Privacy Policy

Last updated: May 2025

1. Data Controller

SIMPLE. ("we", "us") is the controller of the personal data collected through this website (simplecoffee.es). You can reach us at hola@simplecoffee.es.

2. Data We Collect

We collect data you provide voluntarily (name, email, phone, shipping address) when placing an order or contacting us. We also collect browsing data automatically through the technologies described in the cookies section.

3. Purpose of Processing

Your data is used to: (a) process and ship your order; (b) communicate with you regarding your purchase or inquiry; (c) comply with legal obligations; (d) improve our website through anonymous usage analytics.

4. Legal Basis

Processing is based on: contract performance (order management), your consent (analytics and marketing cookies), and legitimate interests (security and fraud prevention).

5. Payments — Stripe

Payments are processed by Stripe, Inc. When you make a payment, your card data is handled directly by Stripe and never stored on our servers. Stripe is PCI-DSS Level 1 compliant and GDPR-compliant. See their privacy policy at stripe.com/privacy.

6. Analytics — Meta Pixel & Microsoft Clarity

We use the Meta Pixel (Facebook/Instagram) to measure the effectiveness of our ads and show you relevant content on social media. We use Microsoft Clarity to analyse user behaviour on our site (heatmaps, anonymised session recordings). Both tools are only activated if you accept analytics cookies.

7. Data Retention

We retain your order data for as long as required by legal and accounting obligations (minimum 5 years under Spanish tax law). Contact data is deleted when no longer necessary or upon your request.

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR, EU 2016/679), you have the right to: access, rectify, or erase your data ("right to be forgotten"), restrict or object to processing, and data portability. To exercise any of these rights, email us at hola@simplecoffee.es. You also have the right to lodge a complaint with the Spanish Data Protection Authority (aepd.es).

9. International Transfers

Some of our providers (Stripe, Meta, Microsoft) may transfer data outside the European Economic Area. In all cases, these transfers are covered by mechanisms recognised by the European Commission (standard contractual clauses, EU-US Data Privacy Framework).

10. Cookies

For detailed information about the cookies we use, see our Cookie Declaration.

11. Changes to This Policy

We may update this policy occasionally. The date of the last update appears at the top of this document. Continued use of the site after changes implies acceptance.