Privacy & Cookie Policy

of https://bomchacha.es

Effective Date: 18/11/2025

This Privacy and Cookie Policy explains how BOUCHACHA SL (“we”, “us”, “our”) collects, uses and protects personal data when you visit https://bomchacha.es, purchase our products, communicate with us or use our services.

We process your personal data in accordance with the General Data Protection Regulation (GDPR), Organic Law 3/2018 (LOPDGDD) and other applicable regulations in Spain.

---

1. Data Controller

BOUCHACHA SL
Address: CALLE MISTER LODGE 23, LOCAL 1-6, 28229 VILLANUEVA DEL PARDILLO, MADRID, SPAIN
CIF: B13959770
Email: info@bomchacha.es
Website: https://bomchacha.es

If you have any questions about this Policy or how we process your personal data, you can contact us at info@bomchacha.es.

---

2. Scope of application

This Policy applies to personal data that we collect:

• When visiting or browsing https://bomchacha.es
• When making a purchase in our online store
• When you create an account on our website
• By subscribing to our newsletter or commercial communications
• When you communicate with us via email, phone, forms, or social media
• When participating in promotions, surveys or events

This Policy does not apply to third-party websites or services that may be linked from our site.

---

3. Personal Data We Collect

We may process the following categories of personal data:

3.1 Identification and contact details

• Name and last name
• Billing and shipping address
• Email
• Phone number
• Country/region

3.2 Account Data

• Username and password (encrypted)
• Account Settings and Preferences
• Order history linked to your account

3.3 Order, payment and transaction data

• Products Purchased and Order Details
• Payment method used
• Payment status

We do not store full card numbers; are processed by secure payment providers.

3.4 Technical and usage data (automatic collection)

• IP Address
• Browser type and version
• Device and operating system
• Browser language
• Pages visited, clicks, browsing time
• Referrer URL

3.5 Behavioural data and preferences

• Products viewed or added to cart
• Shopping preferences
• Participation in offers or surveys

3.6 Communications and customer service data

• Messages sent via email, forms, or social media
• Content of inquiries, complaints and our response

3.7 Marketing data

• Preferences for receiving commercial communications
• Registration of consents and unsubscriptions

3.8 Recruitment data (if applicable)

• CV, cover letter and professional details

We do not collect special categories of data (health, religion, etc.) unless you provide it voluntarily and only when necessary.

---

4. How do we collect your data?

4.1 Directly from you

• When placing an order
• When creating an account
• When you send us a message or form
• When participating in surveys or promotions
• When subscribing to newsletters

4.2 Automatically

Through cookies and similar technologies when you browse our website.

4.3 Third Party

• Payment Providers
• Transport companies
• Analytics and advertising tools
• Social media platforms when you interact with our accounts

---

5. What do we use your data for and what is the legal basis?

5.1 Order management and service delivery

• Process payments, prepare shipments, manage returns
• Create and manage your account
  Legal basis: execution of contract; legitimate interest; legal obligation.

5.2 Communications with you

• Answering queries
• Send you notifications of the order or changes to our terms
  Legal basis: execution of contract; legitimate interest.

5.3 Website improvement and usage analysis

• Analyze the traffic and operation of the website
• Improve design and user experience
  Legal basis: legitimate interest; consent (non-essential cookies).

5.4 Marketing and commercial communications

• Sending newsletters and promotions
• Content personalization
  Legal basis: consent; legitimate interest for existing customers (with opt-out).

You can unsubscribe at any time.

5.5 Security and fraud prevention

Legal basis: legitimate interest; legal obligation.

5.6 Compliance with legal obligations

Legal basis: legal obligation (tax, accounting, etc.).

5.7 Selection processes (if applicable)

Legal basis: legitimate interest; pre-contractual measures.

---

6. Who do we share your data with?

We do not sell your personal data.

We may share data with:

6.1 Processors (suppliers)

• Web Hosting Services
• Payment Providers
• Transportation Services
• Email marketing tools
• Analytics and Cookie Platforms
• Technical Support and Security Services

All of them act under contract and following our instructions.

6.2 Public administrations

Only when there is a legal obligation.

6.3 Other third parties

In the case of corporate operations (mergers, acquisitions), always under legal guarantee.

---

7. International transfers

Some providers may be outside the EEA.
In these cases we guarantee adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Other mechanisms allowed by the GDPR

---

8. Retention periods

We keep your data only for as long as necessary:

• User account: Until you request deletion
• Orders and invoicing: minimum 5 years (legal obligation in Spain)
• Marketing: Until you withdraw consent or as required by law
• Queries and support: for as long as it takes to manage them
• Recruitment: up to 12 months (unless otherwise indicated)

When it is no longer necessary to retain the data, we delete or anonymize it.

---

9. Data security

We apply technical and organisational measures such as:

• Secure servers
• Access Restrictions
• Security monitoring
• Encryption when needed
• Internal data protection protocols

No system is completely secure. If you spot a potential issue, please contact us.

---

10. Your rights

You have the right to request:

• Access to your data
• Rectification of inaccurate data
• Erasure (“right to be forgotten”)
• Limitation of processing
• Portability
• Objection to processing based on legitimate interest
• Opposition to direct marketing
• Withdrawal of consent at any time

To exercise these rights, please write to: info@bomchacha.es

You can also complain to the supervisory authority:

Spanish Data Protection Agency (AEPD)
Web: www.aepd.es

---

11. Cookies and Similar Technologies

11.1 What are cookies?

Small files stored on your device to remember your preferences, analyze web usage, or display personalized content.

11.2 Types of cookies we use

1. Strictly Necessary Cookies
   Essential for the operation of the website (basket, login, security).
2. Analytical cookies
   They allow you to measure the use of the website and improve performance.
3. Functional cookies
   They save preferences such as language or region.
4. Advertising and personalisation cookies (if enabled)
   To show relevant ads and measure campaigns.

11.3 Cookie consent

When you enter our website:

• You can accept or decline non-essential cookies
• You can customize your preferences
• You can revoke your consent at any time

You can also manage cookies from your browser.

---

12. Changes to this Policy

We may update this Policy at any time.
When we do:

• We will update the effective date
• We will be able to inform you through the website or by email

---

13. Contact

For any questions about this Policy or your personal data:

BOUCHACHA SL
Address: CALLE MISTER LODGE 23, LOCAL 1-6, 28229 VILLANUEVA DEL PARDILLO, MADRID, SPAIN
Email: info@bomchacha.es
Website: https://bomchacha.es