Privacy policy

Last updated: July 27, 2026

This Privacy Policy describes how CoolSpritz™ collects, uses, discloses, retains, and protects personal information when you visit our website, use our online store, make a purchase, create a customer account, contact us, or otherwise use our products, features, content, and services, collectively referred to as the “Services.”

Our store is hosted by Shopify, which provides the ecommerce platform that enables us to offer the Services.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

Where applicable law requires consent, we will request that consent through an appropriate affirmative action.

If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, use, processing, or disclosure of personal information, this Privacy Policy will apply.

1. Data Controller

For the purposes of applicable data protection laws, the data controller responsible for processing your personal information is:

Legal full name: [LEGAL FULL NAME PENDING]
Trading name: CoolSpritz™
Legal status: Private individual
Address: [LEGAL OR BUSINESS ADDRESS PENDING], Seville, Spain
Email: coolspritzstore@gmail.com
Website: shopcoolspritz.com

CoolSpritz™ is the trading name used to operate the store. It does not replace the legal identity of the data controller.

2. Meaning of Personal Information

For the purposes of this Privacy Policy, “personal information” means information that identifies you or that can reasonably be linked to you.

Personal information does not include information that has been anonymized or de-identified so that it can no longer reasonably identify or be linked to an individual.

3. Personal Information We Collect

The personal information we collect depends on how you interact with the Services, the features you use, your location, and the choices you make.

Contact Information

We may collect:

• First and last name.
• Email address.
• Telephone number, where provided.
• Billing address.
• Shipping address.
• Country, region, city, and postal code.

Order and Transaction Information

We may process information relating to:

• Products viewed, added to the cart, or purchased.
• Product variants, colors, quantities, and other characteristics.
• Order number and order date.
• Order history.
• Payment and transaction status.
• Order fulfillment status.
• Shipping and tracking information.
• Cancellations, returns, and refunds.
• Communications relating to your order.

Payment Information

Payments may be processed through Shopify Payments, PayPal, Shop Pay, card networks, and other payment methods displayed during checkout.

Payment providers may process:

• The payment method selected.
• Billing information.
• Transaction amount and currency.
• Payment authorization, confirmation, or rejection.
• Information required to prevent fraud and chargebacks.

CoolSpritz™ does not normally receive or store your complete payment card number. Payment details are processed directly by the relevant payment provider.

Customer Account Information

When you create or use a customer account, we may process:

• Your name.
• Email address.
• Saved addresses.
• Order history.
• Account preferences.
• Authentication information managed by Shopify.
• Store credit information, where applicable.

Creating a customer account or signing in is not currently required to complete a purchase.

Communications With Us

When you contact us, we may collect:

• The content of your messages.
• Your contact information.
• Your order number.
• Product, payment, or shipping inquiries.
• Return or refund requests.
• Complaints.
• Photographs or videos submitted as evidence of an incorrect, defective, or damaged product.

Device and Usage Information

We, Shopify, and our technology providers may automatically collect:

• IP address.
• Device type.
• Browser type and version.
• Operating system.
• Language and time zone.
• Approximate location.
• Device or browser identifiers.
• Pages visited.
• Products viewed.
• Interactions with the cart and checkout.
• Dates and times of visits.
• The website or page from which you reached our store.
• Information collected through cookies, pixels, and similar technologies.

Marketing Preferences

We may record:

• Whether you have subscribed to promotional communications.
• The date, time, and method of subscription.
• Your communication preferences.
• Email openings, clicks, and interactions, where measurement is enabled.
• Unsubscribe requests.
• Withdrawal of consent.

4. Sources of Personal Information

We may obtain personal information:

• Directly from you, when you make a purchase, create an account, subscribe to marketing, or contact us.
• Automatically, when you access or use the Services through cookies, pixels, and similar technologies.
• From Shopify, as the provider of our ecommerce platform.
• From payment providers, when they process or confirm a payment.
• From AutoDS, product suppliers, fulfillment providers, and carriers, when they prepare or deliver an order.
• From technology, security, and fraud-prevention providers.
• From marketing or advertising partners, where permitted by applicable law.

5. How We Use Personal Information

Processing and Managing Orders

We use personal information to:

• Confirm and process purchases.
• Process and verify payments.
• Send order information to the relevant supplier.
• Prepare and ship products.
• Provide tracking information.
• Send order confirmations and updates.
• Manage cancellations, returns, and refunds.
• Resolve delivery-related issues.

Managing Customer Accounts

We may use personal information to:

• Create and maintain customer accounts.
• Enable account access.
• Display previous orders.
• Save addresses and preferences.
• Manage store credit, where applicable.
• Protect accounts against unauthorized access.

Providing Customer Support

We use personal information to:

• Answer questions.
• Respond to customer service requests.
• Handle complaints.
• Manage damaged, defective, or incorrect products.
• Assist with delayed or missing orders.
• Process returns and refunds.
• Maintain records of communications.

Security and Fraud Prevention

We may process personal information to:

• Detect suspicious transactions.
• Prevent fraud, abuse, or unlawful activity.
• Protect our store, customers, and service providers.
• Investigate possible violations of our terms or policies.
• Manage chargebacks and payment disputes.
• Maintain the technical security of the Services.

Improving the Services

We may use personal information to:

• Analyze website performance.
• Identify technical errors.
• Understand how customers use the Services.
• Improve navigation and the shopping experience.
• Remember preferences.
• Personalize certain features or recommendations.
• Measure the performance of products, promotions, and campaigns.

Marketing and Promotional Communications

Where permitted by applicable law, we may use personal information to:

• Send news, offers, and promotions.
• Provide information about products.
• Manage marketing subscriptions.
• Measure the performance of marketing emails.
• Personalize communications or advertising.

In Spain, the marketing subscription checkbox is not preselected. Customers must actively choose to subscribe.

We currently do not display an option to subscribe to SMS marketing.

Legal and Regulatory Compliance

We may process and retain personal information to:

• Comply with tax and accounting obligations.
• Comply with consumer protection, ecommerce, and data protection laws.
• Respond to valid legal requests.
• Cooperate with competent authorities.
• Establish, exercise, or defend legal claims.
• Enforce our terms and policies.
• Maintain records required by law.

6. Legal Bases for Processing

Where the General Data Protection Regulation or similar laws apply, we rely on one or more of the following legal bases.

Performance of a Contract

We process personal information when necessary to:

• Manage a purchase.
• Process payment.
• Prepare and deliver an order.
• Manage cancellations, returns, or refunds.
• Provide support relating to a purchase.
• Respond to requests made before a purchase.

Compliance With Legal Obligations

We may process and retain information to comply with:

• Tax obligations.
• Accounting obligations.
• Consumer protection requirements.
• Fraud-prevention requirements.
• Requests from public authorities.
• Legal record-retention requirements.

Legitimate Interests

We may process personal information where necessary for our legitimate interests, provided that those interests are not overridden by your fundamental rights and freedoms.

These interests may include:

• Operating and improving our store.
• Protecting the Services.
• Preventing fraud.
• Responding to inquiries.
• Maintaining security records.
• Analyzing general business performance.
• Establishing or defending legal claims.

Consent

We will request your consent where required, particularly for:

• Marketing communications.
• Non-essential cookies.
• Certain analytics technologies.
• Personalized advertising.
• Other activities requiring consent under applicable law.

You may withdraw your consent at any time.

Withdrawal of consent will not affect the lawfulness of processing carried out before the consent was withdrawn.

7. Cookies, Pixels, and Similar Technologies

Our store and service providers use cookies, pixels, and similar technologies to:

• Enable the store to function.
• Keep products in the shopping cart.
• Remember preferences.
• Enable customer account access.
• Secure the checkout process.
• Prevent fraud.
• Analyze website usage.
• Measure campaign performance.
• Personalize content or advertising, where applicable.

Strictly necessary cookies may be used without consent where permitted by applicable law.

In regions where consent is required, analytics, advertising, and other non-essential technologies will only be activated after the customer has provided the appropriate preferences through the Shopify cookie banner.

You may review or change your cookie preferences through the privacy or cookie controls available on our store.

An AutoDS pixel is currently active. It may process technical and activity information connected with the AutoDS integration, order automation, and operation of its services.

8. Marketing Communications

We use Shopify Messaging to create, manage, and send marketing communications by email.

Shopify Messaging may process:

• Name.
• Email address.
• Telephone number, where available.
• Address information.
• IP address.
• Approximate location.
• Browser information.
• Operating system.
• Information about interactions with marketing communications.

We will send promotional communications only where:

• You have voluntarily subscribed.
• Another valid legal basis exists.
• Applicable law otherwise permits the communication.

Commercial emails will include an unsubscribe option.

Even after you unsubscribe from promotional communications, we may continue to send non-promotional communications necessary to:

• Confirm orders.
• Provide shipping updates.
• Process payments.
• Manage returns and refunds.
• Address security issues.
• Provide customer support.

9. How We Disclose Personal Information

We do not disclose personal information indiscriminately.

We may disclose personal information where necessary to provide the Services, comply with legal obligations, or protect our rights and the rights of others.

Shopify

Our store is hosted by Shopify.

Information submitted or generated through the Services may be transmitted to Shopify so that Shopify can provide:

• The online store.
• Shopping cart and checkout functions.
• Customer accounts.
• Order processing and management.
• Payment-related services.
• Security and fraud prevention.
• Analytics.
• Marketing and messaging tools.
• Technical support.
• Enhanced Shopify services.

Shopify Payments, PayPal, and Other Payment Providers

We disclose the information required by payment providers to:

• Authorize transactions.
• Process payments.
• Issue refunds.
• Prevent fraud.
• Manage chargebacks.
• Comply with legal obligations.

Each payment provider processes personal information in accordance with its own privacy policy and legal obligations.

AutoDS, Suppliers, and Shipping Providers

CoolSpritz™ uses AutoDS to help automate order management.

The information required to prepare and deliver an order may be disclosed to:

• AutoDS.
• The product supplier.
• Fulfillment centers.
• Warehouses.
• Shipping carriers.
• Postal operators.
• Tracking service providers.

This information may include:

• Recipient’s name.
• Shipping address.
• Telephone number or email address, where necessary for delivery.
• Products purchased.
• Product variant, color, and quantity.
• Order number or reference.
• Delivery instructions.

Products may be shipped directly from a supplier to the customer.

Technology and Service Providers

We may use providers that offer:

• Website hosting.
• Security services.
• Data storage.
• Email services.
• Customer support.
• Translation and localization.
• Information technology maintenance.
• Analytics.
• Fraud prevention.
• Order management.

Authorities and Legal Obligations

We may disclose personal information where reasonably necessary to:

• Comply with a legal obligation.
• Respond to a valid legal request.
• Cooperate with a competent authority.
• Prevent fraud or criminal activity.
• Protect our rights or the rights of others.
• Establish, exercise, or defend legal claims.

Business Transactions

Personal information may be disclosed or transferred in connection with a proposed or completed:

• Sale of the business.
• Merger.
• Reorganization.
• Financing.
• Transfer of assets.
• Insolvency proceeding.
• Similar business transaction.

Any such disclosure will be subject to applicable legal requirements.

10. Relationship With Shopify and Shopify Network Intelligence

Our store is hosted by Shopify.

Shopify collects and processes information relating to access to and use of the Services in order to provide, protect, improve, and personalize its platform and services.

We have enabled Shopify Network Intelligence.

This allows Shopify to use certain customer information together with information from interactions with Shopify and other merchants to provide enhanced services, which may include:

• Product and feature improvements.
• Personalization.
• Store performance improvements.
• Security and fraud prevention.
• Advertising audience creation.
• Advertising measurement.

Other merchants cannot directly access our customers’ personal information through this feature.

For some processing activities, Shopify may act as our service provider. For other processing activities, Shopify may act as an independent data controller responsible for its own use of personal information.

To learn more about Shopify’s privacy practices and how to exercise rights directly with Shopify, please review the Shopify Consumer Privacy Policy:

https://privacy.shopify.com/en

11. Sale, Sharing, and Targeted Advertising in the United States

We do not sell personal information in exchange for money.

However, certain disclosures associated with personalized advertising, advertising measurement, or Shopify enhanced services may be considered a “sale,” “sharing,” or processing for targeted advertising under certain United States state privacy laws.

Where applicable, you may opt out of the sale or sharing of your personal information or its use for targeted advertising through the “Your Privacy Choices” link, or an equivalent privacy link, displayed in the footer of our store.

This privacy choice page is currently made available through Shopify for the applicable United States regions configured in our store.

We may also recognize a valid Global Privacy Control signal where required by applicable law and technically supported.

12. International Transfers

Shopify, AutoDS, PayPal, suppliers, carriers, and other service providers may process personal information in countries outside Spain or outside the country where the customer resides.

Where personal information is transferred outside the European Economic Area and applicable law requires safeguards, we may rely on:

• An adequacy decision.
• Standard Contractual Clauses approved by the European Commission.
• Binding Corporate Rules.
• Another transfer mechanism permitted by applicable law.

You may contact us to request additional information about the safeguards used for a particular international transfer.

13. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy and to comply with applicable legal obligations.

We apply the following criteria:

• Orders, payments, and billing: for the period necessary to manage the purchase and for applicable tax, accounting, and legal retention periods.
• Returns and refunds: for the period necessary to resolve the request and manage possible claims.
• Customer support: for as long as necessary to respond to inquiries, resolve issues, and defend legal rights.
• Customer accounts: while the account remains active and afterward for any period required by law.
• Marketing information: until you unsubscribe, withdraw consent, or the information is no longer required.
• Security and fraud-prevention information: for the period reasonably necessary to investigate and prevent risks.
• Cookies and technical information: according to the duration indicated in the cookie controls or by the relevant service provider.

When personal information is no longer required, we may delete it, anonymize it, or restrict access to it, unless continued retention is required by law.

14. Security

We use reasonable technical and organizational measures designed to protect personal information against:

• Unauthorized access.
• Loss.
• Alteration.
• Improper disclosure.
• Destruction.
• Unlawful use.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You should not send passwords, complete payment card numbers, or other highly sensitive information through ordinary email.

Where you use a customer account, you are responsible for keeping your authentication information secure and not sharing it with others.

15. Children’s Privacy

Our products may be suitable for people of different ages. However, our online store and purchasing process are not specifically directed at children.

Purchases should be made by an adult or with the involvement and authorization of a parent or legal guardian.

We do not knowingly collect personal information from children below the age at which they may legally provide consent.

Where processing is based on consent and the customer is under 14 years of age in Spain, the involvement of a parent or legal guardian will be required where applicable law requires it.

If you believe that a child has provided personal information to us improperly, contact us at coolspritzstore@gmail.com so that we can investigate and, where appropriate, delete the information.

16. Rights in Spain and the European Economic Area

Depending on the circumstances and applicable law, you may have the following rights.

Right of Access

You may request confirmation of whether we process your personal information and obtain a copy of that information.

Right to Rectification

You may request the correction of inaccurate or incomplete personal information.

Right to Erasure

You may request the deletion of personal information where the applicable legal requirements are met.

Right to Restriction of Processing

You may request that we temporarily restrict the processing of your personal information in certain circumstances.

Right to Object

You may object to processing based on legitimate interests.

You may object at any time to the use of your personal information for direct marketing.

Right to Data Portability

Where applicable, you may request certain personal information in a structured, commonly used, and machine-readable format.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Automated Decision-Making

Where applicable, you may request human intervention or other safeguards where a decision based solely on automated processing produces legal effects or otherwise significantly affects you.

These rights may be subject to conditions, limitations, and exceptions under applicable law.

17. Rights of United States Residents

Depending on your state of residence, the applicable legal thresholds, and whether the relevant law applies to CoolSpritz™, you may have the right to:

• Request access to personal information.
• Request a copy of personal information.
• Correct inaccurate personal information.
• Request deletion of personal information.
• Learn which categories of personal information have been disclosed.
• Learn which categories of third parties receive personal information.
• Opt out of certain sales or sharing.
• Opt out of targeted advertising.
• Limit certain uses of sensitive personal information, where applicable.
• Appeal certain decisions relating to a privacy request, where applicable.
• Not receive discriminatory treatment for exercising your privacy rights.

These rights are not absolute and may be subject to legal exceptions.

18. How to Exercise Your Rights

You may submit a privacy request by emailing:

coolspritzstore@gmail.com

Please include:

• Your name.
• The email address used for your purchase or customer account.
• Your order number, where applicable.
• A clear description of your request.

We may request additional information where reasonably necessary to verify your identity and protect your personal information.

You may also authorize another person to submit a request on your behalf. In that case, we may request proof that the representative is authorized to act for you and may verify your identity directly.

We will respond within the period required by applicable law.

We will not discriminate against you for legitimately exercising your privacy rights.

19. Complaints

If you have concerns about how we process your personal information, please contact us first at:

coolspritzstore@gmail.com

We will review your concern and attempt to resolve it.

If you are located in Spain, you may also submit a complaint to the:

Spanish Data Protection Agency — Agencia Española de Protección de Datos, AEPD

If you live in another country within the European Economic Area, you may submit a complaint to the data protection authority responsible for your place of residence.

Residents of the United States may also have the right to contact their state attorney general or another competent privacy authority, depending on applicable state law.

20. Third-Party Websites and Services

Our Services may contain links to websites, social networks, payment providers, or other platforms operated by third parties.

We do not control the privacy, security, or data-handling practices of those third parties.

You should review the third party’s privacy policy and terms before providing personal information.

The inclusion of a link does not necessarily mean that CoolSpritz™ endorses the third party or its services.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to:

• Our Services.
• Installed applications.
• Payment methods.
• Suppliers and service providers.
• Data-processing practices.
• Privacy or cookie settings.
• Legal and regulatory requirements.
• Security measures.

When we update this Privacy Policy, we will publish the revised version and change the “Last updated” date.

Where required by applicable law, we will provide additional notice of material changes.

22. Contact Us

For questions about this Privacy Policy, our privacy practices, or the exercise of your rights, contact:

CoolSpritz™
Data controller: [LEGAL FULL NAME PENDING]
Legal status: Private individual
Address: [LEGAL OR BUSINESS ADDRESS PENDING], Seville, Spain
Email: coolspritzstore@gmail.com
Website: shopcoolspritz.com