Privacy Policy

Last updated: 8th July 2026

Swallow S.L. ("Swallow", "we", "us", "our") operates this store and website, including all related information, content, features, tools, products and services, in order to provide you with a curated shopping experience (the "Services"). Swallow is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it. It is written to comply with the General Data Protection Regulation (GDPR) and Spanish data protection law (LOPD-GDD), as Swallow is established in Spain and this is the primary legal framework governing your data.

For the purposes of applicable data protection law, Swallow S.L., Plaza del Carmen 13, 03002 Alicante, Spain, is the data controller of your personal information.

The personal information we collect

Depending on how you interact with us, we may collect:

• Contact details: name, billing and shipping address, phone number, email address.
• Payment information: processed via our payment provider. We do not store full card numbers ourselves; see "Payment processing" below.
• Account information: username, order history, preferences, and any wishlist or saved items.
• Transaction information: items you view, add to cart, purchase, return, or cancel.
• Communications: anything you send us, for example a customer support enquiry.
• Device and usage information: IP address, browser type, and how you interact with the Services, collected via cookies and similar technologies.
• Marketing preferences: your email marketing subscription status and engagement, held in Klaviyo, our email marketing platform.

Where this information comes from

• Directly from you, when you place an order, create an account, sign up to our mailing list, or contact us.
• Automatically, through cookies and similar technology when you use the Services.
• From our service providers, including Shopify (our e-commerce platform), Klaviyo (our email marketing platform), and our payment processor, who collect or process information on our behalf.

Why we process your information, and our legal basis

Under GDPR, we must have a lawful basis for each way we use your data. Here is how that applies to Swallow:

Purpose	What this covers	Legal basis
Fulfilling your order	Processing payment, arranging shipping, customer service related to an order	Performance of a contract with you
Managing your account	Storing your order history and preferences if you create an account	Performance of a contract with you
Email marketing	Sending you news, product launches, and offers via Klaviyo	Your consent, given when you sign up
Improving the Services	Understanding how visitors use the site, via analytics cookies	Your consent, or our legitimate interest where permitted
Fraud prevention and security	Detecting fraudulent or unlawful activity	Our legitimate interest, and legal obligation
Accounting and tax records	Retaining invoices and transaction records	Legal obligation under Spanish commercial and tax law
Responding to legal requests	Complying with a court order or lawful request from an authority	Legal obligation

 

Where we rely on your consent, for example for marketing emails or non-essential cookies, you can withdraw it at any time without affecting the lawfulness of processing carried out before you withdrew it.

Payment processing

Payments made on swallowcoffee.es are processed by Shopify Payments and our payment service providers. We do not store your full card details on our own systems. Please refer to Shopify's Privacy Policy for details of how payment data is processed: https://www.shopify.com/legal/privacy.

Email marketing with Klaviyo

If you sign up to our mailing list, whether at checkout, on a landing page, or through a signup form, your email address and related engagement data (opens, clicks, purchase history used for personalisation) are processed through Klaviyo, our email marketing platform. Klaviyo acts as our data processor for this purpose.

You can unsubscribe at any time using the link at the bottom of any marketing email, or by contacting us at hola@swallowcoffee.es. Unsubscribing from marketing emails does not affect transactional emails related to your orders, such as shipping confirmations.

How we disclose your information

We disclose personal information only for the purposes set out in this policy, and only to:

• Shopify, which hosts our store and processes data necessary to operate the Services.
• Klaviyo, for email marketing as described above.
• Our payment processor, to complete your transactions.
• Delivery and logistics partners, to fulfil and ship your order.
• Professional advisers, such as our accountant, where necessary for tax and legal compliance.
• Authorities, where we are required to disclose information by law, for example in response to a valid legal request.
• A successor business, in the event of a merger, sale, or restructuring of Swallow, on the condition that the recipient honours this Privacy Policy.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes without your consent.

Relationship with Shopify

The Services are hosted by Shopify, which processes personal information about your access to and use of the Services in order to provide and improve the Services for us. Some information you submit may be transmitted to and shared with Shopify and its sub-processors, which may be located in countries other than where you reside, in order to provide the Services. To learn more about how Shopify uses personal information, you can visit the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy, and Shopify's privacy portal.

Cookies

We use cookies and similar technologies on swallowcoffee.es. Some are strictly necessary for the site to function, such as those that remember the contents of your cart. Others are optional, such as analytics cookies that help us understand how visitors use the site, and marketing cookies used for advertising.

In line with Spanish and EU guidance on cookies, we ask for your consent before setting any cookie that is not strictly necessary, through a cookie banner that lets you accept or reject non-essential cookies with equal ease, and to choose which categories you consent to. You can change your cookie preferences at any time [INSERT LINK TO COOKIE SETTINGS, once implemented].

Third-party websites and links

The Services may contain links to websites operated by third parties. We are not responsible for the privacy or security practices of those sites. We encourage you to review their privacy policies before providing any personal information to them.

Children's data

The Services are not directed at children, and we do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has provided us with personal information, please contact us at hola@swallowcoffee.es and we will delete it.

Security and retention

We take reasonable technical and organisational measures to protect your personal information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as necessary to fulfil the purposes described in this policy. As a general rule:

• Order and transaction records are retained for the periods required under Spanish commercial and tax law, generally up to six years.
• Account information is retained for as long as you maintain an account with us, or until you ask us to delete it.
• Marketing data in Klaviyo is retained until you unsubscribe or ask us to delete it, or after a period of prolonged inactivity.

Your rights

As a data subject under GDPR, you have the right to:

• Access the personal information we hold about you.
• Rectification of inaccurate or incomplete information.
• Erasure of your personal information, in certain circumstances.
• Restriction of our processing of your information.
• Object to processing carried out on the basis of legitimate interest, including direct marketing.
• Data portability, to receive your data in a structured, commonly used format, and to have it transferred to another controller where technically feasible.
• Withdraw consent at any time, where we rely on consent as our legal basis.

To exercise any of these rights, contact us at hola@swallowcoffee.es or Plaza del Carmen 13, 03002 Alicante, Spain. We may need to verify your identity before responding. We will respond within one month, as required by GDPR, and will not discriminate against you for exercising any of these rights.

You may also exercise rights relating to information Shopify processes as an independent controller via the Shopify privacy portal.

Complaints

If you have concerns about how we handle your personal information, please contact us first at hola@swallowcoffee.es so we can try to resolve it directly. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), www.aepd.es, or with the supervisory authority in your own EU member state of residence.

International transfers

Some of our service providers, including Shopify and Klaviyo, may process personal information outside the European Economic Area. Where this happens, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or an equivalent adequacy decision, to ensure your information receives an equivalent level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal or operational reasons. We will post the revised policy on this page and update the "Last updated" date. Where changes are material, we will provide additional notice as required by law.

Contact

For any question about this Privacy Policy, or to exercise any of your rights, contact us at:

Swallow S.L. Plaza del Carmen 13, 03002 Alicante, Spain

OR

hola@swallowcoffee.es