1. Data Controller

Maison Santal SL (CIF: B21905120) is the data controller responsible for your personal data. Contact: crew@santalrun.com.

2. Data We Collect

• Identity data: name, email address
• Contact data: shipping address, phone number
• Transaction data: order details, payment confirmations
• Technical data: IP address, browser type, usage patterns via cookies

3. How We Use Your Data

• To process and fulfil your orders
• To communicate about your orders and our products
• To comply with legal obligations
• To improve our website and services

4. Legal Basis

We process your data on the basis of: contractual necessity (to fulfil orders), legitimate interest (to improve our services), and consent (for marketing communications and cookies).

5. Data Sharing

We share data only with: payment processors (Stripe), shipping carriers, and hosting/infrastructure providers — all necessary to fulfil our services. We do not sell your personal data.

6. Data Retention

We retain personal data for as long as necessary to fulfil orders and comply with legal obligations (typically 5 years for tax/accounting purposes). You may request deletion at any time.

7. Your Rights (GDPR)

Under EU data protection law, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Lodge a complaint with a supervisory authority

To exercise your rights, email crew@santalrun.com.

8. Cookies

We use cookies to enhance your browsing experience. For details, see our Cookie Policy.

9. Security

We implement appropriate technical and organisational measures to protect your personal data. Payment data is handled securely by Stripe and never stored on our servers.