Privacy and cookies

• Owner: [Razón social o nombre y apellidos del titular]
• Tax ID (NIF/CIF): [NIF / CIF]
• Address: [Dirección fiscal completa]
• Privacy email: [email para ejercer derechos RGPD]

• Order data: team name, design, the crest and sponsor logos you upload, and the roster (names, numbers and sizes).
• Purchase and shipping data: name, email, address and payment details, collected directly by Stripe on its payment page. We never see or store your card.
• Custom designs: the information and sketches you send us via WhatsApp, together with your phone number.
• Customer account: name, email and your order history, if you create an account.
• Browsing: technical data, your chosen language and, only if you accept, usage statistics (Google Analytics).

If you include player names in the roster, you confirm that you have their permission (or that of their legal guardians if they are minors) to give them to us for the sole purpose of personalising the garments.

• Stripe (payments). It may transfer data to the US under the EU-US Data Privacy Framework and standard contractual clauses.
• Supabase (customer accounts and order database).
• Vercel (website hosting).
• WhatsApp / Meta, only if you contact us through that channel for a custom design.
• Google (Analytics), only with your consent.
• Web3Forms, which forwards contact form and newsletter data to us by email.
• Courier companies, to deliver your order.
• Public authorities when required by law. We do not sell or pass on your data for commercial purposes.

Order data, for the duration of the business relationship and then for the legally required period (tax: 6 years; warranty and claims: the applicable limitation periods). Design requests that don't become an order are deleted within 12 months at most. Analytics data, according to Google Analytics retention settings (14 months). Your newsletter email, until you unsubscribe. Your customer account, until you ask us to delete it.

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [email para ejercer derechos RGPD], stating which right you are exercising.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority in your country of residence.

We only use what is essential for the shop to work. Analytics is only switched on if you accept it in the banner, and you can change your choice at any time from “Cookie settings” in the website footer.

If we update this policy we will say so here with its new date. If the changes affect how we use your data, we will ask for your consent again where necessary.