we share it with

We share data only with the providers that help us run the shop: our payment provider, our delivery carrier, and our web and email hosts. Where you buy through our Etsy shop, Etsy processes your data under its own privacy policy. We do not sell your personal data.

How long we keep it

We keep enquiry emails only as long as needed to help you, and order records for as long as the law requires (typically several years for tax purposes).

Your rights

Under the GDPR you have the right to access, correct, delete or restrict your data, to object to certain processing, and to data portability. To exercise any of these, email us at hello@oliveandalmondwood.com. You also have the right to complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es).

International transfers

Some of our providers may process data outside the EEA. Where they do, they rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Cookies

This site uses only the essential cookies needed for it to work (for example, to keep items in your basket). We do not currently use advertising or tracking cookies. If we add analytics in future, we will update this policy and ask for your consent first where required.

Note for review: insert the legal business name, confirm the payment provider, retention periods and any analytics before launch. Have a professional review this against the GDPR and Spanish LOPDGDD.