Privacy Policy
This Privacy Policy explains what personal data may be processed when you use cookieicinglab.com.
Who Is Responsible for Processing Your Data
Data controller: Dmytro Bukhtiak
NIE: Z2565850K
Address: Calle Rio Bidasoa, 62, 46025 Valencia, Spain
Email: [email protected]
Phone: +34 641 031 921
What Data May Be Processed
Depending on how you use the website, the following data may be processed:
- name;
- email address;
- information about orders and purchased digital products;
- payment and transaction identifiers;
- records of digital-content consent, including the time of consent and IP address;
- information required to provide access to purchased materials;
- rating, name, review text, and photographs submitted with a review;
- technical data about your device, browser, and use of the website;
- data collected through analytics technologies permitted by the user.
Cookie Icing Lab does not store complete payment card details. Payments are processed by Stripe.
How Your Data Is Used
Personal data may be used to:
- create and process orders;
- provide access to purchased digital materials;
- send purchase confirmations and access or download links;
- provide customer support;
- send a request to leave a review after a purchase;
- process and, where the appropriate consent has been provided, publish reviews;
- analyze and improve the website;
- comply with legal, accounting, tax, and consumer-protection obligations;
- prevent abuse and maintain website security.
Legal Bases for Processing
Depending on the specific processing activity, personal data is processed on the basis of:
- the necessity to perform a contract with the customer;
- compliance with legal obligations;
- the user's consent;
- the legitimate interests of the website owner where permitted by law.
Consent may be withdrawn at any time where processing is based on consent.
Reviews
After a purchase, Cookie Icing Lab may send an email inviting the customer to leave a review.
A review may involve processing the customer's name, rating, review text, and uploaded photographs.
The rating may be included in aggregate rating statistics. Review text, the customer's name, and photographs are published only where the appropriate consent has been provided.
Third-Party Services
Third-party service providers used in connection with the website include:
Stripe — payment processing.
Google Analytics — website usage analytics.
Microsoft Clarity — analysis of user interaction with the website.
Crisp — online chat and visitor communication.
Some providers may process data outside the European Economic Area. Where this occurs, international data transfers are handled using mechanisms provided for by applicable law.
Data Retention
Personal data is retained only for as long as necessary for the relevant purpose and for any additional period required by applicable tax, accounting, or other legal obligations.
Your Rights
Under applicable data protection law, you may request:
- access to your personal data;
- correction of inaccurate data;
- deletion of data;
- restriction of processing;
- objection to processing;
- data portability where applicable;
- withdrawal of previously given consent.
To exercise these rights, contact:
You also have the right to lodge a complaint with the competent data protection authority, including the Agencia Española de Protección de Datos (AEPD).
Changes to This Policy
This Privacy Policy may be updated when the operation of the website, the services used, or applicable legal requirements change.
