Privacy policy

This policy explains which personal data we process when you visit uk.sharkforhome.com, place an order or contact us, why we do it and what rights you have. It follows the EU General Data Protection Regulation (GDPR) and applicable local law.

1. Data controller

• Controller: SHARK
• Tax ID: 83836563
• Address: 42 Bridge Road, Saltley, Birmingham, B8 3SF
• Contact email: cargar97@outlook.es

2. Data we collect

• Identity and contact details: name, email address, phone number.
• Shipping and billing details: postal address, country, postcode.
• Order details: products, amounts, currency, date, shipping and return status.
• Payment details: processed directly by the payment gateway. We never store your full card number; we only receive a payment identifier, the last four digits and the result of the transaction.
• Browsing data: IP address, device and browser type, pages visited, cookie and advertising pixel identifiers.
• Communications: the content of the messages you send us.

3. Why we use your data and on what legal basis

• To fulfil your order (performance of a contract): processing the order, payment, delivery, incidents, returns and warranty.
• To answer your questions (contract or legitimate interest).
• To comply with the law (legal obligation): invoicing, keeping tax and accounting records, answering lawful requests from authorities.
• To prevent fraud and protect the store (legitimate interest).
• To send you marketing (consent): only if you opted in; you can withdraw consent at any time through the unsubscribe link or by writing to us.
• To measure and improve the store and our advertising (consent): through cookies and pixels as described in section 7.

4. Who we share your data with

We only share data with providers that need it to serve us, under contract and with GDPR safeguards:

• Payment gateways that process your payment.
• Carriers and logistics partners that deliver your order (name, address, phone).
• Technology providers for hosting, email, customer support and order management.
• Advertising and analytics platforms (Meta, TikTok, Google, Pinterest) when you accept their cookies and pixels.
• Public authorities and courts where the law requires it.

We never sell your data or hand it to third parties for their own marketing.

5. International transfers

Some providers are located outside the European Economic Area (for instance in the United States). In those cases we rely on the Standard Contractual Clauses approved by the European Commission, on the EU-US Data Privacy Framework where the provider is certified, or on other safeguards recognised by the GDPR.

6. How long we keep your data

• Order and invoicing data: for the duration of the relationship and afterwards for as long as tax and commercial law require (usually 4 to 6 years).
• Marketing contact data: until you withdraw consent or ask us to delete it.
• Browsing data: for the lifetime of each cookie (section 7).
• Claims and enquiries: for as long as needed to resolve them and for the limitation period of legal actions.

7. Cookies and pixels

This store uses first-party cookies needed for it to work (cart, chosen currency, payment session) and, if you accept them, third-party cookies and pixels for measurement and advertising: Meta Pixel and Conversions API, TikTok Pixel, Google Ads and Pinterest Tag. They let us know which ads lead to sales and show you relevant advertising. You can manage or withdraw consent in your browser settings or in each platform's tools.

8. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw any consent you gave, by writing to cargar97@outlook.es with the subject "Data protection", stating your name and the email you ordered with. We may ask you to prove your identity.
If you believe we have not handled your request properly you can lodge a complaint with your national data protection authority.

9. Minors

The store is intended for people over 18. We do not knowingly collect data from minors; if we find out that a minor has provided data, we will delete it.

10. Security

We apply appropriate technical and organisational measures: encrypted connections (HTTPS), PCI DSS certified payment gateways, access control and backups.

11. Changes to this policy

We may update this policy to reflect legal or service changes. The version in force is always the one published on this page, with its update date.