78GlassTips

Privacy Policy

Last updated: 22 June 2026

1. Data Controller

The data controller responsible for your personal data is:

  • Name: Clavin Patrick Bonar Alvarez, operating under the trade name 78GlassTips
  • NIF/NIE: 60562917F
  • Address: Carrer de la Cendra 8.B, bis 1, 08001 Barcelona, Spain
  • Email: privacy@78glass.tips
  • Business activity: Manufacture and sale of handmade borosilicate glass products

This Privacy Policy applies to personal data collected through the website https://78glass.tips and is governed by the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Spanish Ley Orgánica 3/2018 de Protección de Datos Personales y Garantía de los Derechos Digitales (LOPDGDD).

2. What Personal Data We Collect

We collect and process the following categories of personal data depending on how you interact with our website:

When you place an order: Name, email address, shipping address, billing address, phone number (if provided), and payment transaction data (processed by Stripe — we do not store your card details).

When you create an account (where account functionality is available): Name, email address, password (encrypted), order history, and saved preferences.

When you contact us: Name, email address, and any information you include in your message.

Automatically when you visit our website: Server logs may temporarily record IP address, browser type, and pages requested for technical purposes (security, debugging, fraud prevention). We do not use third-party analytics services, advertising trackers, or cross-site tracking technologies.

3. Purposes and Legal Basis

We process your personal data for the following purposes:

| Purpose | Legal Basis (GDPR Art. 6) | |---------|--------------------------| | Fulfilling and managing your orders, processing payments, arranging delivery | Performance of a contract (Art. 6.1.b) | | Sending order confirmations and shipping updates | Performance of a contract (Art. 6.1.b) | | Responding to your enquiries and providing customer support | Legitimate interest (Art. 6.1.f) | | Complying with legal, tax, and accounting obligations | Legal obligation (Art. 6.1.c) | | Sending promotional or marketing emails (only with your consent) | Consent (Art. 6.1.a) | | Preventing fraud and ensuring website security | Legitimate interest (Art. 6.1.f) |

We do not use your personal data for automated decision-making or profiling that produces legal effects concerning you.

4. Third Parties and Service Providers

We share your personal data only with the following third-party service providers, solely to the extent necessary for the purposes described above:

| Provider | Purpose | Data Shared | Location | |----------|---------|-------------|----------| | Stripe | Payment processing | Name, email, billing address, payment card details (processed directly by Stripe) | USA (EU-US Data Privacy Framework) | | Resend | Transactional emails (order confirmations, invoices) | Name, email address | EU (Frankfurt region) | | DigitalOcean | Website hosting | IP address, server logs | EU (Amsterdam region) | | Porkbun | Email forwarding (aliases like info@, orders@) | Name, email address, message content (in transit) | USA (EU-US Data Privacy Framework) | | Shipping carrier(s) | Order delivery | Name, shipping address, phone number (if provided) | EU / international |

For transfers of personal data outside the European Economic Area (EEA), we rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework (where the recipient is certified under the DPF) or on Standard Contractual Clauses (SCCs).

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

5. Cookies and Tracking

This website uses only strictly necessary cookies and local storage required for the service to function:

  • Session and authentication (admin area)
  • Shopping cart persistence (local storage)
  • Language preference
  • Stripe payment processing (set during checkout)

We do not use third-party analytics, advertising cookies, retargeting pixels, social media trackers, or any cross-site tracking technologies.

No consent banner is shown because no consent is required for strictly necessary cookies under GDPR Art. 6(1)(b) (performance of a contract) in conjunction with Article 5(3) of the e-Privacy Directive (2002/58/EC, as amended).

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy and to comply with Spanish legal obligations:

Order and invoice data:

  • 4 years under Ley General Tributaria, Art. 66 (tax prescription period).
  • 6 years under Código de Comercio, Art. 30 (commercial books and correspondence).
  • 5 years under Código Civil, Art. 1964 for claims related to the legal guarantee of conformity.

In practice, we retain full order and invoice records for 6 years from the order date.

Account data: Retained until you request deletion of your account (where an account feature exists).

Marketing consent records: Retained until you withdraw your consent, plus a short period required to evidence the withdrawal.

Customer support communications: Retained for up to 2 years after the issue is resolved.

7. Your Rights

Under the GDPR and LOPDGDD, you have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"): Request deletion of your data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
  • Right to restriction of processing: Request that we limit how we process your data in certain circumstances.
  • Right to data portability: Receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
  • Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at privacy@78glass.tips with the subject line "Data Protection Request". We will respond within 30 days, as required by law.

If you have an account on our website, the simplest way to access or modify your data is through your account settings.

8. Supervisory Authority

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority:

Agencia Española de Protección de Datos (AEPD) Calle de Jorge Juan, 6 28001 Madrid, Spain https://www.aepd.es

If you reside in another EU/EEA member state, you may also lodge a complaint with the data protection authority in your country of residence.

9. Minors

Data protection. Under GDPR Art. 8 and Article 7 of the Spanish LOPDGDD, personal data of children under 14 years of age may only be processed with the consent of the holders of parental responsibility. We do not knowingly process personal data of children under 14 collected through this website. If we become aware that we have collected such data, we will take steps to delete it promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@78glass.tips.

Age requirement for purchases. Independently of the data protection threshold above, our products may only be purchased by persons who are at least 18 years of age, as set out in our Terms & Conditions. This is a contractual and product-use requirement and is separate from the data protection rules for minors.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, loss, or destruction. These measures include encrypted data transmission (SSL/TLS), secure payment processing through Stripe (PCI DSS compliant), and access controls for stored data.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the revised policy on this page with an updated "Last updated" date.

If we make material changes that significantly affect your rights, we will make reasonable efforts to notify you (e.g. by email or a notice on our website).

12. Contact

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

  • Email: privacy@78glass.tips
  • Address: Clavin Patrick Bonar Alvarez, Carrer de la Cendra 8.B, bis 1, 08001 Barcelona, Spain