Privacy Policy

At María Palomo Couture we treat your data with the same care we put into every stitch. Here we explain, in plain terms, what data we collect, what we use it for and what rights you have.

Who we are

Data controller: María Palomo Romero (María Palomo Couture)
Avenida República Argentina 10, 1º Izq. · 41011 Sevilla
info@mariapalomocouture.com · 954 33 40 52
Website: https://mariapalomocouture.com

What data we collect and why

When you buy in the online shop: your name, delivery and billing address, email, phone number and, if you choose to give them to us, your wedding date, the text for the embroidery and the gift message. For deliveries to the Canary Islands, Ceuta and Melilla we also ask for the DNI/NIE (Spanish ID number) of the person receiving the parcel, because customs require it. We use this data to make and send you your order, write to you about its progress (confirmation, atelier, dispatch, delivery), issue your invoice, handle size exchanges and, once you have it, ask you for a review. The legal basis is the performance of the purchase contract and our tax obligations; the review request is based on our legitimate interest in improving, and you can ask us not to send it.

Payment is processed by Stripe on its own secure servers: we never see or store your card number. Stripe keeps it securely so that, if you ask us to on the page that follows your purchase, you can add a piece to your order with one click; we never charge you without your confirmation. If you choose to pay in instalments with Klarna, Klarna processes your data to decide on and manage that payment in accordance with its own privacy policy.

Delivery is handled by the courier TIPSA, to which we pass on your name, address and phone number solely to deliver your parcel (for deliveries outside Spain, the parcel is delivered by their partner FedEx) and, for deliveries to the Canary Islands, Ceuta and Melilla, also the DNI/NIE of the person receiving it, for customs.

When you write to us (contact form, email or phone): we use your data only to reply to you and, if you ask, to book your appointment at the atelier. Legal basis: your consent and the pre-contractual steps you request from us.

When you sign up for the newsletter or the embroidery gift, or download a guide: we use your email (and your name, if you give it to us) to send you what you asked for, news and content for brides through Klaviyo, our email platform. Legal basis: your consent, which you can withdraw whenever you like using the unsubscribe link in every email.

If you start a purchase and don't complete it: if you enter your email on the checkout page and don't complete the purchase, we will send you a reminder with the pieces in your bag. Legal basis: our legitimate interest in helping you complete the order you started. The data from that payment attempt is deleted after 30 days, and you can object using the unsubscribe link in the email itself or by writing to info@mariapalomocouture.com.

Your orders in Klaviyo: when you buy, we send Klaviyo a summary of your order (pieces, amount and, if you gave it to us, your wedding date) so that we don't send you offers meant for people who haven't bought yet, and to know which emails are useful. If you haven't subscribed, this doesn't mean we'll start sending you news. Legal basis: our legitimate interest; you can object by writing to us.

When you leave a review: we publish the name you choose to display, your rating, your text and any photos you upload. You can ask us to remove it at any time.

How long we keep your data

Order and invoice data, for the periods required by tax legislation (generally 4-6 years). Newsletter and guide data, until you unsubscribe. Data from a payment you don't complete, 30 days. Contact enquiries, for as long as needed to deal with them and a reasonable period afterwards.

Who we share your data with

Only with those who help us provide the service to you, and only what is strictly necessary: Stripe (payments), Klarna (only if you choose to pay in instalments), TIPSA and their partner FedEx (deliveries), Klaviyo (news emails if you subscribe, the reminder for an unfinished purchase and the summary of your orders, as explained above), our web hosting provider in Spain and, with your cookie consent, Google, Meta and Klaviyo for analytics and advertising (see the cookie policy). Some of these providers (Stripe, Klaviyo, Google, Meta) may process data in the USA under the EU-US Data Privacy Framework and standard contractual clauses. We never sell your data.

Your rights

You can access your data, correct it, ask us to delete it, object to a specific use, restrict its processing or take it to another provider. Write to us at info@mariapalomocouture.com and we will sort it out straight away. If you feel we haven't handled it properly, you can lodge a complaint with the Agencia Española de Protección de Datos, the AEPD (Spanish Data Protection Authority), at aepd.es.

Security

The website always runs over an encrypted connection (HTTPS), payments are processed outside our servers and access to order data is restricted and protected with two-step verification.

Last reviewed: September 2026. If we change anything important, we will publish it here.