Privacy policy

PRIVACY POLICY

Last updated: February 2026

1. DATA CONTROLLER

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), the data controller is:

ICORAC SL
CIF: B95605861
Address: Landaburu Kalea 17, B – 4, 01470 Amurrio (Álava), Spain
Email: klixer@klixer.com

2. WHAT DATA WE COLLECT

We may collect the following personal data:

Name and surname
Billing and shipping address
Email address
Phone number
VAT number (if applicable)
Order history
IP address and usage data
Cookies and tracking data

Payment information is processed securely via Stripe or PayPal. We do not store credit card details.

We do not process special categories of personal data.

3. PURPOSE OF PROCESSING

Your personal data is processed for the following purposes:

To manage orders and deliver products
To provide customer support and warranty service
To process payments
To comply with tax and legal obligations
To prevent fraud
To improve website performance and user experience
To send marketing communications via email through Klaviyo (only if consent has been given)

4. LEGAL BASIS

Processing is based on:

Performance of a contract (Art. 6.1.b GDPR)
Legal obligation (tax and accounting laws)
Legitimate interest (fraud prevention and service improvement)
Consent (marketing communications)

You may withdraw your consent at any time.

5. DATA RETENTION

We retain personal data:

Order and invoice data: minimum 4 years in accordance with Spanish tax law
Customer service records: as long as necessary to resolve issues
Marketing data: until consent is withdrawn
Usage data: limited period for analytics purposes

6. DATA SHARING

We share personal data only with trusted service providers necessary to operate our business, including:

Shopify Inc. (e-commerce platform and hosting)
Stripe / PayPal (payment processing)
DHL and other courier companies (shipping and logistics)
Klaviyo Inc. (email marketing and customer communication)
Accounting and legal advisors

All service providers act as data processors under GDPR-compliant agreements.

We do not sell personal data.

7. INTERNATIONAL TRANSFERS

Some service providers (e.g., Shopify, Klaviyo, Stripe) may process data outside the European Economic Area.

Where applicable, data transfers are protected by Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms under GDPR.

8. YOUR RIGHTS

You may exercise the following rights:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object
Right to withdraw consent

To exercise your rights, contact: klixer@klixer.com

If you believe your rights have been violated, you may file a complaint with:

Agencia Española de Protección de Datos (AEPD)
https://www.aepd.es

9. CHILDREN

Our website is not intended for individuals under 14 years of age (minimum digital consent age in Spain).

We do not knowingly collect personal data from minors.

10. COOKIES

We use cookies to:

Ensure website functionality
Analyze traffic
Improve user experience

You may manage cookies through your browser settings.

For detailed information, please refer to our Cookies Policy.

11. DATA SECURITY

We apply appropriate technical and organizational measures to protect personal data.

Payments are processed through secure encrypted platforms (SSL).

However, no method of transmission over the Internet can guarantee absolute security.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy when necessary to reflect legal or operational changes.

The updated version will always be available on this page.

13. CALIFORNIA PRIVACY NOTICE (CCPA/CPRA)

This section applies only to residents of California, USA.

Under the California Consumer Privacy Act (CCPA), as amended by the CPRA, California residents have the right to:

Request access to the personal information we have collected about them
Request correction of inaccurate personal information
Request deletion of their personal information (subject to legal exceptions)
Request information about categories of personal data collected and disclosed
Opt out of the sale or sharing of personal information

We do not sell personal information.

To exercise any of these rights, please contact:

Email: klixer@klixer.com

We may need to verify your identity before processing your request.

We will not discriminate against you for exercising your rights.