Privacy Policy

Last updated: May 2026

1. Company Information (Data Controller)

YalaNext SL is the data controller responsible for your personal data under GDPR.

YalaNext SL
Barcelona, Spain
Email: info@yalanext.com

We are responsible for deciding how and why your personal data is processed.

2. Personal Data We Collect

We collect personal data that you provide directly to us, data collected automatically, and data received from third-party services.

Information you provide:

Name
Email address
Billing and shipping address
Phone number
Account login details
Purchase information
Wishlist activity
Reviews or feedback
Newsletter sign-up data

Information collected automatically:

IP address
Device and browser information
Time zone and approximate location
Website usage and browsing behavior
Cookies and analytics data

Information from third parties:

WooCommerce (store platform)
Stripe (payment processing)
Mailchimp (email marketing)
Google Analytics (website analytics)

3. How We Use Your Personal Data

We use your personal data to:

Process and fulfill orders
Manage customer accounts
Provide customer support
Send marketing emails (if you opt in)
Improve our Website and services
Analyze website performance and customer behavior
Prevent fraud and ensure security
Comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your personal data only when we have a legal basis to do so:

Contract: To process and deliver your orders
Consent: For newsletters and marketing communications
Legitimate Interest: To improve our services, understand customer behavior, and grow our business
Legal Obligation: To comply with applicable laws

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our Website and improve your experience.

We use:

Essential cookies (site functionality)
Analytics cookies (Google Analytics)
Marketing cookies (Mailchimp and future tools such as Google Ads)

You can control cookies through your browser settings.

6. Payments

Payments are securely processed through Stripe.

We do not store full payment card details.

7. Sharing Your Data

We do not sell your personal data.

We may share data with trusted third parties only when necessary:

WooCommerce (website and order management)
Stripe (payment processing)
Mailchimp (email communications)
Google Analytics (website analytics)
Shipping and logistics providers

All third parties are required to protect your data and use it only for specified purposes.

8. International Data Transfers

As we sell worldwide, your personal data may be transferred and processed outside your country of residence.

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with GDPR.

9. Data Retention

We retain personal data only for as long as necessary to:

Provide our services
Comply with legal obligations
Resolve disputes
Maintain business records

10. Your Rights (GDPR)

You have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Restrict or object to processing
Withdraw consent at any time
Request data portability

You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD): https://www.aepd.es

To exercise your rights, contact us at info@yalanext.com

11. Data Security

We take appropriate technical and organizational measures to protect your personal data.

However, no online transmission or storage system is completely secure.

12. Children’s Privacy

Our Website is not intended for individuals under 13 years of age. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page.

14. Contact

If you have any questions about this Privacy Policy or your personal data, contact us at:

info@yalanext.com