Privacy Policy
Privacy Policy
Effective Date: June 2025
Last Updated: June 2025
This Privacy Policy explains how Baliaric Parasol collects, uses, stores, and protects your personal data when you visit baliaricparasol.com or make a purchase from us. We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Data Controller
The data controller responsible for your personal information is:
- Name: Baliaric Parasol
- Website: baliaricparasol.com
- Email: info@baliaric.ca
- Address: 201-1065 Canadian Place, #1097, L4W 0C2, Mississauga, Ontario
2. What Data We Collect
We collect personal data in the following circumstances:
When you place an order:
- Full name
- Delivery and billing address
- Email address
- Phone number
- Payment information (processed securely by our payment provider — we never see or store full card details)
- Order history and transaction details
When you browse our website:
- IP address and approximate location
- Browser type and device information
- Pages visited and time spent
- Referring website
- Cookie data (see Section 7)
When you contact us:
- Name and email address
- Content of your message
When you subscribe to marketing:
- Email address (only when you explicitly opt in)
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your order | Contract performance |
| Sending order confirmation and shipping updates | Contract performance |
| Handling returns, refunds, and customer service | Contract performance / Legal obligation |
| Complying with customs and tax requirements | Legal obligation |
| Sending marketing emails (newsletters, promotions) | Consent (opt-in only) |
| Improving our website and product offering | Legitimate interest |
| Fraud prevention and security | Legitimate interest / Legal obligation |
| Complying with legal and regulatory requirements | Legal obligation |
4. Who We Share Your Data With
We do not sell your personal data. We share it only with trusted third parties who process it on our behalf:
- Shopify Inc. — E-commerce platform and order management (servers in Canada/USA)
- FedEx / UPS / DHL — Shipping carriers who receive your name and delivery address
- Stripe / PayPal / Shop Pay — Payment processors (your card data goes directly to them; we never see it)
- Google Analytics — Website analytics (anonymised where possible)
- Customs and tax authorities — Where legally required for international shipments
All processors are bound by data processing agreements and handle your data in accordance with GDPR and applicable law.
5. International Data Transfers
Some of our processors are located outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or transfers to countries with an adequacy decision.
6. How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Order and transaction records | 7 years (tax and legal compliance) |
| Customer account data | Duration of account + 3 years |
| Marketing consent records | Until consent is withdrawn + 1 year |
| Website analytics data | 26 months (Google Analytics default) |
| Customer service correspondence | 3 years from last contact |
7. Cookies
Our website uses cookies — small text files stored on your device — to make the site function correctly and to improve your experience. We use:
- Essential cookies: Required for the site to function (shopping cart, checkout). Cannot be disabled.
- Analytics cookies: Help us understand how visitors use our site (Google Analytics). Require your consent.
- Marketing cookies: Used to show you relevant advertising. Require your consent.
You can manage your cookie preferences at any time via the cookie settings banner on our website. For more information, see our Cookie Policy.
8. Your Rights
Depending on your location, you have the following rights regarding your personal data:
- Right of access: Request a copy of the data we hold about you
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your data (“right to be forgotten”)
- Right to restrict processing: Ask us to limit how we use your data
- Right to data portability: Receive your data in a portable format
- Right to object: Object to processing based on legitimate interest or for marketing
- Right to withdraw consent: Withdraw marketing consent at any time via the unsubscribe link in any email
To exercise any of these rights, contact us at info@baliaricparasol.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority:
- Spain / EU: Agencia Española de Protección de Datos (AEPD) — aepd.es
- United Kingdom: Information Commissioner’s Office (ICO) — ico.org.uk
- Canada: Office of the Privacy Commissioner of Canada — priv.gc.ca
9. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses SSL encryption. Payment data is handled exclusively by PCI-DSS compliant processors.
10. Children
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on our website. The effective date at the top of this page indicates when the policy was last updated.
12. Contact
For any privacy-related questions or to exercise your rights, contact us at:
info@baliaric.ca
