1. Data controller
Effective date: 21 August 2026.
This Privacy Policy explains how Eterna Bloom (trade name Eteriabloom) collects, uses, stores, and protects personal data of users and customers of eteriabloom.com.
- Controller: Eterna Bloom (Eteriabloom)
- Tax ID / VAT: shown on each invoice and available on request at eteriabloom@gmail.com
- Address: Calle Dalt Alcalde Sadurni Pujadas 29, 08430 La Roca del Vallès, Spain
- Contact and data-protection email: eteriabloom@gmail.com
- Phone: +34 693 252 488
2. Data we collect
- Identity data: name, phone number, email address.
- Account data: phone number, encrypted password, order history.
- Order and delivery data: delivery address, postal code, city, order comments, purchased items.
- Payment-related data: payment status and technical identifiers from Stripe. We do not store full bank card details.
- Communication data: contact forms, callback requests, and support messages.
- Technical data: IP address, essential cookies, device/browser information, language, and basic security logs.
3. Purposes and legal bases
- To process orders, payments, and deliveries: performance of a contract.
- To create and manage customer accounts: performance of a contract or pre-contractual steps.
- To respond to enquiries: consent or legitimate interest.
- To prevent fraud, misuse, and unauthorized access: legitimate interest and legal compliance.
- To comply with tax, accounting, and consumer law: legal obligation.
- To operate and improve the website: legitimate interest; non-essential analytics would only be used with consent.
4. Recipients and processors
Personal data may be processed by providers needed to run the shop:
- Payments: Stripe
- Shipping / labels: Sendcloud and the carriers used for the shipment
- Hosting / infrastructure: Hetzner
- Transactional email: Resend
- SMS / phone verification: Twilio
- Public authorities and courts where disclosure is legally required
5. International transfers
Some providers (for example Stripe or Twilio) may process data outside the European Economic Area. Where they do, we rely on GDPR safeguards such as Standard Contractual Clauses or equivalent lawful mechanisms.
6. Data retention
- Account data: while the account remains active and for any legally required period afterwards.
- Order and invoice data: for the periods required under tax, accounting, and consumer law (in Spain, typically up to 6 years for commercial records).
- Enquiries and forms: for as long as needed to answer the request and handle related claims.
- Technical and security data: for as long as reasonably necessary for security, diagnostics, and compliance.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction, portability, and withdrawal of consent where applicable by writing to eteriabloom@gmail.com. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or your local supervisory authority.
8. Security
We apply reasonable technical and organizational measures to protect personal data. No system can guarantee absolute security.
9. Cookies
This website uses only essential cookies needed for the shop to work (cart, session, security, and language). There is no separate cookie-policy page. You can block cookies in your browser; some features (cart or account access) may stop working. If we later use analytics or third-party cookies, we will ask for consent first.
10. Children
This website is not directed at children under 16. If we learn that a minor’s data was collected without a valid legal basis, we will delete or restrict it.
11. Changes to this policy
We may update this policy. The version published on this page applies.