Privacy policy

Privacy Policy


Last updated: 20 March 2026


Susmie's Collection operates this store and website, including all related information, content, features, tools, products and services, to offer you, the customer, a personalised shopping experience (the "Services"). Susmie's Collection runs on Shopify, which enables us to provide you with the Services. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction through the Services, or when you communicate with us. In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing and disclosure of your personal information.


Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described herein.


PERSONAL INFORMATION WE COLLECT OR PROCESS


When we use the term "personal information", we mean information that identifies you or that can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been anonymised so that it cannot identify you or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences derived from this information, depending on how you interact with the Services, where you reside and as permitted or required by applicable law:


  • Contact details, including your name, address, billing address, shipping address, telephone number and email address.

  • Financial information including credit card numbers, debit cards and financial account numbers, payment card information, financial account information, transaction details, payment method, payment confirmation and other payment details.

  • Account information, including username, password, security questions, preferences and settings.

  • Transaction information, including the items you view, add to your cart, add to your wishlist, purchase, return, exchange or cancel, and your previous transactions.

  • Communications with us include the information you include in such communications, for example when sending an enquiry to customer service.

  • Device information, including information about your device, browser or network connection, your IP address and other unique identifiers.

  • Usage information, including information relating to your interaction with the Services, including how and when you interact with or browse the Services.


PURPOSE OF DATA PROCESSING 


We may collect personal information from the following sources:


  1. Registration form: personal data collected through this form will be used exclusively to create and manage user accounts.


  1. Online purchases: should you acquire any of our products, your personal data will be used exclusively for the administrative management related to the purchased product and to send you promotions and/or advertising of our products.


  1. Newsletter and commercial prospecting: the data collected will be used exclusively to send you newsletters, as well as commercial communications of promotions and/or advertising of our products.


  1. Candidate data: in the event that you have a job interview at our offices or send us your CV through other channels, your data will be used to fill any job vacancy in our company. If you become an employee of our company, your personal data will be used exclusively to manage the employment relationship with SUSMIE'S COLLECTION.


  1. Social Media: the data provided or that may be shared on the Social Networks on which SUSMIE'S COLLECTION is active will be processed in accordance with the Privacy Policies of each Social Network. We recommend that you read and periodically review such Social Networks before interacting with SUSMIE'S COLLECTION.


  1. If you contact us by email, the personal data collected therein will be used exclusively to handle your request.


How long do we keep your data?


Below, and in accordance with current regulations, we inform you of the period for which we will keep your data, which depends on the type of use for which it is intended:


The data of potential customers who, having interacted with “SUSMIE'S COLLECTION” (for example by requesting information), do not end up purchasing any product will be automatically deleted one year after contact, provided that the potential customer has not shown further interest in our products. If you purchase any product, the data will be processed for the duration of the commercial relationship and, once it has ended, for as long as necessary to respond to potential legal liabilities. 


In the event that you give us your consent to inform you about our products, we will keep your data until you indicate your wish not to receive further communications from us. If you have purchased a product, we may send you commercial communications related to our products on the basis of our legitimate interest, unless you object at any time. 


With regard to employment data, this will be processed for the duration of the relationship and, once concluded, for as long as necessary to respond to potential breaches in this area. In the event that an interview is conducted for a job vacancy, your personal data will be kept for a period of one year, after which, if you have not been selected, it will be deleted from our systems.


HOW WE HANDLE YOUR PERSONAL INFORMATION


Depending on how you interact with us or which of the Services you use, we may use your personal information for the following purposes:


  • Providing, personalising and improving the Services. We use your personal information to provide you with the Services, which includes fulfilling our contract with you, processing your payments, managing your orders, remembering your preferences and the items that interest you, sending you notifications related to your account, processing purchases, returns, exchanges or other transactions, creating, maintaining and administering your account, arranging shipping, facilitating returns and exchanges, allowing you to post reviews and creating a personalised shopping experience, such as recommending products related to your purchases. This may include using your personal information to personalise and improve the Services.

  • Marketing and advertising. We use your personal information for marketing and promotional purposes, such as sending you marketing, advertising and promotional communications by email, text message or postal mail, and showing you online advertisements for products or services on the Services or other websites, including based on items you have previously purchased or added to your cart and other activity on the Services.

  • Security and fraud prevention. We use your personal information to authenticate your account, provide you with a secure shopping and payment experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe or malicious activities, protect public safety and ensure the security of our services. If you decide to use the Services and register an account, you are responsible for maintaining the confidentiality of your credentials. We strongly recommend that you do not share your username, password or other login details with anyone.

  • Communicating with you. We use your personal information to provide you with customer support, respond to your enquiries, deliver effective services and maintain our business relationship with you.

  • Legal reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation or other contentious legal proceedings, and to enforce or investigate possible violations of our terms or policies.



LEGAL BASIS FOR DATA PROCESSING

 

The processing of your personal data is based on the following legal bases, in accordance with Regulation (EU) 2016/679 (GDPR):

  • Performance of a contract. We process your data to manage the purchase of products, process payments, manage shipments, returns and provide the requested services.

  • Compliance with legal obligations. We process your data where necessary to comply with applicable legal obligations, such as tax or accounting obligations.

  • Consent. We process your data when you have given us your consent, for example for sending commercial communications or when you send us your CV.

  • Legitimate interest. We process your data to improve our services, prevent fraud, ensure the security of the platform and respond to queries, provided that such interests do not override your rights and freedoms. Also for sending commercial communications, provided you are a customer, and to inform you about our own products and services.

HOW WE DISCLOSE PERSONAL INFORMATION


In certain circumstances, we may disclose your personal information to third parties for legitimate purposes, in accordance with this Privacy Policy. Such circumstances may include:


  • With Shopify, suppliers and other third parties who provide services on our behalf (for example, IT management, payment processing, data analysis, customer service, cloud storage, order and shipping management).

  • With business and marketing partners to provide you with marketing and advertising services. For example, we use Shopify to deliver personalised advertising with third-party services based on your online activity across different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy policies. Depending on where you live, you may have the right to instruct us not to share your information to show you targeted advertising and marketing based on your online activity across different merchants and websites. You can exercise your right to object to these uses here.

  • When you instruct, request or otherwise consent to our disclosure of certain information to third parties, such as to deliver products to you or through the use of social media widgets or login integrations.

  • With our affiliates or within our corporate group.

  • In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligation (including responding to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policy, and to protect or defend the Services, our rights and the rights of our users or others.


RELATIONSHIP WITH SHOPIFY 


The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. The information you submit to the Services will be transmitted to and shared with Shopify, as well as with third parties who may be located in countries other than your country of residence, in order to provide and improve the Services. In addition, to help protect, develop and improve our business, we use certain advanced Shopify features that incorporate data and information obtained from your interactions with our Store, together with other merchants and with Shopify. To provide these advanced features, Shopify may use the personal information collected about your interactions with our store, together with other merchants and with Shopify. In these cases, Shopify is responsible for the processing of your personal information, including responding to your requests to exercise your rights regarding the use of your personal information for these purposes. To learn more about how Shopify uses your personal information and the rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you can exercise certain rights regarding your personal information here: Link to Shopify Privacy Portal.


THIRD-PARTY WEBSITES AND LINKS


The Services may provide links to websites or other online platforms operated by third parties. If you access sites not affiliated with or controlled by us through these links, we recommend that you review their privacy and security policies, as well as their terms and conditions. We do not guarantee and accept no responsibility for the privacy or security of such sites, including the accuracy, completeness or reliability of the information found on them. Information you provide in public or semi-public spaces, including what you share on third-party social media platforms, may also be viewed by other users of the Services and/or users of such platforms, with no limitation on its use by us or by third parties. The inclusion of such links does not, in itself, imply any endorsement of the content of such platforms or their owners or operators, except as expressly indicated in the Services.


CHILDREN'S DATA


The Services are not intended for use by minors, and we do not intentionally collect personal information from minors who are under age in their jurisdiction. If you are the parent or legal guardian of a minor who has provided us with their personal information, you may contact us using the contact details below to request its deletion. As of the effective date of this Privacy Policy, we are not aware that we "share" or "sell" (as those terms are defined in applicable law) personal information of minors under 16 years of age.


SECURITY AND RETENTION OF YOUR INFORMATION

 

Please note that no security measure is perfect or impenetrable, and we cannot guarantee absolute security. In addition, the information you send to us may not be protected during transmission. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.


The length of time we retain your personal information depends on different factors, such as whether we need the information to maintain your account, provide you with services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.


YOUR RIGHTS AND OPTIONS

 

If you reside in the European Economic Area (EEA), you have the following rights in relation to your personal information.

These rights are not absolute and may only apply in certain circumstances. In some cases, we may decline your request as permitted by applicable law.

  • Right of access. You may have the right to request access to the personal information we hold about you.

  • Right of erasure. You have the right to request that we delete the personal information we hold about you.

  • Right of rectification. You have the right to request that we correct inaccurate personal information we hold about you.

  • Right to portability. You may have the right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.

  • Objection to processing and restriction of processing. You have the right to ask us to stop processing your personal information or to restrict its processing for certain purposes.

  • Withdrawal of consent. If the processing of your personal data is based on your consent, you have the right to withdraw it. The withdrawal of your consent will not affect the lawfulness of any processing carried out prior to such withdrawal.


You can exercise any of these rights by contacting us at the email address COMMUNITY@SUSMIES.COM  However, we may request additional information to verify your identity before processing your request, where necessary. We will respond to your request within the timeframes established by applicable regulations.   

 

 

ADDITIONAL INFORMATION FOR USERS RESIDING IN THE UNITED STATES

 

If you reside in the United States, the processing of your personal information may be subject to the applicable legislation in your state of residence, including, but not limited to, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Depending on the applicable regulations, you may have the following rights in relation to your personal information:

  • Right to know what personal information we collect about you, including the categories of data, sources of collection, purposes of processing and categories of third parties with whom it is shared.

  • Right of access. You can request access to the specific personal information we have collected about you.

  • Right of erasure. You can request the deletion of your personal information, subject to certain legal exceptions.

  • Right of rectification. You can request the correction of inaccurate personal information.

  • Right to opt out of the sale or sharing of your personal information for targeted advertising purposes, to the extent that such activity takes place under applicable law.

  • Right to limit the use and disclosure of sensitive personal information, where applicable.

  • Right to data portability, to the extent provided by applicable law.


 

Non-discrimination

 

We will not discriminate against you for exercising any of the rights to which you are entitled under applicable law. This means that we will not deny you goods or services, or offer you a different level or quality of them, for the fact of exercising your privacy rights.

 

 

Authorised agent

 

You may designate an authorised agent to exercise your rights on your behalf. To do so, we may request proof of such authorisation and verify your identity directly before processing the request.

 

 

Verification and response

 

We may request additional information from you to verify your identity before processing your request. We will respond to your request within the timeframes established by applicable law.

 

 

ADDITIONAL INFORMATION FOR USERS RESIDING IN AUSTRALIA

 

If you reside in Australia, the processing of your personal information may be subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our Services, you acknowledge that your personal information may be transferred and processed outside Australia, including in the European Economic Area (EEA).

We take reasonable steps to ensure that any international transfer of data complies with applicable law and that your personal information is adequately protected.

You have the right to access the personal information we hold about you and to request its correction, in accordance with applicable Australian law.

Complaints

If you believe that we have not processed your personal information in accordance with applicable law, you may contact us. You also have the right to lodge a complaint with the competent authority in Australia.

 

 

COMPLAINTS

 

 

If you have any complaint about how we process your personal information, please contact us at the email address COMMUNITY@SUSMIES.COM  Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details indicated below, or to lodge a complaint with the data protection authority of your country. For the European Economic Area (EEA), you can consult here the list of competent data protection supervisory authorities.


INTERNATIONAL TRANSFERS

 

 

Please note that we may transfer, store and process your personal information outside the country in which you reside.


If we transfer your personal information outside the European Economic Area, we will rely on recognised transfer mechanisms, such as the European Commission's Standard Contractual Clauses or any equivalent contract issued by the competent authority, as appropriate, unless the data transfer is to a country that has been determined to provide an adequate level of protection.


CHANGES TO THIS PRIVACY POLICY

 

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.


 

CONTACT

 

 

If you have any questions about our privacy practices or about this Privacy Policy, or if you would like to exercise any of the rights to which you are entitled, please call us or email us at COMMUNITY@SUSMIES.COM or contact us at Ronda del General Mitre 126, Barcelona, B, 08021, ES. For the purposes of applicable data protection legislation, we are the data controllers of your personal data.