Last updated: October 2026

At Filoza we take the protection of your personal data seriously. This page explains what data we collect, why we use it and what rights you have, in accordance with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.

1. Who we are

This website, https://filozajoyas.com, is operated by Filoza, a handmade jewelry brand based in Barcelona, Spain. For any question about your data, contact us at hello@filozajoyas.com.

2. What data we collect and why

• Orders: name, shipping and billing address, email, phone number and order details. We use them to process and ship your order, issue invoices, send you order-related emails and handle returns or issues. Legal basis: performance of the purchase contract and compliance with legal (tax and accounting) obligations.
• Customer account: if you create an account, we store your login details, addresses and order history so you can manage them. Legal basis: your consent and performance of the contract.
• Contact form and emails: your name, email and message, to answer your inquiry. Legal basis: your consent.
• Newsletter: if you subscribe, your email address, to send you news, launches and offers from Filoza. You can unsubscribe at any time using the link in every email. Legal basis: your consent.
• Wishlist: the products you save, so you can find them later. Legal basis: your consent.

Payment details (card numbers, etc.) are processed directly by our payment provider, Stripe. Filoza never has access to them and does not store them.

3. How long we keep your data

Order data is kept for as long as required by law (generally up to 6 years for tax and accounting purposes). Newsletter data is kept until you unsubscribe. Inquiry data is kept for as long as needed to answer you. Account data is kept while your account is active or until you ask us to delete it.

4. Who we share your data with

We never sell your data. We only share it with service providers that we need to run the shop, who process it on our behalf: our hosting provider (SiteGround), our payment provider (Stripe), shipping and postal services (such as Correos) to deliver your order, our email marketing service (MailerLite) and email delivery services (Google). We may also disclose data to public authorities when required by law.

Some of these providers may be located outside the European Economic Area (for example, in the United States). In those cases, transfers are made with appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

5. Your rights

You can at any time request access to, correction, deletion or portability of your data, object to or restrict its processing, and withdraw your consent, by writing to hello@filozajoyas.com.

If you believe your data is not being handled correctly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es) or the data protection authority of your country.

6. Cookies

This website uses its own and third-party cookies that are necessary for it to work (for example, the shopping cart and login) and, where applicable, analytics or social media cookies. You can configure or block cookies in your browser settings.

7. Security

We apply reasonable technical and organizational measures to protect your data against loss, unauthorized access or misuse.

8. Changes to this policy

We may update this policy to reflect legal or service changes. The version published on this page is always the current one.