Privacy policy

Privacy Policy

This policy explains what we collect, why, and what you can do about it. It applies to every customer, wherever you order from.

1. Who we are

Laftya operates laftya.com. For any question about your data, write to contact@laftya.com.

2. What we collect

  • Order data: name, delivery address, email, phone number, order history.
  • Payment data: handled directly by our payment providers. We never see or store your full card number.
  • Browsing data: pages viewed, device, approximate location from your IP address, collected through cookies and similar technologies.
  • Anything you send us: emails, messages, review content.

3. Why we use it

  • To take, ship and support your order. Legal basis: performance of a contract.
  • To meet accounting and tax obligations. Legal basis: legal obligation.
  • To measure and improve the site, and to show relevant advertising. Legal basis: your consent, which you can withdraw at any time.

4. Who we share it with

Only with the providers we need to run the shop: Shopify (hosting and orders), our payment providers, our carriers, our email platform, and analytics and advertising tools such as Microsoft Clarity and Meta. Each is bound by contract to protect your data. We never sell your personal data.

5. International transfers

Some of these providers are based outside the European Economic Area, including in the United States and Canada. Where that is the case, transfers are covered by Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

Order and invoicing data: as long as accounting law requires, generally 6 to 10 years. Marketing data: 3 years from your last interaction. Browsing data: 13 months at most.

7. Your rights

You can request access, correction, deletion, restriction or portability of your data, and object to certain processing. Write to contact@laftya.com and we answer within 30 days. If you are in the EU you may also complain to your national supervisory authority, in Spain the AEPD. In the United Kingdom, the ICO. If you are a California resident, you have the right to know, delete and opt out of the sale or sharing of your personal information; we do not sell it.

8. Cookies

Only strictly necessary cookies are set without your consent. Analytics and advertising cookies are set only if you accept them, and you can change your mind at any time from the cookie banner.

9. Children

Our products and this site are not intended for anyone under 18. We do not knowingly collect data from children.

Last updated: 29 August 2026