PRIVACY POLICY
Last Updated: June 30, 2026
This Privacy Policy describes how MagnLock, operated
by , Passeig Colom 32,
1ªA, 07458 Can Picafort, Illes Balears, Spain
("MagnLock", "we", "us", "our") collects, uses,
and shares your personal data when you visit or
make a purchase at magnlock.com.
────────────────────────────────────────
1. DATA CONTROLLER
────────────────────────────────────────
The data controller responsible for your personal
data is:
MagnLock
Passeig Colom 32, 1ªA
07458 Can Picafort, Illes Balears, Spain
Email: storesupportt@gmail.com
────────────────────────────────────────
2. PERSONAL DATA WE COLLECT
────────────────────────────────────────
We collect the following categories of personal data:
A. Data you provide directly:
• Full name
• Email address
• Shipping and billing address
• Phone number (if provided)
• Payment information (processed securely —
we do not store card details)
• Communications you send us
B. Data collected automatically:
• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent
• Referring URLs
• Cookie identifiers and similar tracking data
• Purchase history and browsing behavior
────────────────────────────────────────
3. HOW WE USE YOUR DATA
────────────────────────────────────────
We use your personal data for the following purposes
and legal bases:
PURPOSE LEGAL BASIS (GDPR)
─────────────────────────────────────────────────
Process and fulfill your order Contract (Art. 6.1.b)
Send order confirmations Contract (Art. 6.1.b)
Process payments Contract (Art. 6.1.b)
Fraud prevention Legitimate interest
(Art. 6.1.f)
Legal compliance Legal obligation
(Art. 6.1.c)
Customer support Contract (Art. 6.1.b)
Marketing emails (if consented) Consent (Art. 6.1.a)
Analytics and site improvement Legitimate interest
(Art. 6.1.f)
Targeted advertising Consent (Art. 6.1.a)
────────────────────────────────────────
4. THIRD-PARTY SERVICE PROVIDERS
────────────────────────────────────────
We share your data with the following trusted
third-party service providers:
SHOPIFY INC.
Purpose: E-commerce platform, order management,
payments infrastructure
Location: United States
Privacy Policy: https://www.shopify.com/legal/privacy
SHOPIFY PAYMENTS (STRIPE)
Purpose: Payment processing
Location: United States
Privacy Policy: https://stripe.com/privacy
META PLATFORMS, INC. (Facebook/Instagram)
Purpose: Advertising pixel, conversion tracking,
targeted advertising
Location: United States
Privacy Policy: https://www.facebook.com/privacy/policy
Opt-out: https://www.facebook.com/ads/preferences
GOOGLE LLC
Purpose: Google Ads, conversion tracking, analytics
Location: United States
Privacy Policy: https://policies.google.com/privacy
Opt-out: https://adssettings.google.com
TIKTOK INC.
Purpose: Advertising pixel, conversion tracking,
targeted advertising
Location: United States / Singapore
(Parent company: ByteDance Ltd., China)
Privacy Policy: https://www.tiktok.com/legal/privacy-policy
Opt-out: https://www.tiktok.com/legal/privacy-settings
KLAVIYO INC.
Purpose: Email marketing automation
Location: United States
Privacy Policy: https://www.klaviyo.com/legal/privacy
All third-party providers are contractually required
to process your data only as instructed by us and
in accordance with applicable data protection law.
────────────────────────────────────────
5. INTERNATIONAL DATA TRANSFERS
────────────────────────────────────────
As a company based in the European Union (Spain),
we are subject to GDPR. Some of our service
providers are located in the United States and
other countries outside the EU/EEA.
When transferring your personal data outside the
EU/EEA, we ensure appropriate safeguards are in
place, including:
• Standard Contractual Clauses (SCCs) approved
by the European Commission.
• Adequacy decisions where applicable.
• Provider participation in recognized frameworks.
Please note that TikTok's parent company ByteDance
is based in China. Data transferred via TikTok
may be accessible from China. We rely on Standard
Contractual Clauses and TikTok's data processing
agreements for this transfer. You may opt out of
TikTok tracking through your cookie preferences.
────────────────────────────────────────
6. COOKIES AND TRACKING TECHNOLOGIES
────────────────────────────────────────
We use cookies and similar tracking technologies
on magnlock.com. These fall into four categories:
STRICTLY NECESSARY
Required for the website to function. Cannot be
disabled. Examples: shopping cart, login session,
security tokens.
FUNCTIONAL
Remember your preferences. Examples: language,
currency, recently viewed products.
ANALYTICS
Help us understand how visitors use our site.
Provider: Google Analytics.
MARKETING AND ADVERTISING
Used to show you relevant ads. Providers: Meta,
TikTok, Google Ads, Klaviyo.
You can manage your cookie preferences through
the cookie banner displayed when you first visit
our site, or by updating your preferences at any
time via the cookie settings link in our footer.
You can also control cookies through your browser
settings. Note that disabling certain cookies may
affect site functionality.
────────────────────────────────────────
7. DATA RETENTION
────────────────────────────────────────
We retain your personal data for the following
periods:
• Order data: 7 years (Spanish tax law requirement)
• Customer account data: Duration of relationship
+ 3 years
• Marketing consent records: Until withdrawn +
3 years
• Analytics data: 26 months
• Fraud prevention records: Up to 5 years
────────────────────────────────────────
8. YOUR RIGHTS UNDER GDPR (EU/EEA Residents)
────────────────────────────────────────
If you are located in the EU/EEA, you have the
following rights regarding your personal data:
• RIGHT OF ACCESS — Request a copy of your data.
• RIGHT TO RECTIFICATION — Correct inaccurate data.
• RIGHT TO ERASURE — Request deletion of your data
(subject to legal retention obligations).
• RIGHT TO RESTRICTION — Limit how we use your data.
• RIGHT TO DATA PORTABILITY — Receive your data in
a portable format.
• RIGHT TO OBJECT — Object to processing based on
legitimate interests.
• RIGHT TO WITHDRAW CONSENT — Withdraw consent for
marketing at any time.
To exercise these rights, contact us at:
storesupportt@gmail.com
You also have the right to file a complaint with
the Spanish Data Protection Authority:
Agencia Española de Protección de Datos (AEPD)
Website: www.aepd.es
Address: C/ Jorge Juan, 6, 28001 Madrid, Spain
────────────────────────────────────────
9. YOUR RIGHTS UNDER CCPA/CPRA
(California Residents)
────────────────────────────────────────
If you are a California resident, you have the
following rights under the California Consumer
Privacy Act (CCPA) and California Privacy Rights
Act (CPRA):
RIGHT TO KNOW
You have the right to request disclosure of:
• Categories of personal information collected.
• Sources from which information is collected.
• Business purpose for collecting information.
• Categories of third parties with whom we share
information.
• Specific pieces of personal information collected.
RIGHT TO DELETE
You have the right to request deletion of personal
information we have collected, subject to certain
exceptions.
RIGHT TO CORRECT
You have the right to request correction of
inaccurate personal information.
RIGHT TO OPT-OUT OF SALE OR SHARING
We may share your personal data with advertising
partners (Meta, Google, TikTok) for targeted
advertising purposes. This may constitute a "sale"
or "sharing" under California law.
You have the right to opt out at any time by:
• Clicking "Do Not Sell or Share My Personal
Information" in our website footer.
• Updating your cookie preferences.
• Emailing us at storesupportt@gmail.com with
subject "CCPA Opt-Out Request".
RIGHT TO NON-DISCRIMINATION
We will not discriminate against you for exercising
any of your CCPA/CPRA rights.
Categories of personal information collected
in the past 12 months:
• Identifiers (name, email, IP address, address)
• Commercial information (purchase history)
• Internet activity (browsing behavior on our site)
• Geolocation data (delivery address)
• Inferences drawn from above (purchase preferences)
────────────────────────────────────────
10. CHILDREN'S PRIVACY
────────────────────────────────────────
Our website is not directed to children under
the age of 13. We do not knowingly collect
personal data from children under 13. If you
believe we have inadvertently collected data
from a child, please contact us immediately
at storesupportt@gmail.com.
────────────────────────────────────────
11. SECURITY
────────────────────────────────────────
We implement appropriate technical and
organizational measures to protect your personal
data against unauthorized access, disclosure,
alteration, or destruction. Payment data is
processed through PCI-DSS compliant systems.
No method of transmission over the internet is
100% secure. We cannot guarantee absolute security.
────────────────────────────────────────
12. CHANGES TO THIS POLICY
────────────────────────────────────────
We may update this Privacy Policy from time to time.
We will notify you of significant changes by posting
the new policy on this page with an updated date.
We recommend reviewing this policy periodically.
────────────────────────────────────────
13. CONTACT
────────────────────────────────────────
For any privacy-related questions or to exercise
your rights:
Email: storesupportt@gmail.com
Response time: Within 30 days of receipt
MagnLock —
Passeig Colom 32, 1ªA
07458 Can Picafort, Illes Balears, Spain