Privacy

Updated: 30 October 2026. Notice under Articles 13 and 14 of the GDPR (Regulation (EU) 2016/679).

1. Who is responsible for your data

SILVIA ROA FRANCO, C. de Antonio Pérez, 6, 28002 Madrid, Spain.
Contact person: SILVIA ROA FRANCO.
For anything about your data write to privacy@hinestora.com; we answer within 30 days.

2. A single company

SILVIA ROA FRANCO runs this site and its advertising (Google Ads included), sells and ships the products, confirms orders by phone and collects payment on delivery. Companies that help us do so under our instructions.

3. What we collect, and why

• Your order: name, mobile number, address, notes for the courier, product, price and date. We use them to call you, ship, collect payment, help you afterwards and keep our accounts. Basis: the contract and legal duties.
• Your emails to us: your address and what you write, to answer you. Basis: your request.
• Technical data such as IP address and type of device, to keep the site working and safe. Basis: legitimate interest.
• Advertising results: when an order is completed we tell Google and Meta, so we can see which ads work. Google receives the order amount, the currency and an order code. Meta receives the same, plus your IP address, browser details and, scrambled (hashed), your phone number and name. Basis: our legitimate interest in measuring our ads. This happens even if you reject cookies in the banner.

We do not sell your data. The site is not meant for people under 16. We do not take card payments, so we never see card numbers.

4. Cookies and storage in your browser

The site keeps only what it needs: your cookie choice and, after an order, the details that let the thank-you page show your order and stop it being sent twice. Google Ads and the Meta pixel use cookies or similar identifiers only if you accept them in the banner (except for the completed-order report above). You can change your mind anytime from "Cookie settings" at the bottom of the page. Refusing never stops you from ordering. Your choice lasts 12 months. More on the Cookies page.

5. Who receives data

• couriers, to deliver the parcel;
• Vercel Inc. (United States), which hosts the site and its domain name, acting for us under the European Commission's standard contractual clauses;
• Google Ireland Limited (Ireland), for Google Ads and its measurement;
• Meta Platforms Ireland Limited (Ireland), for measuring our ads;
• other suppliers working under our instructions;
• advisers, banks and public authorities, where the law requires.

6. Data leaving the EU

We are based in Spain, but some suppliers (such as our hosting provider in the United States) are outside the EU, so data can leave the EU. We do it only when needed to carry out your order or with proper safeguards, such as the Commission's standard contractual clauses.

7. How long we keep it

• orders, invoices and accounts: 6 years (Spanish commercial and tax rules);
• orders never confirmed: 90 days;
• messages to support: 24 months after our last reply;
• your cookie choice: 12 months.

8. What you can ask

You can ask to see your data, correct it, delete it, limit its use, receive a copy in a common format, or object to its use. Write to privacy@hinestora.com. We may ask for proof of identity.

9. If you are not satisfied

Write to us first. You can also complain to the Spanish Data Protection Agency (AEPD) or to the authority of your country.

10. Changes

When this notice changes we update the date at the top, and tell you about important changes.