Last updated: April 25, 2026

wornbywater.com manages this shop and this website, including all related information, contents, features, tools, products, and services, to offer you, the customer, a carefully curated shopping experience ("the Services"). Piedramar is powered by Shopify, which allows us to provide the Services to you. This privacy policy describes how we collect, use, and disclose your personal data when you visit, use, or make a purchase or other transaction through the Services or when you communicate with us in any other way. If there is a conflict between our terms of service and this privacy policy, this privacy policy will prevail regarding the collection, processing, and disclosure of your personal data.

Please read this privacy policy carefully. By using and accessing the Services, you acknowledge that you have read this privacy policy and understand the collection, use, and disclosure of your information as described herein.

Personal data we collect or process

When we use the term "personal data", we refer to information that identifies you or can reasonably be linked to you or another person. Personal data does not include information collected anonymously or that has been anonymized so that it cannot identify you or be reasonably linked to you. We may collect or process the following categories of personal data, including information derived from such data, depending on how you interact with the Services, where you reside, and as permitted or required by applicable law:

Contact details, including your name, address, billing address, delivery address, phone number, and email address.
Financial data, including credit/debit card and bank account numbers, payment card data, bank account details, transaction data, payment method, payment confirmation, and other payment details.
Account details, including your username, password, security questions, preferences, and settings.
Transaction details, including the items you view, add to cart, add to wishlist, purchase, return, exchange, or cancel, and your previous transactions.
Communications with us, including the information you include in your communication with us, for example, when you submit an inquiry to customer service.
Device details, including information about your device, browser, or network connection, your IP address, and other unique identifiers.
Usage details, including information about your interaction with the Services, such as how and when you interact with or navigate them.

Sources of personal data

We may collect personal data from the following sources:

Directly from you, including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal data.
Automatically through the Services, including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies.
From our service providers, including when we use them to enable certain technologies and when they collect or process your personal data on our behalf.
From our partners or other third parties.

How we use your personal data

Depending on how you interact with us or what Services you use, we may use personal data for the following purposes:

Provide, personalize, and improve the Services
We use your personal data to provide you with the Services, including to fulfill our contract with you, process your payments, prepare your orders, remember your preferences and the items you are interested in, send you notifications related to your account, process purchases, returns, exchanges, or other transactions, create, maintain, and manage your account, manage shipments, enable returns and exchanges, allow you to write reviews, and create a personalized shopping experience for you, such as recommending products related to your purchases.

Marketing and advertising
We use your personal data for marketing and promotional purposes, such as sending you marketing, advertising, and promotional communications by email, SMS, or postal mail, and to show you online advertisements of products or services on the Services or other websites, including ads based on items you have previously purchased or added to the cart and other activities on the Services.

Security and fraud prevention
We use your personal data to authenticate your account, provide a secure payment and shopping experience, detect, investigate, or intervene in potential fraudulent, illegal, unsafe, or malicious activities, protect public safety, and secure our services.

Communication with you
We use your personal data to provide you with customer service, respond to you, provide effective services, and maintain our business relationship with you.

Legal reasons
We use your personal data to comply with applicable law or respond to valid legal process, including requests from law enforcement or public authorities, to investigate or participate in the preparation of a civil suit, potential or actual litigation or other adversarial proceedings, and to enforce or investigate potential violations of our terms or policies.

How we disclose personal data

In certain circumstances, we may disclose your personal data to third parties for legitimate purposes subject to this privacy policy. Such circumstances may include:

With Shopify, suppliers, and other third parties who provide services on our behalf (for example, IT administration, payment processing, data analysis, customer service, cloud storage, fulfillment, and shipping).
With business and marketing partners to provide you with marketing and advertising services.
When you request, ask, or otherwise consent to us disclosing certain information to third parties.
With our affiliated companies or otherwise within our group.
In connection with a business transaction such as a merger or bankruptcy, to comply with all applicable legal obligations, to enforce applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

The relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data about your access to and use of the Services to provide and improve them. The information you submit to the Services is transferred to and shared with Shopify and third parties who may be located in countries other than yours for the purpose of providing and improving the Services. To obtain more information about how Shopify uses your personal data and what your rights are, you can visit Shopify's consumer privacy policy.

Third-party websites and links

The Services may contain links to websites or other online platforms managed by third parties. If you follow links to websites that are not associated with or controlled by us, you should read their privacy and security policies as well as their other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such websites.

Children's data

The Services are not intended for use by minors, and we do not knowingly collect personal data from minors. If you are a parent or guardian of a minor who has provided us with their personal data, you can contact us using the contact details below to request that it be deleted.

Security and retention of your data

Please note that no security measure is perfect or impenetrable, and we cannot guarantee "perfect security". The information you send us may not be secure during transmission. We recommend that you do not use insecure channels to communicate sensitive or confidential information.

The time we retain your personal data depends on several factors, for example, whether we need the data to maintain your account, provide services to you, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

Your rights and choices

Depending on where you reside, you may have some or all of the rights listed below regarding your personal data. However, these rights are not absolute; they only apply in certain circumstances, and in some cases, we may refuse your request to the extent permitted by law.

Right of access — You may have the right to request access to the personal data we hold about you.
Right to erasure — You may have the right to request that we delete the personal data we hold about you.
Right to rectification — You may have the right to request that we correct inaccurate personal data we hold about you.
Right to portability — You may have the right to receive a copy of the personal data we hold about you and to request that we transfer it to a third party in certain circumstances.
Management of communication preferences — We may send you promotional emails, and you can opt out of receiving them at any time by using the unsubscribe option found in our emails.

If you reside in the United Kingdom or the European Economic Area (EEA) and subject to the exceptions and limitations of local legislation, you may exercise the following rights in addition to those described above:

Objection to processing and restriction of processing — You may have the right to ask us to stop processing or to restrict our processing of personal data for certain purposes.
Withdrawal of consent — When we rely on consent to process your personal data, you have the right to withdraw that consent.

Complaints

If you wish to make a complaint about how we process your personal data, contact us using the contact details below. Depending on where you reside, you may have the right to appeal our decision or submit your complaint to the Spanish Data Protection Agency (AEPD) at www.aepd.es.

International transfers

Please note that we may transfer, store, and process your personal data outside the country in which you reside. If we transfer your personal data outside the European Economic Area (EEA) or the United Kingdom, we will use recognized transfer mechanisms such as the European Commission's standard contractual clauses.

Changes to this privacy policy

We will post the revised policy on this website, update the "Last updated" date, and notify you of changes as required by applicable law.

Contact

If you have questions about our privacy practices or this privacy policy, or if you wish to exercise any of your rights, send an email to carmen@piedramar.es. In accordance with applicable data protection law, we (www.piedramar.es) are the data controller of your personal data.