🔒Privacy Policy

1. Who is responsible for your data?

Data controller: Stavros Chatzipavlou
Trade name: Gorillabox
NIF: Z2656463Z
VAT ID: ESZ2656463Z
Address: Calle Feria 17, 3ºF, 02004 Albacete, Spain
Contact email: info@gorillabox-shop.com

2. What data do we collect?

We may collect the following personal data:

Full name
Email address
Phone number
Postal address
Payment details (not stored directly)
Order history and browsing data (if cookies are accepted)

3. Why do we process your data?

Your personal data may be processed for the following purposes:

To process and ship orders
To manage inquiries made through contact forms or email
To send newsletters and promotional offers (if consent is given)
To comply with tax and legal obligations

4. What is the legal basis for processing?

Contract performance – to process your orders
User consent – for marketing and contact forms
Legal obligations – accounting and invoicing

5. Who do we share your data with?

We may share your data with:

Payment platforms (e.g., Stripe, PayPal)
Logistics and shipping companies
Accounting and legal consultants
Public authorities if required by law

We do not sell your personal data.

6. How long do we keep your data?

Order and billing data: 6 years (legal obligation)
Inquiries or contact messages: until resolved or deleted upon request
Marketing data: until you unsubscribe or withdraw consent

7. What are your rights?

You may exercise the following rights:

Access to your data
Rectification of incorrect or incomplete data
Erasure of your data
Restriction of processing
Data portability
Objection to certain processing

To exercise your rights, email us at info@gorillabox-shop.com and attach a copy of your ID.

You also have the right to file a complaint with the Spanish Data Protection Authority (AEPD):
www.aepd.es

8. Security of your data

Gorillabox applies appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, or loss.