Privacy policy

PRIVACY POLICY

Last updated: 26/04/2026

---

1. Introduction

This Privacy Policy explains how ALAYA fitness (operated by VERDE STUDIO XXI, SL) collects, uses and protects your personal data when you visit or make a purchase from www.alayafitness.com.

We are committed to protecting your personal data and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).

---

2. Data Controller

The data controller responsible for your personal data is:

VERDE STUDIO XXI, SL  
Commercial name: ALAYA fitness  
Carrer del Bruc 21, 4t 3a  
08010 Barcelona, Spain  

Email: contact@alayafitness.com  
Phone: +34 657 897 311  

---

3. Personal Data We Collect

We may collect the following types of personal data:

a) Information you provide directly:
- Name  
- Email address  
- Phone number  
- Billing and shipping address  
- Company name (for B2B clients)  
- Order details  
- Project details (quote requests)

b) Payment information:
Payments are processed securely by third-party providers. We do not store full credit card details.

c) Automatically collected data:
- IP address  
- Browser type  
- Device information  
- Website usage data  
- Cookies and tracking data  

👉 Ecommerce stores typically collect this data to process orders and improve user experience :contentReference[oaicite:0]{index=0}  

---

4. How We Use Your Data

We use your personal data for the following purposes:

- To process and fulfill your orders  
- To manage quotes and customer requests  
- To communicate with you  
- To provide customer support  
- To improve our website and services  
- To prevent fraud and ensure security  
- To send marketing communications (if you consent)

Under GDPR, businesses must clearly explain why data is collected and how it is used :contentReference[oaicite:1]{index=1}  

---

5. Legal Basis for Processing

We process your data based on:

- Contractual necessity (order processing)  
- Legal obligations  
- Legitimate interests (business operations, fraud prevention)  
- Consent (marketing communications, cookies)

---

6. Data Sharing

We may share your data with trusted third parties, including:

- Payment providers  
- Shipping and logistics companies  
- Shopify (website hosting and services)  
- Marketing and analytics tools  

Shopify may process customer data to provide services and improve experience :contentReference[oaicite:2]{index=2}  

We ensure that all third parties comply with data protection laws.

---

7. International Data Transfers

Your data may be transferred outside the European Economic Area (EEA), including to countries with different data protection standards.

In such cases, appropriate safeguards are implemented.

---

8. Data Retention

We retain your personal data only as long as necessary for:

- Order processing  
- Legal obligations  
- Business operations  

GDPR requires that data is not stored longer than necessary :contentReference[oaicite:3]{index=3}  

---

9. Your Rights

Under GDPR, you have the right to:

- Access your personal data  
- Request correction or deletion  
- Restrict processing  
- Object to processing  
- Request data portability  
- Withdraw consent at any time  

You also have the right to lodge a complaint with a data protection authority.

---

10. Cookies & Tracking Technologies

We use cookies and similar technologies to:

- Improve website functionality  
- Analyze traffic  
- Personalize content  
- Provide marketing and advertising  

Cookies are considered personal data under GDPR and must be disclosed :contentReference[oaicite:4]{index=4}  

You can manage your cookie preferences through your browser or consent banner.

---

11. Data Security

We implement appropriate technical and organizational measures to protect your data from:

- Unauthorized access  
- Loss  
- Misuse  

---

12. Third-Party Services

Our website may include third-party services such as:

- Payment gateways  
- Analytics tools  
- Marketing platforms  

These providers have their own privacy policies.

---

13. Changes to This Policy

We may update this Privacy Policy at any time.

Changes will be published on this page.

---

14. Contact

For any questions regarding this Privacy Policy:

Email: contact@alayafitness.com  
Phone: +34 657 897 311  
Address: Carrer del Bruc 21, 4t 3a, 08010 Barcelona, Spain