Privacy policy
Privacy and cookies policy
Martina Ibiza
At Martina Ibiza, we take the protection of your personal data seriously. This policy explains what data we collect, how we use it, with whom we share it, your rights and the cookies used on our website, under Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and Law 34/2002 (LSSI-CE).
Part I — Privacy policy
1. Data controller
Controller: Martina Ibiza. Contact: info@martinaibiza.com. Website: www.martinaibiza.com.
2. Personal data we collect
We collect the data needed to provide our services: identification and contact details (first name, surname, postal address, email and telephone); transaction data (products purchased, amount, shipping and billing addresses and order history); browsing data (IP address, browser, device, pages visited, time spent and products viewed); and marketing data (preferences, newsletter subscriptions and interactions such as email opens and clicks). Card details are processed directly by our payment gateway and are not stored on our servers. Browsing data is collected through cookies and similar technologies, described in Part II.
3. Purposes and legal bases
Order management: processing purchases, shipping, invoicing and returns; performance of a contract, Article 6(1)(b) GDPR.
Customer service: responding to enquiries, complaints and requests; contract performance and legitimate interests, Articles 6(1)(b) and 6(1)(f).
Legal obligations: tax, accounting and consumer-law compliance; Article 6(1)(c).
Marketing: newsletters, offers, news, promotions and personalisation; consent, Article 6(1)(a). Withdraw consent using the unsubscribe link in any email or by writing to info@martinaibiza.com.
Website analysis and improvement: analysing behaviour to improve products, content and the shopping experience; consent and legitimate interests, Articles 6(1)(a) and 6(1)(f).
Personalised advertising: relevant advertisements on social networks and other websites using tracking pixels (Meta Pixel) and conversion APIs; consent, Article 6(1)(a).
4. Retention
Customer and order data is retained for the contractual relationship and subsequently for applicable legal periods, including up to six years for tax and accounting obligations under the Spanish Commercial Code. Marketing data is kept until consent is withdrawn or you unsubscribe. Browsing data and cookies are retained for the periods in Part II.
5. Sharing data
We do not sell your data or transfer it to third parties for commercial purposes. We share it with service providers acting on our behalf: Shopify Inc. (store hosting, Canada, a country covered by a European Commission adequacy decision); Klaviyo, Inc. (email marketing, USA, under the EU-US Data Privacy Framework and/or standard contractual clauses); Meta Platforms, Inc. (Meta Pixel and Conversions API, USA, under the EU-US Data Privacy Framework); delivery companies including Correos, SEUR and MRW; payment gateways including Shopify Payments and PayPal; and public authorities where legally required. Our providers have the relevant data-processing agreements under Article 28 GDPR.
6. International data transfers
Some providers, including Klaviyo and Meta, are outside the European Economic Area. Transfers use GDPR safeguards such as the EU-US Data Privacy Framework, European Commission-approved standard contractual clauses or applicable adequacy decisions.
7. Your rights
Under the GDPR, you have rights of access, rectification, erasure, restriction, objection and portability; withdrawal of consent at any time; and protection against automated decisions producing significant legal effects. To exercise them, write to info@martinaibiza.com, stating the right you wish to exercise and enclosing a copy of your identity document or equivalent. We will respond within one month. You may complain to the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, Spain, www.aepd.es.
8. Data security
We apply appropriate technical and organisational measures, including SSL encryption, access controls and backups, against loss, alteration, unauthorised access or misuse, under Article 32 GDPR.
9. Children
Our website is intended for people over 14. Children under 14 require parental or guardian consent to provide their data.
Part II — Cookies policy
10. What are cookies?
Cookies are small text files downloaded to your device when you visit a website. They remember browsing information such as preferences and shopping baskets. Some are essential; optional analytics and advertising cookies are activated only if you accept them.
11. Types of cookies
First-party cookies are managed by Martina Ibiza; third-party cookies by providers such as Shopify, Klaviyo and Meta. Session cookies are deleted when the browser closes; persistent cookies remain for a set period. Technical cookies enable the website to function, preference cookies remember language and currency, analytics cookies help improve the website, and advertising cookies support relevant advertisements.
12. Specific cookies
The following list reflects the cookies described in our policy and may change with provider updates. The current version is available on this page.
| Category / provider | Cookie | Purpose | Duration |
|---|---|---|---|
| Technical and functional / Shopify | _shopify_y | Customer identifier | 1 year |
| Technical and functional / Shopify | _shopify_s | Session identifier | Session |
| Technical and functional / Shopify | cart | Shopping basket | 2 weeks |
| Technical and functional / Shopify | secure_customer_sig | Customer session | 20 years |
| Technical and functional / Shopify | _secure_session_id | Secure session | 24 hours |
| Technical and functional / Shopify | cart_currency | Basket currency | 2 weeks |
| Analytics / Shopify | _shopify_sa_t | Marketing analysis | 30 minutes |
| Analytics / Shopify | _shopify_sa_p | Marketing analysis | 30 minutes |
| Analytics / Shopify | _landing_page | Landing page | 2 weeks |
| Analytics / Shopify | _orig_referrer | Visit source | 2 weeks |
| Email marketing / Klaviyo | __kla_id | Visitor identification | 1 year |
| Email marketing / Klaviyo | _kuid_ | User behaviour | 1 year |
| Advertising / Meta | _fbp | Advertising identification | 3 months |
| Advertising / Meta | _fbc | Ad click tracking | 2 years |
| Advertising / Meta | fr | Personalised advertising | 3 months |
Our policy identifies technical and functional cookies as not requiring consent. Analytics, email marketing and advertising cookies require consent.
13. Meta Conversions API (CAPI)
Alongside Meta Pixel, we use Meta's Conversions API to send conversion events, including purchases and additions to the basket, directly from our servers to Meta. This technology is activated only if you accept marketing cookies. Data is hashed before transmission.
14. Managing cookies
On your first visit, the cookie banner allows you to accept all cookies, reject optional cookies or configure your preferences. You can change your decision using the website's cookie settings panel. You can also manage cookies through your browser settings:
- Chrome: support.google.com/chrome/answer/95647
- Firefox: support.mozilla.org/es/kb/Borrar%20cookies
- Safari: support.apple.com/es-es/guide/safari/sfri11471/mac
- Edge: support.microsoft.com/es-es/microsoft-edge
Disabling all cookies may prevent features such as the basket and sign-in from working correctly.
15. Changes
We may amend this policy to reflect legal changes or developments in our services. The current version will be published on our website.
16. Contact
For questions, email info@martinaibiza.com.