Privacy policy

Privacy Policy

Last updated: 12 August 2026

This Privacy Policy explains how Armonico collects and uses personal data when you visit armonicobags.com, place an order, contact us or otherwise use our services.

1. Data controller

The controller is Roman Leonenko, an individual trading as Armonico, NIF/NIE Y9453265A, with address at Avenida de Villajoyosa 103, bloque 6, piso 10B, 03016 Alicante, Alicante, Spain. You can contact us at armonicobags@gmail.com.

2. Personal data we collect

Depending on how you interact with us, we may collect:

  • identification and contact data, such as your name, email, telephone number, billing address and delivery address;
  • order and transaction data, such as products purchased, order status, returns and payment status;
  • account and customer-service communications;
  • technical and usage data, such as IP address, device and browser information, cookie identifiers and interactions with the website;
  • marketing preferences and consent records.

We receive data directly from you, automatically through the website and from service providers involved in operating the store, such as Shopify, payment providers, delivery companies and fraud-prevention services. We do not receive or store complete payment-card details when payments are processed by an external payment provider.

3. Purposes and legal bases

  • Orders and customer service: to process payment, fulfil and deliver orders, handle returns and respond to you. The legal basis is performance of a contract or steps requested before entering into a contract.
  • Legal and accounting obligations: to maintain invoices and transaction records, respond to lawful requests and comply with tax, consumer and other legal requirements. The legal basis is compliance with a legal obligation.
  • Security and fraud prevention: to protect the store, customers and transactions, investigate misuse and enforce our terms. The legal basis is our legitimate interest in operating a safe and reliable business and, where applicable, compliance with legal obligations.
  • Website operation and improvement: to diagnose errors, understand performance and improve the customer experience. We rely on legitimate interests for strictly necessary operations and on your consent where non-essential cookies or similar technologies are used.
  • Marketing: to send promotional communications only where permitted by law. The legal basis is your consent or another lawful basis available under applicable law. You may unsubscribe at any time.

4. Recipients and service providers

We disclose personal data only when necessary to service providers that help us operate the business, including Shopify, hosting and IT providers, payment processors, carriers, professional advisers, analytics or marketing providers used with the required consent, and public authorities where legally required. These recipients process data under their own legal obligations or under contracts requiring appropriate protection.

Our store is hosted by Shopify. Shopify processes personal data to provide the commerce platform and may also act as an independent controller for certain activities. For more information, see Shopify's privacy information at shopify.com/legal/privacy.

5. International transfers

Some service providers may process data outside the European Economic Area. Where this happens, we use a lawful transfer mechanism, such as an adequacy decision or the European Commission's standard contractual clauses, together with supplementary safeguards where required.

6. Retention

We keep personal data only for as long as needed for the purposes described above. Order, invoice and accounting records may be retained for up to six years, or longer where a specific law or legal claim requires it. Customer-service records are retained for the time needed to resolve the request and establish or defend legal claims. Marketing data is retained until you withdraw consent or object, subject to a limited suppression record so that we can respect your choice.

7. Cookies and similar technologies

We use cookies and similar technologies supplied by Shopify and, where enabled, other service providers. They fall into the following categories:

  • Strictly necessary: required for security, network management, checkout, shopping-cart functions, customer authentication, fraud prevention and remembering privacy choices. These technologies cannot be disabled through the consent tool where they are necessary to provide the service you request.
  • Analytics and performance: help us understand visits, traffic sources, errors and website performance. They are used only where permitted and, when required, after you consent.
  • Functional and personalisation: remember optional preferences and improve features. They are used only where permitted and, when required, after you consent.
  • Advertising and social media: measure campaigns or support personalised advertising. They are used only if such services are enabled and after any legally required consent.

The cookie banner or privacy-preferences tool identifies the categories currently in use and lets you accept, reject or change non-essential choices. Specific cookie names, providers and storage periods may change as Shopify or an enabled service updates its technology; current details are made available through that tool. You can withdraw consent at any time without affecting earlier lawful processing. Browser controls may also allow you to delete or block cookies, although doing so can affect site functions. Shopify provides further information about cookies used by its services at shopify.com/legal/cookies.

8. Your rights

Subject to the conditions in applicable law, you may request access to, rectification or erasure of your data, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing. You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, where applicable.

To exercise a right, email armonicobags@gmail.com. We may ask for information necessary to verify your identity. You may lodge a complaint with the Spanish Data Protection Agency, AEPD, at www.aepd.es.

9. Security, children and changes

We use reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.

Our store is not directed to children, and we do not knowingly collect personal data from children who cannot lawfully provide it. If you believe a child has provided data to us, contact us so that we can review and delete it where appropriate.

We may update this policy when our practices or legal obligations change. The current version and update date will be posted on this page.