Privacy policy
Last updated: 24 October 2026
This policy explains what personal data we collect when you visit or buy from this store, what we use it for, who we share it with and what rights you have. It complies with the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
Rostyslav Bachyk
NIE: Z0041311P
Avenida Fabraquer 3, 17J, 03560 El Campello, Alicante, Spain
Email: hola@rb-home.store
If you have any question about this policy or about how we handle your data, write to us at that address.
2. What data we collect
Data you give us: name, delivery and billing address, email, phone number if you provide it, order contents and the messages you send us.
Payment data: payment is processed by our payment provider. We receive confirmation that the payment went through and some limited details, such as the card type and its last four digits. We never receive or store your full card number.
Data collected automatically: IP address, browser and device type, operating system, referring pages and how you move through the store. This is collected through cookies and similar technologies (see section 8).
Account data: if you create an account, your login details and order history.
3. What we use it for, and the legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Processing and delivering your order, including passing your delivery details to the workshop or brand that prepares the piece and to the carrier | Performance of a contract |
| Handling returns, refunds, guarantee claims and customer service | Performance of a contract |
| Keeping accounting, tax and transaction records | Legal obligation |
| Preventing fraud and keeping the store secure | Legitimate interests |
| Understanding how the store is used so we can improve it | Consent (analytics cookies) |
| Sending you emails about new pieces and offers | Consent, which you can withdraw at any time |
Where we rely on your consent, you can withdraw it at any time. Withdrawing it does not affect the lawfulness of earlier processing.
4. Marketing emails
We only send marketing emails if you have signed up. Each one includes an unsubscribe link, and you can also ask by email. Unsubscribing does not stop the messages needed for your order, such as order and shipping confirmations.
5. Who we share your data with
We do not sell your personal data. We only share it with those we need to run the store:
- Shopify, the platform that hosts this store and processes orders on our behalf.
- Payment providers, to take payment and prevent fraud.
- The workshops and brands that prepare and send your order, all in Spain, which receive the name, delivery address and contact details needed to ship it.
- Carriers, to deliver the parcel.
- Email and analytics providers, where you have given consent.
- Professional advisers and public authorities, where the law requires it.
They may only use your data for these purposes and must keep it secure.
6. International transfers
Some technology providers, such as Shopify or analytics services, may process data outside the European Economic Area. In that case we rely on a European Commission adequacy decision or on Standard Contractual Clauses, with additional safeguards where needed, so your data receives an equivalent level of protection. You can ask us for a copy of those safeguards.
7. How long we keep it
- Orders and transactions: the period required by Spanish commercial and tax law, generally 4 to 6 years from the end of the financial year.
- Customer service correspondence: up to 2 years after the matter is closed.
- Marketing consent: until you unsubscribe, plus a short period to evidence it.
- Account data: until you ask us to delete your account.
- Analytics data: as set in the store's cookie settings.
When it is no longer needed, we delete it or irreversibly anonymise it.
8. Cookies
We use cookies and similar technologies to make the store work (for example to remember your basket or keep you signed in) and, with your consent, to understand how the store is used and measure our marketing.
Strictly necessary cookies do not require consent. All others are only set if you accept them, and you can change or withdraw your choice at any time through the cookie preferences link in the footer.
9. Your rights
Under the GDPR you have the right to:
- Access: get a copy of the data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data when there is no longer a legal reason to keep it.
- Restriction: ask us to limit how we use your data in certain cases.
- Portability: receive the data you gave us in a structured format, or have us send it to another controller.
- Objection: object to processing based on our legitimate interests and, at any time, to marketing.
- Withdraw consent at any time, where processing is based on it.
To exercise them, write to hola@rb-home.store. We reply within one month. We may need to verify your identity before acting on a request.
10. Complaints
If you think we have not handled your data properly, please write to us first so we can put it right. You also have the right to complain to the Spanish data protection authority:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid, Spain
www.aepd.es
11. Security
The store runs over an encrypted HTTPS connection and payments are handled by PCI-DSS compliant providers. We apply appropriate technical and organisational measures to protect your data. No method of transmission over the internet is completely secure, but we take the security of your information seriously and review our measures regularly.
12. Children
This store is not aimed at children and we do not knowingly collect data from anyone under 14. If you believe a child has given us personal data, write to us and we will delete it.
13. Automated decisions
We do not make decisions with legal or similarly significant effects for you based solely on automated processing.
14. Changes to this policy
We may update this policy. The date at the top shows when it was last revised. If the changes are significant, we will take reasonable steps to let you know.