Privacy policy
1. Data controller
| Owner | María Martínez Recio |
| Trading name | Hanalima |
| Activity | Retail sale of handmade jewellery |
| info@hanalima.es | |
| Website | https://hanalima.es |
2. Applicable regulations
This policy has been drawn up in compliance with:
- Regulation (EU) 2016/679 (GDPR): General Data Protection Regulation.
- Organic Law 3/2018 (LOPDGDD): Protection of Personal Data and guarantee of digital rights.
- Law 34/2002 (LSSI-CE): Information Society Services and Electronic Commerce.
3. What data we collect and what we use it for
| Purpose | Data processed | Legal basis |
|---|---|---|
| Order management | First name, surname, shipping address, email, phone number | Performance of a contract |
| Invoicing | Name, NIF/NIE (tax ID), billing address | Legal obligation |
| Customer service | Email, name, content of the enquiry | Legitimate interest |
| Sending the newsletter | Email, name | Express consent |
| Personalised advertising | Browsing behaviour, interaction data | Express consent |
| Service improvement | Anonymised browsing data | Legitimate interest |
We will never collect more data than is strictly necessary for each purpose.
4. Who do we share your data with?
Your data is not sold or transferred to third parties for commercial purposes. It is only shared with the service providers needed to manage your order:
- Shopify Inc.: ecommerce platform (order processing).
- Correos Express / InPost: courier companies (shipping management).
- Payment gateways (Stripe, PayPal, Klarna, Bizum): payment processing. Hanalima does not store bank or card details.
- Mailchimp / Klaviyo or other email marketing tools, if you are subscribed to the newsletter.
- Meta Platforms (Facebook / Instagram): if you have consented to personalised advertising.
All providers have signed the corresponding data processing agreement and offer sufficient guarantees of GDPR compliance.
5. International data transfers
Some providers (such as Shopify or Meta) may process data outside the European Economic Area. In all cases, these transfers are carried out under the appropriate safeguards established by the GDPR (standard contractual clauses, adequacy decisions, etc.).
6. How long do we keep your data?
| Type of data | Retention period |
|---|---|
| Order data | 5 years (tax and commercial obligation) |
| Invoicing data | 6 years (General Tax Law) |
| Newsletter | Until you withdraw your consent |
| Customer service | 1 year from resolution |
| Browsing data | As per the cookie policy |
7. Your rights
You can exercise the following rights at any time by emailing us at info@hanalima.es:
- Access: find out what data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data (right to be forgotten).
- Restriction: ask us to restrict processing in certain circumstances.
- Portability: receive your data in a structured, commonly used format.
- Objection: object to processing, especially for marketing purposes.
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
We will respond within a maximum of 30 days. If you consider that your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es
8. Data security
Hanalima applies technical and organisational measures to protect your data against unauthorised access, loss or destruction, including the use of HTTPS protocol, restricted access and providers with recognised security certifications.
9. Minors
This website is not aimed at children under 14. We do not knowingly collect data from minors. If we detect that a minor's data has been provided without parental consent, we will delete it immediately.
10. Changes
This policy may be updated to reflect legal or service changes. The current version will always be available on this page with the date of the last update.
11. Contact
For any privacy enquiries: info@hanalima.es
Cookie Policy
Last updated: May 2026
What are cookies?
Cookies are small text files stored on your device when you visit a website. They help the website work properly, remember your preferences and, where applicable, analyse user behaviour or show relevant advertising.
What cookies does hanalima.es use?
Technical or necessary cookies (do not require consent)
These are essential for the shop to work. Without them you could not add products to your basket or complete a purchase.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_session_id |
Shopify | Keeps your shopping session active | Session |
cart |
Shopify | Saves the products in your basket | 2 weeks |
secure_customer_sig |
Shopify | Identifies registered customers | 1 year |
cookieconsent_status |
Hanalima | Remembers your cookie preferences | 1 year |
Analytics cookies (require consent)
These help us understand how the shop is used so we can improve it. The data is anonymous or pseudonymised.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics | Distinguishes unique users | 2 years |
_ga_XXXX |
Google Analytics | Stores session state | 2 years |
_shopify_s |
Shopify Analytics | Behavioural analytics | Session |
Marketing cookies (require consent)
These are used to show you personalised advertising on social media and measure the performance of our ads.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_fbp |
Meta (Facebook/Instagram) | Tracking for Facebook Ads | 3 months |
_fbc |
Meta (Facebook/Instagram) | Records clicks on Facebook ads | 3 months |
fr |
Meta | Personalised advertising on Facebook and Instagram | 3 months |
How can I manage cookies?
You can manage your cookie preferences at any time:
- From the cookie banner that appears when you first visit the website.
- From your browser settings:
| Browser | How to manage cookies |
|---|---|
| Chrome | Settings → Privacy → Cookies |
| Firefox | Options → Privacy → Cookies |
| Safari | Preferences → Privacy |
| Edge | Settings → Privacy and security |
⚠️ Disabling technical cookies may stop the shop from working properly, including the checkout process.
Third-party cookies
Some cookies are placed by third parties (Google, Meta). Hanalima does not control these cookies directly. For more information you can consult their policies:
Consent management platform
hanalima.es uses a consent management system (cookie banner) that records your preferences and ensures that non-essential cookies are only activated with your express authorisation, in compliance with the GDPR and the LSSI-CE.
Changes
This policy may be updated to reflect changes in the cookies used or in applicable regulations. The current version will always be available on this page.
Contact
Questions about our use of cookies? Email us at info@hanalima.es