Privacy Policy

We take your data seriously. This policy explains what data we process, why, and your rights, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

For any privacy question, write to info@vivoxpand.com.

• Identification and contact data: name or nickname, email, phone and delivery address.
• Purchase data: products, amounts and order status (payment details are handled directly by payment providers; we do not store them).
• Content you send us: messages, reviews, ratings and survey answers.
• Browsing data: language, referring page and campaign parameters.

Purchases and orders. Managing your purchase, payment, delivery, returns and incidents. The shop and checkout run on Shopify. Legal basis: performance of the contract and legal obligations (tax and accounting).

Customer service. Answering the questions you send us via the form, email, phone or WhatsApp. Legal basis: your consent and our legitimate interest in handling your request.

Newsletter and waitlist. Sending you news, launches and offers if you have subscribed. You can unsubscribe at any time using the link in every email. Legal basis: your consent.

Reviews, surveys and discount codes. Collecting your reviews and ratings, publishing them only after review (never showing your email) and, where applicable, giving you a discount code. Legal basis: your consent.

Running and improving the site. Measuring visit sources (UTM parameters) and cart clicks in aggregate to improve the site, and protecting forms against abuse. Legal basis: legitimate interest and, where required, your cookie consent.

We keep data for as long as the relationship lasts or until you withdraw consent, and then for the applicable legal periods (for example 6 years for commercial and accounting records). Customer service messages are kept for up to 2 years.

We do not sell your data. We only share it with service providers under data processing agreements: Shopify (shop and checkout) and its payment providers, carriers for delivery, Lovable and its cloud infrastructure (site hosting, database and email delivery), and authorities when required by law.

Some of these providers may process data outside the European Economic Area; in that case appropriate safeguards apply, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@vivoxpand.com.

If you believe we have not handled your rights properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

Our products are intended for adults. We do not knowingly collect data from people under 18.

We apply technical and organisational measures to protect your data. We may update this policy; the last update date is shown above. See also our Cookie Policy.