Privacy policy
Last updated: 1 July 2026
At House Of Ekō ("we", "us", "our"), we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose your personal data when you visit our website, create an account, place an order, request a preorder, subscribe to our communications, or otherwise interact with us.
We are established in Spain, but we may offer and sell our products to customers located in other countries. As a result, your personal data may be processed in connection with domestic and international orders, shipping, payment processing, customer support, fraud prevention, and related cross-border commercial operations.
This Privacy Policy is intended to comply with:
- Regulation (EU) 2016/679 of 27 April 2016 ("GDPR")
- Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights ("LOPDGDD")
- Law 34/2002 of 11 July on Information Society Services and Electronic Commerce ("LSSI-CE"), where applicable
If mandatory laws of the country where the customer is located grant additional consumer or privacy protections, those mandatory rules may also apply where required.
1. Data Controller
Data Controller: House Of Ekō
Trade name: House Of Ekō
Address: Sevilla 41010, Spain
Email: info@houseofekojewelry.com
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you may contact us using the details above.
2. Personal Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
a) Identification and contact data
- Name and surname
- Billing address
- Shipping address
- Email address
- Telephone number
b) Account and profile data
- Login details
- Account preferences
- Saved items or wishlist information
- Loyalty-related information, where applicable
- Saved preferences and settings
c) Order and transaction data
- Products viewed, selected, preordered, purchased, returned, or exchanged
- Order history
- Delivery and shipping details
- Payment status
- Invoice information
- Customs- or destination-related order information, where relevant for international shipments
d) Payment data
Payments are processed through third-party payment providers and payment methods made available on our website, which may include Shop Pay, Shopify Payments, Visa, Mastercard, American Express, Maestro, UnionPay, Apple Pay, Google Pay, PayPal, Bancontact, Klarna, and MobilePay, depending on availability and the customer's location.
We may receive limited payment-related information, such as payment confirmation, payment method, payment status, or partial transaction identifiers, but we do not normally store full card details.
e) Communications and form submission data
- Messages sent through contact forms, messaging tools, or support channels
- Information submitted through website forms
- Customer service requests
- Communications relating to orders, deliveries, preorders, returns, or incidents
f) Technical and browsing data
- IP address
- Browser type
- Device type
- Operating system
- Website activity
- Search and navigation behavior on the website
- Cookie and similar technology data
g) Marketing and preference data
- Newsletter subscription status
- Email marketing preferences
- Interaction with marketing campaigns
- Product interests and shopping behavior
h) Approximate location or localization data
We may infer your approximate location or market from technical information such as IP address or website settings in order to provide localized content, language, currency, availability, delivery information, or country-specific shopping conditions.
3. How We Collect Your Personal Data
We collect personal data:
- Directly from you, when you place an order, create an account, fill in a form, subscribe to a newsletter, request a preorder, use a wishlist or loyalty feature, or contact us
- Automatically, through cookies and similar technologies when you browse our website
- From Shopify and service providers, who help us operate the store, process orders, provide logistics, manage communications, prevent fraud, or issue invoices
- From third-party platforms, where you interact with embedded social content or linked services
4. Purposes and Legal Bases for Processing
We process your personal data for the following purposes:
| Purpose | Examples | Legal basis |
|---|---|---|
| Managing purchases and preorders | Processing orders, preorders, payments, delivery, returns, and exchanges | Performance of a contract under Article 6(1)(b) GDPR |
| Managing domestic and international shipping | Shipment preparation, carrier coordination, delivery updates, address validation, customs-related handling where applicable | Performance of a contract and/or legal obligation where applicable |
| Account management | Customer account creation, saved preferences, wishlists, loyalty-related features | Performance of a contract or pre-contractual measures |
| Customer service and communications | Answering messages, managing claims, support, preorder updates, delivery issues | Performance of a contract and/or legitimate interest under Article 6(1)(f) GDPR |
| Invoicing and legal compliance | Issuing invoices, bookkeeping, tax and commercial compliance | Legal obligation under Article 6(1)(c) GDPR |
| Fraud prevention and transaction security | Detecting unauthorized access, abuse, suspicious transactions, payment risks, and protecting the website and international sales operations | Legitimate interest |
| Marketing communications | Sending newsletters and promotional emails | Consent under Article 6(1)(a) GDPR, except where permitted by law for existing customers |
| Personalization and service improvement | Product recommendations, wishlist experience, search optimization, localization | Legitimate interest and/or consent where required |
| Analytics, advertising, and non-essential cookies | Measuring performance, audience analysis, behavioral advertising, retargeting | Consent |
| Localization and geolocation-based adaptation | Displaying country, language, currency, product availability, or region-relevant information | Legitimate interest and/or consent where required |
Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. If You Do Not Provide Your Data
Certain personal data is necessary for us to process your order, deliver products, issue invoices, manage preorders, arrange shipment, comply with legal obligations, or respond to certain requests. If you do not provide mandatory data, we may be unable to provide the relevant service.
Providing data for newsletters or other promotional communications is voluntary.
6. Who We Share Your Data With
We may share your personal data with the following categories of recipients where necessary for the operation of our business and store:
- Shopify, as the platform that hosts and operates our online store
- Payment providers and payment method providers, to securely process payments, including services such as Shop Pay, Shopify Payments, PayPal, Klarna, Apple Pay, Google Pay, Bancontact, MobilePay, and card-based payment processing services
- Shipping, courier, delivery, and logistics providers, including Paack, DHL EXPRESS and other providers involved in domestic or international delivery
- Customs, tax, import, or clearance-related intermediaries, where necessary to process international orders or deliveries
- Invoice and accounting service providers, including Sufio
- Email marketing providers, including Klaviyo
- Wishlist, loyalty, and customer engagement providers, including Growave
- Form management and customer communication providers, including website form and messaging tools
- Localization and geolocation service providers, including Orbe
- Website search, product discovery, and personalization tools
- Social media and content integration providers, including embedded Instagram-related services such as Instafeed
- Technology, hosting, automation, security, and support providers
- Professional advisors, such as legal, accounting, or tax advisors
- Public authorities, regulators, customs authorities, or courts, where disclosure is required by law or necessary to manage international transactions
These recipients may act either as data processors on our behalf or, in certain cases, as independent data controllers under their own privacy policies.
7. Shopify
Our store is hosted on Shopify, which provides the e-commerce infrastructure that allows us to sell our products and manage the store.
Shopify may process personal data in order to provide hosting, checkout, payment-related infrastructure, Shop Pay functionality, store functionality, security, localization, and related services. Depending on the relevant processing activity, Shopify may act as a processor on our behalf or as an independent controller.
More information about Shopify's privacy practices is available at:
https://www.shopify.com/legal/privacy
8. International Transfers
Because we are established in Spain but may sell to customers in other countries, and because some of our technology, payment, marketing, and logistics providers may operate internationally, your personal data may be transferred to, stored in, or accessed from countries outside Spain and/or outside the European Economic Area (EEA).
Where international transfers take place, we will ensure that appropriate safeguards are in place in accordance with GDPR, including, where applicable:
- an adequacy decision of the European Commission
- Standard Contractual Clauses
- other legally valid transfer mechanisms
You may request additional information about these safeguards by contacting us.
9. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with legal obligations.
As a general rule:
- Order, transaction, invoice, and shipping-related data will be retained for the periods required by tax, accounting, commercial, and other applicable legal obligations
- Customer account data will be retained while the account remains active and, thereafter, for a reasonable period unless longer retention is legally required
- Wishlist, loyalty, and profile-related data will be retained while the relevant account or program remains active
- Customer service and communication data will be retained for as long as necessary to manage the request, delivery issue, claim, or any related legal responsibilities
- Marketing data will be retained until you withdraw consent or object, as applicable
- Cookie-related data will be retained in accordance with our Cookie Policy or consent management settings
When personal data is no longer necessary, it will be securely deleted or anonymized where possible.
10. Your Rights
Under GDPR and applicable Spanish law, you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete personal data
- Erase your personal data where applicable
- Restrict processing in certain circumstances
- Object to processing based on legitimate interest or for direct marketing purposes
- Receive your data in portable format, where applicable
- Withdraw consent at any time where processing is based on consent
- Not be subject to solely automated decisions producing legal or similarly significant effects, where applicable
To exercise these rights, contact us at: info@houseofekojewelry.com
We may request proof of identity where necessary to process your request securely.
If you receive marketing emails from us, you may unsubscribe at any time through the unsubscribe link included in the communication.
11. Complaints
If you believe that we have not processed your personal data in accordance with applicable law, you may contact us first.
You also have the right to lodge a complaint with the Agencia Espanola de Proteccion de Datos (AEPD):
Website: https://www.aepd.es
If you are located in another EU/EEA Member State, you may also contact the supervisory authority in your country.
12. Cookies and Similar Technologies
We use cookies and similar technologies to:
- ensure the website functions properly
- remember your preferences
- analyze website traffic and usage
- improve website performance
- personalize content and, where applicable, advertising
- adapt the shopping experience based on language, region, currency, and market settings
Non-essential cookies or similar technologies will only be used with your prior consent where required by law.
For more information, please consult our Cookie Policy.
13. Security
We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
However, no internet-based service can be completely secure. If you believe your data may have been compromised, please contact us immediately.
14. Children's Data
Our website and products are not directed to children, and we do not knowingly collect personal data from minors without the required legal basis or authorization where applicable.
If you believe a minor has provided personal data to us unlawfully, please contact us so we can take appropriate action.
15. Third-Party Links and Embedded Content
Our website may include links to third-party websites or embedded content, including social media content. We are not responsible for the privacy practices of those third parties. We recommend that you review their privacy policies before interacting with those services.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time for legal, regulatory, operational, or business reasons. Any changes will be posted on this page together with the updated revision date.
17. Contact
For questions about this Privacy Policy or your personal data, please contact:
Trade name: House Of Ekō
Address: Sevilla 41010, Spain
Email: info@houseofekojewelry.com