Privacy Policy
Last updated: April 20, 2026
This English version is provided for convenience. In case of discrepancy, the Spanish privacy policy is the reference text.
1. Data controller
- Controller: Manuel Jiménez Torres
- Tax ID: 70522137C
- Address: Barcelona, Spain
- Email: contacto@pulpo3d.es
2. Data we collect
2.1. Data provided by the user
- Full name
- Email address
- Phone number (optional)
- Shipping address (street, postcode, city, province, and additional references)
- Billing address and tax details that the user chooses to provide, such as tax ID and company name
- Checkout preferences saved in the account to reuse addresses in future purchases
2.2. Data collected automatically
- IP address
- Browser and device type
- Visited pages and browsing time through Google Analytics
3. Purposes of processing
We process users’ personal data for the following purposes:
| Purpose | Legal basis |
|---|---|
| Managing orders and deliveries | Performance of a contract (Art. 6.1.b GDPR) |
| Sending order confirmations and updates | Performance of a contract |
| Invoicing and compliance with tax obligations | Legal obligation (Art. 6.1.c GDPR) |
| Saving account addresses and checkout details to speed up future purchases | Performance of a contract and legitimate interest (Art. 6.1.b and 6.1.f GDPR) |
| Customer support and incident resolution | Legitimate interest (Art. 6.1.f GDPR) |
| Statistical analysis and service improvement | Consent (Art. 6.1.a GDPR) |
We do not send commercial communications or newsletters. If this is implemented in the future, prior and explicit consent will be requested.
4. Data recipients
Personal data may be disclosed to the following third parties only for the indicated purposes:
- Stripe, Inc. — Payment processing (based in the United States and certified under the EU-US Data Privacy Framework)
- Resend — Sending transactional emails
- Cloudflare, Inc. — CDN, security, and email routing
- Google LLC — Analytics (anonymized data)
We do not sell, rent, or share personal data with third parties for commercial purposes.
5. Data retention
- Order and invoicing data: retained for the legal period required by tax and accounting regulations. Addresses used in each purchase remain embedded in the order history and are not replaced when the user updates account preferences.
- User account data and saved checkout preferences: retained while the account remains active or until the user modifies them or requests erasure, without prejudice to applicable legal obligations.
- Browsing data: up to 26 months (Google Analytics).
6. User rights
In accordance with the GDPR, the user has the right to:
- Access: know which personal data we process.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of their data (“right to be forgotten”).
- Objection: object to the processing of their data.
- Restriction: request restriction of processing.
- Portability: receive their data in a structured format.
To exercise these rights, send an email to contacto@pulpo3d.es indicating the right you wish to exercise and attaching a copy of your ID or identification document.
Response period: 1 month from receipt of the request.
The user also has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organizational measures to protect personal data, including:
- Encrypted communications (HTTPS/TLS)
- Payment processing delegated to Stripe (PCI DSS certified)
- Access control for data
- Periodic backups
- Authenticated sessions protected by secure cookies and restricted access to saved addresses from the user account
- Saved addresses and tax details are stored on our server-side systems; they are not fully stored in browser cookies
8. Changes
We reserve the right to update this policy to adapt it to legislative changes or changes in our service. The last updated date is shown at the beginning of this document.