Privacy policy

Last Updated: [06/08/2025]

1. Who We Are

This website (“looksanddiy.com”) is operated by Esther Martínez Gil, DNI 17459818N, with registered address at Zaragoza, Spain.
If you have any questions about this policy or your personal data, you can contact us at: looksanddiy@gmail.com.

We are committed to protecting your privacy and process data in compliance with the EU General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. What Data We Collect

We collect the following categories of personal data:

Identity Data: Name, email address, billing address (for purchases).
Payment Data: Processed by Stripe, PayPal, or Klarna. We do not store or process your card details.
Technical Data: IP address (anonymized), browser type, device type, and other diagnostic data via analytics tools.
Marketing Data: Email engagement data (opens, clicks) via MailerLite.

We collect data when you:

Purchase a digital product.
Subscribe to our newsletter or download free resources.
Abandon your cart (automated reminders).
Contact us via forms.

3. Why We Process Your Data

Purpose	Legal Basis (GDPR)	Tools Used
Order fulfillment	Contract performance	WooCommerce, Stripe, Klarna, PayPal
Abandoned cart recovery	Legitimate interest	MailerLite
Newsletter and promotional emails	Consent	MailerLite
Website usage analytics	Consent	Google Analytics 4 (with IP anonymization)
Fraud and abuse prevention	Legal obligation / Legitimate interest	Wordfence, payment providers

You can withdraw your consent for marketing communications at any time by clicking the “Unsubscribe” link in any email or contacting us directly.

4. Who We Share Data With

We share your data only with trusted third-party service providers that help us operate the website and deliver our services. These include:

Service	Purpose	Privacy Policy
Stripe	Payment processing	Stripe’s Policy
PayPal	Payment processing	PayPal’s Policy
Klarna	Financing/payment options	Klarna’s Policy
MailerLite	Email marketing and automation	MailerLite’s Policy
Google Analytics 4	Anonymous usage analytics	Google’s Policy
Amazon Associates	Affiliate sales tracking	Amazon’s Policy

We never sell or rent your personal data.

5. International Data Transfers

Some of the third-party services we use are based outside the European Economic Area (EEA). Where data is transferred internationally, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses (SCCs)
Participation in recognized frameworks (e.g., the EU-U.S. Data Privacy Framework where applicable)

6. Your Rights Under GDPR

You have the right to:

Access your personal data.
Correct inaccurate or outdated data.
Request deletion of your data (“right to be forgotten”).
Withdraw consent for processing (e.g., unsubscribe from emails).
Request data portability (where applicable).
Object to processing under certain circumstances.

To exercise your rights, please contact looksanddiy@gmail.com. We will respond within 30 days.

7. Data Retention

We retain data only for as long as necessary:

Data Type	Retention Period
Order and billing data	5 years (for accounting and tax compliance)
Newsletter subscribers	Until you unsubscribe or request deletion
Analytics data	14 months (anonymized via GA4 settings)
Support inquiries	12 months

8. How We Keep Your Data Secure

We take security seriously and implement appropriate technical and organizational measures, including:

SSL encryption for all data transmission.
Restricted access to administrative data.
Secure backups and malware protection.
Firewall and threat monitoring (via Wordfence).
Only working with vendors who comply with GDPR and data protection standards.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in legal requirements or our services.

When updates are made, we will notify users via email (if subscribed) or a notification on the Site. The date of the last update will always be shown at the top.