Privacy Policy

1. Data controller

Company: Kute Designs CUSTOM S.L.
VAT: B-XXXXXXXX
Address: [Dirección fiscal], España
Email: privacidad@kutedesigns.es

2. Data we collect and why

Data	Purpose	Legal basis
Name, address, email, phone	Process and deliver orders	Contract performance
Payment data	Process payment (via Stripe/PayPal)	Contract performance
Design uploads	Print your custom order	Contract performance
Browsing data (cookies)	Analytics and functionality	Legitimate interest / Consent
Email address	Order updates and (opt-in) marketing	Contract / Consent

3. Data retention

Order data is retained for 10 years to comply with Spanish accounting and tax obligations. Marketing preferences are kept until you withdraw consent. Account data is kept until you request deletion.

4. Third-party sharing

We share your data only with:

Shipping carriers (name, address) to deliver your order.
Stripe / PayPal to process payments.
Print partners (design data only) to produce your order.
Resend (email delivery service).

We do not sell your data to third parties.

5. Your rights

Under GDPR you have the right to:

Access your personal data.
Rectify inaccurate data.
Erase your data ("right to be forgotten").
Restrict or object to processing.
Data portability.
Withdraw consent at any time.

To exercise any of these rights, email privacidad@kutedesigns.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es.

6. Security

We implement technical and organisational measures appropriate to the risk, including TLS encryption for all data in transit and restricted access to personal data.