Privacy Policy

1. Data controller

GI CREATIVE LAB, S.L. (trade name: Global Innocence) Tax ID (CIF): B27600816 Email: support@globalinnocence.com

2. What data we collect

• Identification and contact: first name, surname, email, phone number and billing and shipping addresses.
• Orders: products, size, amount, date, shipping, returns, exchanges and communications about your purchase.
• Payment: payments are processed through Shopify and payment providers. We do not store your full card details.
• Marketing: your email and the record of your consent if you subscribe to the newsletter, the Inner Circle or launch alerts, as well as your interaction with our emails (opens and clicks).
• Browsing: depending on your cookie settings, IP address, device, browser, pages visited and cookie identifiers. More information in our Cookie Policy.

3. What we use your data for and legal basis

Managing your purchases and deliveries. We process the order and the payment, ship the products, keep you informed of the shipment status and handle exchanges, returns and incidents. To do so, we share the data needed for delivery with shipping companies. Legal basis: performance of the contract.

Marketing communications. If you subscribe, we send you news, new drops, events and early access. We may personalise these messages according to your interests and purchase history. Legal basis: consent. You can unsubscribe at any time using the link in each email or by writing to support@globalinnocence.com.

If you are already a customer, we may send you communications about products similar to the ones you bought, unless you object. You can object when you buy or in any email. Legal basis: legitimate interest (art. 21.2 of the Spanish LSSI).

Customer service. We answer your questions and resolve incidents. Legal basis: performance of the contract, pre-contractual measures or legitimate interest.

Legal obligations. Compliance with tax, accounting and consumer obligations. Legal basis: legal obligation.

Security and fraud prevention. We protect the website, our customers and our business against fraud and misuse. Legal basis: legitimate interest.

4. Who we share your data with

We do not sell your data. We only share it with the providers we need to operate, and each one accesses only what is strictly necessary:

• Shopify: e-commerce platform, checkout and orders.
• Klaviyo: subscriber management and sending of marketing communications.
• Vercel: hosting of part of the website.
• Payment providers: transaction processing.
• Shipping companies, such as SEUR: delivery and tracking of orders.
• Meta, TikTok and Google: measurement and advertising, only if you have accepted the corresponding cookies.

We may also disclose data to public authorities where there is a legal obligation.

5. International transfers

Some providers, such as Shopify or Klaviyo, may process data outside the European Economic Area. In those cases the safeguards provided for by law apply, such as adequacy decisions, the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

6. How long we keep your data

• Marketing communications: until you withdraw your consent.
• Orders: for the periods required by tax, commercial and consumer law. Generally, up to six years.
• Enquiries: for the time needed to resolve them and to deal with any possible liabilities.

Afterwards, the data is deleted, anonymised or blocked as required by law.

7. Cookies

We use cookies that are necessary for the website to work and, with your consent, analytics and marketing cookies. You can configure them at any time from our website. More information in the Cookie Policy.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, as well as withdraw your consent, by writing to support@globalinnocence.com and stating which right you want to exercise. If necessary, we will ask you for information to verify your identity. We will reply within one month.

If you believe we are not processing your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the data protection authority of your EU country of residence. Before doing so, we encourage you to write to us so we can try to resolve it.

9. Other matters

Security: we apply reasonable technical and organisational measures to protect your data, although no system on the Internet is completely secure.

Minors: our store is not aimed at minors. To subscribe to our communications you must be at least 14 years old. If we detect data from a minor collected without the necessary authorisation, we will delete it.

Changes: we may update this Policy. The date of the latest version appears at the top.