Privacy Policy
Welcome to The Spanish Alchemist
This Privacy Policy of The Spanish Alchemist (TSA) applies to browsing our website www.thespanishalchemist.com
as well as the purchase of our products through it.
Who is responsible for processing your personal data?
ALCHEMY SKINCARE, SL, with registered office at Avinguda Diagonal 536, Principal, 08006 Barcelona, Spain, with CIF B23840580 and email address wecare@thespanishalchemist.com
(hereinafter, “TSA”).
Data Protection Officer: wecare@thespanishalchemist.com
What personal data do we collect about you?
Identification details: Name, surname, postal and email address, and telephone number.
Payment information: Payments for our products are processed through secure payment gateways (such as Shopify Payments, PayPal, or RedSYS). TSA does not store or collect your complete credit card or payment method details.
Direct communications: Any data you voluntarily send to our email address wecare@thespanishalchemist.com
.
Social Media Interaction: Any information you voluntarily share on TSA's social media channels (Pinterest, LinkedIn, Snapchat, Facebook, Instagram, YouTube, and TikTok). This information is subject to each platform's privacy policy. We recommend reviewing the privacy settings of your social media profiles.
How do we obtain your personal data?
We collect and process the following data:
You make it easier for us by buying our products through our Shopify store.
You give us this by subscribing to our newsletter through Klaviyo.
You voluntarily send it to our email address.
You voluntarily share on our official social media channels.
Do we process data of minors?
The sale of our products is not directed to minors. Individuals under the age of 16 must have parental, guardian, or legal representative authorization to register or purchase. The TSA reserves the right to request proof of such authorization at any time.
For what purposes do we process your personal data?
TSA processes your personal data for:
To provide you with the information you request about our products.
Register as a user and manage your account on Shopify.
To ensure the correct processing, laboratory manufacturing, and delivery of your order.
Managing our social media presence and advertising. By interacting with our profiles on Pinterest, LinkedIn, Snapchat, Facebook, Instagram, YouTube, or TikTok, you consent to our communication with you through these platforms. You can revoke this consent at any time by writing to wecare@thespanishalchemist.com
.
Newsletters and commercial communications
TSA uses Klaviyo to send newsletters and marketing communications to users who have given their explicit consent. This includes lab updates, promotions, and skincare tips. You can withdraw your consent at any time by clicking “unsubscribe” at the bottom of any email or by writing to us at wecare@thespanishalchemist.com
.
Who has access to your personal data?
Your personal data will only be shared with the entities necessary to fulfill our service:
Shopify: Our e-commerce platform.
Klaviyo: Our marketing and newsletter platform.
Logistics partners: Courier companies used to deliver your order.
Cloud services: Data can be processed by secure providers that comply with international data protection standards.
How long do we keep your data?
Your personal data will be kept for as long as necessary to fulfill the purposes for which it was collected (for example, managing your account or delivering an order). For marketing purposes, data is kept until you withdraw your consent.
What security measures do we apply?
The TSA employs technical and organizational security measures to ensure the confidentiality, availability, and resilience of our systems. When you use Shopify, your checkout experience is protected by industry-standard encryption.
What are your rights?
You can exercise the following rights by writing to wecare@thespanishalchemist.com
:
Access / Rectification: Request to view or correct your data.
Deletion: Request that we delete your personal data.
Objection / Limitation: To object to or limit the processing of your data.
Portability: Request a copy of your data in a structured format.
Complaint: You have the right to file a complaint with the Spanish Data Protection Agency (AEPD).