Privacy Policy
Last updated: May 2026
1. Company Information (Data Controller)
YalaNext SL is the data controller responsible for your personal data under GDPR.
YalaNext SL
Barcelona, Spain
Email: info@yalanext.com
We are responsible for deciding how and why your personal data is processed.
2. Personal Data We Collect
We collect personal data that you provide directly to us, data collected automatically, and data received from third-party services.
Information you provide:
- Name
- Email address
- Billing and shipping address
- Phone number
- Account login details
- Purchase information
- Wishlist activity
- Reviews or feedback
- Newsletter sign-up data
Information collected automatically:
- IP address
- Device and browser information
- Time zone and approximate location
- Website usage and browsing behavior
- Cookies and analytics data
Information from third parties:
- WooCommerce (store platform)
- Stripe (payment processing)
- Mailchimp (email marketing)
- Google Analytics (website analytics)
3. How We Use Your Personal Data
We use your personal data to:
- Process and fulfill orders
- Manage customer accounts
- Provide customer support
- Send marketing emails (if you opt in)
- Improve our Website and services
- Analyze website performance and customer behavior
- Prevent fraud and ensure security
- Comply with legal obligations
4. Legal Basis for Processing (GDPR)
We process your personal data only when we have a legal basis to do so:
- Contract: To process and deliver your orders
- Consent: For newsletters and marketing communications
- Legitimate Interest: To improve our services, understand customer behavior, and grow our business
- Legal Obligation: To comply with applicable laws
5. Cookies and Tracking Technologies
We use cookies and similar technologies to operate our Website and improve your experience.
We use:
- Essential cookies (site functionality)
- Analytics cookies (Google Analytics)
- Marketing cookies (Mailchimp and future tools such as Google Ads)
You can control cookies through your browser settings.
6. Payments
Payments are securely processed through Stripe.
We do not store full payment card details.
7. Sharing Your Data
We do not sell your personal data.
We may share data with trusted third parties only when necessary:
- WooCommerce (website and order management)
- Stripe (payment processing)
- Mailchimp (email communications)
- Google Analytics (website analytics)
- Shipping and logistics providers
All third parties are required to protect your data and use it only for specified purposes.
8. International Data Transfers
As we sell worldwide, your personal data may be transferred and processed outside your country of residence.
Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with GDPR.
9. Data Retention
We retain personal data only for as long as necessary to:
- Provide our services
- Comply with legal obligations
- Resolve disputes
- Maintain business records
10. Your Rights (GDPR)
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Withdraw consent at any time
- Request data portability
You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD): https://www.aepd.es
To exercise your rights, contact us at info@yalanext.com
11. Data Security
We take appropriate technical and organizational measures to protect your personal data.
However, no online transmission or storage system is completely secure.
12. Children’s Privacy
Our Website is not intended for individuals under 13 years of age. We do not knowingly collect personal data from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any updates will be posted on this page.
14. Contact
If you have any questions about this Privacy Policy or your personal data, contact us at: