Privacy policy

PRIVACY POLICY

Last updated: February 4, 2026

At Sonlux, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website, make a purchase, interact with our services, or contact us.

Our website and online store are hosted on Shopify, a platform that allows us to offer our products and services. Certain personal data may be processed by both Sonlux and Shopify, depending on the nature of the service provided.

We recommend reading this Privacy Policy carefully before using our services. By accessing, browsing, or making a purchase on our website, you acknowledge that you have read and understood this Policy.

  1. Data Controller

The controller responsible for processing your personal data through this website is:

Sonlux Contact email: contact.sonlux@gmail.com

  1. What personal data we collect

We may collect and process the following categories of personal data, depending on how you interact with our website or services:

Identification and contact data

  • First and last name
  • Email address
  • Phone number
  • Billing address
  • Shipping address

Payment and transaction data

  • Information related to the payment method
  • Payment confirmation
  • Order history
  • Products purchased, returned, exchanged, or canceled

Important: We do not directly store full bank card details. Payments are processed through secure payment providers integrated into Shopify.

Account data (if applicable)

  • Username
  • Encrypted password
  • Preferences and settings

Browsing and usage data

  • IP address
  • Device type
  • Browser
  • Operating system
  • Connection data
  • Website interactions
  • Pages visited
  • Browsing time
  • Products viewed or added to cart

Customer service data

  • Information provided when contacting us by email or forms
  • Inquiries, complaints, or issues
  • Photos or videos submitted to process issues, support requests, or order reviews

Personalization-related data (if applicable)

For personalized products, we may process files, images, videos, or other content you upload or send for the configuration or personalization of your order, solely for the purpose of providing the requested service.

  1. How we collect your data

We collect your personal data through the following sources:

Directly from you

When you:

  • make a purchase,
  • contact us,
  • create an account,
  • fill out forms,
  • subscribe to communications, or
  • send us information to personalize a product.

Automatically

Through:

  • cookies,
  • similar technologies,
  • analytics tools,
  • technical browser and device logs, and
  • Shopify's own integrations.

Through third parties

We may receive information from:

  • Shopify
  • payment gateways
  • shipping and logistics providers
  • marketing and analytics tools
  • advertising networks and technology partners, where applicable
  1. Purposes of processing

We process your personal data for the following purposes:

4.1 Managing orders and providing our services

  • Processing payments
  • Confirming purchases
  • Preparing, personalizing, and shipping orders
  • Managing exchanges, returns, or refunds
  • Providing customer service
  • Resolving issues

4.2 Personalizing your shopping experience

  • Remembering your preferences
  • Showing relevant products
  • Improving navigation and user experience

4.3 Marketing and commercial communications

We may send you commercial communications by email, always in accordance with applicable law and, where required, with your prior consent.

We may also show you our own or remarketing advertising on third-party platforms based on your activity on the website, such as products viewed or added to your cart.

You may unsubscribe at any time using the cancellation link included in our emails or by writing to us at:

contact.sonlux@gmail.com

4.4 Security and fraud prevention

  • Verifying transactions
  • Detecting suspicious or fraudulent activity
  • Protecting the website, payments, and user accounts

4.5 Legal compliance

  • Complying with tax, accounting, and legal obligations
  • Responding to requests from competent authorities
  • Defending our rights or handling claims
  1. Legal basis for processing (EU / EEA / Spain)

If you reside in Spain, the European Union, or the European Economic Area, we will process your personal data based on one or more of the following legal bases:

  • Performance of a contract: to manage purchases, payments, shipments, returns, and customer service.
  • Compliance with legal obligations: for example, tax, accounting, or consumer protection obligations.
  • Legitimate interest: to prevent fraud, improve our services, maintain website security, and carry out certain marketing actions compatible with applicable law.
  • Consent: where required, for example, for certain cookies, personalized advertising, or commercial communications.
  1. Who we share your data with

We may share your personal data only when necessary to provide our services or comply with legal obligations, including with:

  • Shopify, as our e-commerce platform provider
  • Payment providers, to process transactions
  • Shipping and logistics companies, to manage shipments and deliveries
  • Analytics, marketing, and advertising tools
  • Technology or support providers
  • Public authorities, where there is a legal obligation

All of these third parties will process your data in accordance with their own policies or as data processors, as applicable.

  1. Relationship with Shopify

Our store is hosted on Shopify, which provides the technology infrastructure to operate our e-commerce.

This means that certain personal data may be processed by Shopify to:

  • provide the online store service,
  • process orders,
  • manage payments,
  • improve performance and security, and
  • enable certain advanced features.

For more information on how Shopify processes personal data, you can review their privacy policy at:

https://www.shopify.com/legal/privacy

  1. International data transfers

Since we use Shopify and other technology providers, your personal data may be transferred to or stored outside your country of residence, including countries outside the European Economic Area (EEA).

When international transfers occur, we will take reasonable measures to ensure an adequate level of protection, including:

  • standard contractual clauses approved by the European Commission,
  • adequacy decisions, or
  • equivalent legally valid mechanisms.
  1. Data retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • order management,
  • compliance with legal obligations,
  • customer service,
  • fraud prevention, and
  • defense against claims.

Certain data may be retained for the periods required under tax, accounting, or consumer protection law.

  1. Your rights

If you reside in Spain, the European Union, or the European Economic Area, you may exercise, where applicable, the following rights:

  • Right of access
  • Right of rectification
  • Right of erasure
  • Right to object
  • Right to restriction of processing
  • Right to data portability
  • Right to withdraw consent
  • Right not to be subject to automated decisions, where applicable

To exercise any of these rights, you may write to us at:

contact.sonlux@gmail.com

We may ask you for additional information to verify your identity before processing your request.

If you believe your rights have not been respected, you may file a complaint with the competent supervisory authority. In Spain, the competent authority is the Spanish Data Protection Agency (AEPD).

  1. Commercial communications

If you subscribe to our communications, or where applicable law allows, we may send you information about:

  • news,
  • promotions,
  • products,
  • cart reminders, and
  • offers related to your activity in our store.

You may unsubscribe at any time using the cancellation link included in our emails or by writing to us at:

contact.sonlux@gmail.com

  1. Cookies and similar technologies

We use cookies and similar technologies to:

  • enable the website to function,
  • remember preferences,
  • measure performance,
  • analyze browsing behavior, and
  • display advertising or remarketing, where applicable.

For more information, we recommend reviewing our Cookie Policy.

  1. Minors

Our services are not directed at minors under the applicable legislation in your jurisdiction.

We do not knowingly collect personal data from minors. If you are a parent or legal guardian and believe that a minor has provided us with personal data, you may write to us at:

contact.sonlux@gmail.com

to request its review or deletion.

  1. Security

We apply reasonable technical and organizational measures to protect your personal data against loss, unauthorized access, alteration, disclosure, or destruction.

However, no system is completely foolproof, and we cannot guarantee absolute security on the Internet.

  1. Third-party links

Our website may include links to third-party websites or services. We are not responsible for their privacy practices, content, or terms.

We recommend reviewing their policies before providing personal information on such sites.

  1. Changes to this Privacy Policy

We may update this Privacy Policy at any time for legal, operational, or service-improvement reasons.

We will post the updated version on this same page, indicating the date of the last update.

  1. Contact

If you have any questions, requests, or complaints related to this Privacy Policy or the processing of your personal data, you may write to us at:

Sonlux Email: contact.sonlux@gmail.com