Privacy Policy

This Privacy Policy explains how Doodles, S.L., Doodles, we, our or us, collects, uses and protects your personal data when you visit or use doodlesbrand.co, the Website.

Data Controller
Doodles, S.L.
• Tax Identification Number (NIF): B27654532
• Registered office: Calle de Cervantes 22, 28014 Madrid, Spain
• Mercantile Registry of Madrid, Section 8, Sheet M-886687
• Email: doodles@doodlesbrand.co

Personal Data We Collect
Depending on how you use the Website, we may collect the following categories of personal data:
• Identification information (such as your name).
• Contact information (including email address, telephone number where provided, billing and shipping addresses).
• Account information if you choose to create a customer account.
• Order and purchase history.
• Payment information. Payments are processed securely by our payment providers. Doodles does not store your full payment card details.
• Wishlist information.
• Newsletter subscription preferences.
• Communications you send to us, including customer service enquiries.
• Technical information, including IP address, browser type, device information and Website usage data collected through cookies and similar technologies.
Providing certain information is necessary for us to process and fulfill your order. If you choose not to provide this information, we may be unable to provide our products or services.

How We Use Your Personal Data
We process your personal data to:
• Operate and maintain the Website.
• Create and manage customer accounts.
• Process, fulfill and deliver orders.
• Process payments.
• Communicate with you regarding your orders.
• Respond to enquiries and customer support requests.
• Maintain your wishlist, where applicable.
• Send newsletters and marketing communications where you have consented or where otherwise permitted by applicable law.
• Send abandoned cart reminders where permitted by law.
• Improve our Website, products and customer experience.
• Comply with legal and regulatory obligations.
• Detect fraud and protect the security of the Website.

Legal Basis for Processing
Depending on the purpose of processing, we rely on one or more of the following legal bases under the General Data Protection Regulation (GDPR):
• Performance of a contract.
• Compliance with legal obligations.
• Your consent.
• Our legitimate interests, provided they do not override your rights and freedoms.
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Marketing Communications
If you subscribe to our newsletter, we may send you updates about new collections, products, events and other information relating to DoOdLes.
You may unsubscribe at any time by clicking the unsubscribe link included in our emails or by contacting us at doodles@doodlesbrand.co.
Where permitted by law, we may also send abandoned cart reminders if you begin the checkout process without completing your purchase.

Sharing Your Personal Data
We only share your personal data where necessary to operate our business or where required by law. Depending on the services you use, your information may be shared with:
• Shopify, which hosts and operates our online store.
• Payment service providers, including Shopify Payments, PayPal and Apple Pay.
• Shipping and logistics providers responsible for delivering your orders.
• Customer support and email service providers.
• Analytics providers, including Google Analytics.
• Professional advisers, auditors or public authorities where legally required.
We do not sell your personal data.

International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA).
Where this occurs, we take appropriate safeguards in accordance with applicable data protection laws, including the use of adequacy decisions or Standard Contractual Clauses approved by the European Commission where required.

Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including complying with legal, tax, accounting and regulatory obligations.
When personal data is no longer required, it will be securely deleted or anonymised.

Your Rights
Subject to applicable law, you have the right to:
• Access your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data.
• Request restriction of processing.
• Object to certain processing activities.
• Receive your personal data in a portable format where applicable.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or another competent supervisory authority.
To exercise any of these rights, please contact us at doodles@doodlesbrand.co.

Data Security
We implement appropriate technical and organisational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
While we take reasonable steps to protect your information, no method of electronic transmission or storage can be guaranteed to be completely secure.

Children's Privacy
Although our products are intended for children, the Website is intended for use by adults purchasing products on their behalf.
We do not knowingly collect personal data directly from children. If we become aware that we have collected personal data from a child in circumstances where such processing is not permitted, we will take appropriate steps to delete that information.

Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, legal obligations or the services we use.
Any updates will be published on this page together with the revised Last updated date.

Contact Us
If you have any questions regarding this Privacy Policy or our processing of your personal data, please contact us at doodles@doodlesbrand.co.