Πολιτική απορρήτου

Last updated: July 22, 2026

This Privacy Policy describes how WAFORA collects, uses, stores, discloses, and protects personal information when you visit, interact with, or make a purchase from our website.

In this Privacy Policy, “WAFORA,” “we,” “us,” and “our” refer to WAFORA. “You” and “your” refer to website visitors, customers, and other individuals whose personal information we process.

By using our website, creating an account, contacting us, or placing an order, you acknowledge the practices described in this Privacy Policy.

1. Data Controller and Business Information

For the purposes of applicable data-protection laws, WAFORA is the controller of the personal information described in this Privacy Policy.

Business name: WAFORA
Business address: C/ BUTROI 5, BAJO 6, 48100 MUNGIA, BISCAY, SPAIN
Customer-service email: contact@wafora.com
Preferred contact method: Email
Customer-service page: Available through the Contact page on our website
Chat support: Chatbot support is available through our website

Privacy-related requests may be submitted by email. Please include enough information for us to identify your request and the account or order concerned.

2. Personal Information We Collect

The personal information we collect depends on how you interact with WAFORA.

Information You Provide Directly

We may collect information you provide when you:

• Place or attempt to place an order
• Create or manage a customer account
• Subscribe to email or marketing communications
• Contact customer support
• Communicate through our chatbot
• Submit a review, survey, form, or promotion entry
• Request a return, refund, cancellation, or replacement

This information may include:

• Full name
• Billing address
• Shipping address
• Email address
• Telephone number
• Account login information
• Products ordered
• Order and transaction details
• Delivery instructions
• Marketing preferences
• Customer-support messages
• Chatbot conversations
• Return and refund information
• Reviews or other content you submit

Payment Information

When you make a purchase, payment information is collected and processed by our payment-service providers.

Depending on the payment method selected, this may include:

• Payment-card information
• Billing address
• Payment-account identifiers
• Transaction authorization details
• Fraud-prevention information

WAFORA does not normally receive or store complete payment-card numbers. Payment information is handled by the payment provider selected during checkout in accordance with that provider’s privacy and security practices.

Information Collected Automatically

When you visit or use our website, we and our service providers may automatically collect information such as:

• Internet Protocol address
• Browser type and version
• Device type
• Operating system
• Device identifiers
• General location derived from the IP address
• Language and time-zone settings
• Referring website
• Pages and products viewed
• Search queries
• Items added to or removed from the cart
• Checkout activity
• Date and time of visits
• Website interactions
• Cookie and advertising identifiers
• Information about how you interact with our emails or advertisements

This information may be collected through cookies, pixels, tags, local-storage technologies, software-development kits, and similar technologies.

Information Obtained From Other Sources

We may receive personal information from third parties that help us operate our business, including:

• Shopify
• Payment processors
• Shipping and logistics partners
• Fraud-prevention providers
• Analytics providers
• Advertising and marketing platforms
• Customer-support services
• Email and communication providers
• Social-media platforms
• App and technology providers used by our store

The information received depends on the service involved and your interaction with that service.

3. How We Use Personal Information

We may use personal information to:

Process and Deliver Orders

• Process purchases and payments
• Confirm orders
• Prepare and dispatch products
• Provide tracking information
• Deliver orders
• Communicate about shipping or delivery
• Manage cancellations, returns, refunds, replacements, and disputes

Provide Customer Support

• Respond to questions
• Investigate order or delivery problems
• Provide support through email or chatbot
• Verify customer identity
• Maintain records of customer-service communications

Operate and Improve Our Website

• Provide website functionality
• Maintain customer accounts
• Remember cart contents and preferences
• Understand how visitors use the website
• Diagnose technical problems
• Improve products, services, navigation, and customer experience
• Measure website and campaign performance

Marketing and Advertising

Where permitted by law, we may use personal information to:

• Send promotional emails
• Inform you about products, offers, discounts, or store updates
• Display or measure advertisements
• Create advertising audiences
• Understand the effectiveness of our marketing
• Personalize content or product recommendations

Where consent is legally required, we will request consent before using non-essential cookies or sending certain marketing communications.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the message or by contacting us.

Security and Fraud Prevention

We may use personal information to:

• Authenticate transactions
• Protect customer accounts
• Detect suspicious or fraudulent activity
• Prevent misuse of our website
• Protect WAFORA, our customers, and our service providers
• Enforce our policies and agreements

Legal and Regulatory Purposes

We may process personal information to:

• Comply with tax, accounting, consumer-protection, and other legal obligations
• Respond to lawful requests from courts, regulators, or public authorities
• Establish, exercise, or defend legal claims
• Investigate policy violations
• Maintain records required by law

4. Legal Bases for Processing

Where the General Data Protection Regulation or similar laws apply, we process personal information under one or more of the following legal bases:

Performance of a Contract

Processing may be necessary to:

• Process your order
• Collect payment
• Deliver products
• Provide order support
• Process a return, refund, cancellation, or replacement

Legal Obligation

Processing may be necessary to comply with tax, accounting, consumer-protection, fraud-prevention, regulatory, or other legal requirements.

Legitimate Interests

We may process information when necessary for legitimate business interests, including:

• Operating and improving our store
• Providing customer support
• Preventing fraud
• Securing our systems
• Understanding business performance
• Protecting our legal rights

We consider the potential effect on your rights before relying on legitimate interests.

Consent

We rely on consent when legally required, including for certain:

• Marketing communications
• Advertising technologies
• Analytics technologies
• Non-essential cookies

You may withdraw your consent at any time. Withdrawal does not affect processing that lawfully occurred before consent was withdrawn.

5. How We Share Personal Information

We may disclose personal information to companies that provide services on our behalf.

Ecommerce Platform

Our store is hosted and operated using Shopify. Shopify processes information needed to provide ecommerce, checkout, account, security, analytics, and related services.

When Shopify processes customer information on our behalf, it generally acts as our service provider or processor. When customers independently use Shopify services such as Shop or Shop Pay, Shopify may process information under its own terms and privacy policy.

Payment Providers

Payment information may be shared with payment processors, banks, card networks, digital-wallet providers, fraud-prevention services, and other parties needed to authorize and complete transactions.

Logistics and Delivery Partners

We may share relevant information with:

• Fulfillment facilities
• Warehouses
• Logistics providers
• Shipping carriers
• Customs agents
• Local delivery companies
• Tracking providers

This information may include your name, shipping address, telephone number, email address, order contents, and delivery instructions.

Technology and Business-Service Providers

We may use companies that provide:

• Website hosting
• Cloud storage
• Customer support
• Chatbot services
• Email delivery
• Analytics
• Fraud prevention
• Cybersecurity
• Product reviews
• Inventory management
• Accounting
• Legal or professional services

These providers may process personal information only as necessary to provide their services or as otherwise permitted by law.

Advertising and Analytics Partners

Where enabled and permitted by law, we may share or allow the collection of limited device, browsing, purchase, and advertising information through services such as:

• Google
• Meta
• TikTok
• Other analytics or advertising platforms used by WAFORA

This information may be used to measure advertising performance, understand website use, prevent fraud, create audiences, or provide personalized advertising.

Where legally required, these technologies will only operate after you provide consent.

Legal Disclosures

We may disclose information when reasonably necessary to:

• Comply with applicable law
• Respond to valid legal proceedings
• Cooperate with regulators or law-enforcement authorities
• Investigate fraud or security incidents
• Protect our customers, business, property, or legal rights
• Enforce our agreements and policies

Business Transfers

If WAFORA is involved in a merger, acquisition, restructuring, financing, sale of assets, or transfer of business ownership, personal information may be disclosed to professional advisers, prospective buyers, or successor organizations, subject to appropriate confidentiality safeguards.

6. Sale and Sharing of Personal Information

WAFORA does not sell personal information for direct monetary payment.

However, the use of certain advertising, analytics, or audience-measurement technologies may be considered “sharing,” “targeted advertising,” or a “sale” under the privacy laws of some jurisdictions.

Where required, you may opt out through:

• The cookie-consent banner
• The privacy or data-sharing preferences available on our website
• Your browser’s privacy controls
• A request sent to contact@wafora.com

The availability and effect of these controls may depend on your location.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website and understand how it is used.

Essential Cookies

Essential cookies are required for functions such as:

• Website security
• Shopping-cart functionality
• Checkout
• Payment processing
• Customer-account access
• Language and market preferences
• Fraud prevention

These cookies cannot always be disabled without affecting website operation.

Analytics Cookies

Analytics technologies help us understand:

• How visitors reach the website
• Which pages and products are viewed
• How customers use the store
• Whether technical problems occur
• How website performance can be improved
• Advertising Cookies

Advertising technologies may be used to:

• Measure advertising performance
• Limit repeated advertisements
• Create advertising audiences
• Display more relevant advertisements
• Understand whether an advertisement led to a visit or purchase

Where required by law, analytics and advertising technologies will not be activated until you provide consent.

You may change your preferences through our cookie banner when available. You may also block or delete cookies through your browser, although doing so may affect website functionality.

8. International Data Transfers

WAFORA is located in Spain, but some of our service providers, fulfillment partners, and technology providers may process personal information in other countries.

These countries may have data-protection laws that differ from those in your country.

Where required, we use or rely on appropriate transfer safeguards, which may include:

• European Commission adequacy decisions
• Standard Contractual Clauses
• Contractual confidentiality and data-protection commitments
• Other lawful transfer mechanisms

Information necessary to fulfill an international order may be transferred to logistics providers in the destination or fulfillment country.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The retention period depends on factors such as:

• The duration of our relationship with you
• Whether you maintain a customer account
• The time needed to complete an order
• Return, refund, warranty, or dispute periods
• Tax, accounting, and recordkeeping requirements
• Fraud-prevention and security needs
• Applicable limitation periods
• Ongoing or anticipated legal claims

When information is no longer required, we may delete, anonymize, or securely restrict access to it.

Some transaction information may need to be retained after an account-deletion request to comply with tax, accounting, fraud-prevention, or legal obligations.

10. How We Protect Personal Information

We use reasonable administrative, technical, and organizational measures designed to protect personal information against:

• Unauthorized access
• Accidental loss
• Improper use
• Unauthorized alteration
• Unlawful disclosure
• Destruction

These measures may include secure connections, access restrictions, payment-security controls, fraud-detection systems, account controls, and service-provider agreements.

No internet transmission or storage system can be guaranteed to be completely secure. Customers should protect their account credentials and contact us if they believe an account or transaction has been compromised.

11. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Be informed about how your information is used
• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Request deletion of personal information
• Request restriction of processing
• Object to certain processing
• Withdraw consent
• Request data portability
• Opt out of direct marketing
• Opt out of certain targeted advertising or data sharing
• Lodge a complaint with a data-protection authority
• Request information about automated decision-making, where applicable

These rights may be subject to legal limitations or exceptions.

12. Exercising Your Rights

To submit a privacy request, email:

contact@wafora.com

Please include:

• Your full name
• The email address associated with your order or account
• Your order number, when relevant
• The right you wish to exercise
• Enough information for us to understand your request

We may need to verify your identity before processing a request. We will only request information reasonably necessary for verification.

We will respond within the period required by applicable law.

Submitting a privacy request is generally free. We may decline or charge a reasonable fee for requests that are manifestly unfounded, excessive, repetitive, or otherwise permitted to be refused under applicable law.

13. European Economic Area, United Kingdom and Switzerland

Individuals located in the European Economic Area, United Kingdom, or Switzerland may have additional rights under applicable data-protection laws.

You may object to processing based on legitimate interests and may withdraw consent where consent is the legal basis.

You also have the right to lodge a complaint with the competent supervisory authority.

Because WAFORA is established in Spain, the relevant Spanish supervisory authority is the:

Agencia Española de Protección de Datos — AEPD

We encourage you to contact WAFORA first so that we have an opportunity to address your concern.

14. Marketing Communications

You may unsubscribe from promotional emails at any time by:

• Selecting the unsubscribe link in a marketing email
• Updating available communication preferences
• Contacting contact@wafora.com

Unsubscribing from marketing does not prevent us from sending non-promotional communications relating to:

• Orders
• Payments
• Deliveries
• Returns
• Refunds
• Security
• Account administration
• Changes to policies or services

15. Chatbot and Customer-Support Communications

When you use our chatbot or contact customer service, we may collect:

• Your name
• Email address
• Order number
• Message content
• Conversation history
• Device or technical information
• Any other information you choose to provide

We use this information to respond to inquiries, provide customer support, improve support quality, investigate issues, and maintain appropriate business records.

Please do not provide sensitive information, passwords, or complete payment-card details through the chatbot or email.

Automated responses may be used to provide initial assistance. A chatbot response does not replace confirmation from a member of our customer-service team when manual review is required.

16. Automated Processing

We and our service providers may use automated systems to identify fraud, security risks, unusual transactions, or website misuse.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects unless such processing is permitted by applicable law and appropriate safeguards are provided.

17. Third-Party Websites and Services

Our website may contain links to third-party websites, applications, payment services, social networks, or other services.

WAFORA does not control the privacy practices of those third parties. Their collection and use of personal information are governed by their own privacy notices.

We recommend reviewing the privacy policy of any third-party service you use.

18. Children’s Privacy

Our website and products are intended for general adult customers and are not directed toward children.

We do not knowingly collect personal information from children below the minimum age permitted by applicable law.

If you believe a child has provided personal information without appropriate authorization, contact us at contact@wafora.com so that we can investigate and take appropriate action.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to:

• Our services
• Our business practices
• Technology used by our store
• Legal or regulatory requirements
• Service providers

The revised version will be published on this page with an updated “Last updated” date.

Where required by law, we will provide additional notice or request consent before making a material change.

20. Contact Us

For privacy questions, customer-data requests, or concerns about this Privacy Policy, contact:

WAFORA
C/ BUTROI 5, BAJO 6
48100 MUNGIA, BISCAY
SPAIN

Email: contact@wafora.com
Preferred contact method: Email

You may also contact us through the Contact page or chatbot available on the WAFORA website.