Privacy policy
Last updated: August 14, 2026
ESSENCE1989 respects your privacy and is committed to protecting your personal data. This Policy describes the information we collect, how we process it, and the rights available to you when you visit essence1989.com, create an account, make a purchase, or communicate with us.
Our store is hosted by Shopify, which provides the infrastructure required to operate our services.
Information We Collect
We may collect:
-
Your contact details, including your name, address, email address, and telephone number.
-
Information required to process your orders and payments.
-
Information relating to your purchases, returns, and refunds.
-
Information associated with your customer account.
-
Your communications with ESSENCE1989.
-
Certain technical information, including your IP address, browser, device, and interactions with our website.
How We Use Your Information and Legal Bases
We process your personal data in accordance with the GDPR on the following legal bases:
-
Performance of a contract: managing orders, payments, deliveries, returns, refunds, and customer accounts.
-
Legal obligations: complying with accounting, tax, and regulatory requirements.
-
Legitimate interests: protecting our store, preventing fraud, providing customer support, and improving our services, where our interests do not override your rights and freedoms.
-
Consent: marketing communications and non-essential cookies where your consent is required.
Where processing is based on consent, you may withdraw your consent at any time.
Sharing Your Information
We share certain data when necessary to operate our services, including with Shopify, payment providers, carriers, logistics partners, and technical service providers.
These providers process the information necessary to provide their services in accordance with applicable data protection laws.
Shopify and International Data Transfers
Our store operates through Shopify. Shopify processes certain data necessary for the operation, security, and improvement of its platform.
Certain data may be processed outside the European Economic Area. Where required by law, recognized data protection mechanisms are applied, including adequacy decisions or Standard Contractual Clauses approved by the European Commission.
Cookies
We use cookies that are necessary for the operation of our website and, where your consent is required, analytics, personalization, or marketing cookies.
You can manage your preferences through the cookie banner available on our website.
Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected.
Information relating to orders, invoices, payments, and transactions is retained for the periods required by applicable accounting, tax, and legal obligations.
Data used for marketing purposes is retained until you withdraw your consent or in accordance with the retention periods established by applicable law.
Once the applicable retention periods expire, data is deleted or anonymized where no legal obligation requires its continued retention.
Your Rights
Under the GDPR, depending on the circumstances, you may have the following rights:
-
Access to your personal data.
-
Rectification of inaccurate data.
-
Erasure of certain personal data.
-
Restriction of processing.
-
Objection to certain processing activities.
-
Data portability.
-
Withdrawal of consent where processing is based on consent.
To exercise your rights, contact us at essence@essence1989.com.
You also have the right to lodge a complaint with the Spanish Data Protection Agency, Agencia Española de Protección de Datos (AEPD).
Security
We implement measures designed to protect your personal data against unauthorized access, loss, use, or disclosure.
Changes to This Policy
We may update this Policy to reflect changes to our services, practices, or legal obligations.
The date of the latest update will appear at the top of this page.
Contact
ESSENCE1989
essence@essence1989.com
Calle Corral 22
3rd Floor, Door 4
08014 Barcelona
Spain
ESSENCE1989 is the controller of your personal data for the purposes of applicable data protection legislation.