Privacy policy

• Controller: getlockin (https://getlockin.co)
• Email for exercising your rights: getlockin.co@gmail.com

We process your data in accordance with Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018, de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD).

• Identification and contact data: first name, surname, email address and telephone number.
• Shipping and billing data: postal address and, if you request an invoice, invoice details.
• Order data: products, amounts, date and shipping status.
• Communications: the messages you send us through the shop's forms or by email.
• Browsing data: the data collected by the cookies you have accepted. See the cookie policy.

We do not store your full card details. Payment is processed by the payment providers of the Shopify checkout.

• Managing your order, shipping, returns and the guarantee. Basis: performance of the contract of sale (Art. 6.1.b GDPR).
• Dealing with your queries. Basis: your consent when submitting the form (Art. 6.1.a GDPR) or the taking of pre-contractual measures.
• Complying with tax, accounting and consumer law obligations. Basis: legal obligation (Art. 6.1.c GDPR).

• Sending you commercial communications, only if you have subscribed. Basis: consent (Art. 6.1.a GDPR and Art. 21 LSSI-CE). You can unsubscribe in each message.
• Analysing the use of the shop and measuring campaigns, only if you accept the corresponding cookies. Basis: consent.
• Preventing payment fraud. Basis: legitimate interest (Art. 6.1.f GDPR).

• Order and invoice data: for the periods required by tax and commercial law (up to 6 years).
• Queries: 12 months from the last communication.
• Commercial communications: until you unsubscribe.
• Guarantee data: for the period of the legal guarantee and the period for any legal actions that may arise.

Only with the providers we need in order to provide the service to you, which act as data processors or as independent controllers:

• Shopify International Limited (Ireland), platform for the shop and the checkout.
• Payment providers: Shopify Payments, PayPal and Klarna.
• Provider that prepares and ships the order: Seablue 1618 Store, which sells through AliExpress and is located in China.
• Carriers: our provider's logistics operators and the postal or courier service of the destination country.
• Email, analytics or advertising tools: Shopify's own; we do not use any others for now.
• Public authorities and courts, where there is a legal obligation.

Some providers may process data outside the European Economic Area. In that case the transfer is covered by an adequacy decision of the European Commission or by standard contractual clauses.

The provider that prepares the shipment (located in China) receives your name, delivery address and delivery telephone number for the sole purpose of delivering the order to you.

You may at any time exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given, by writing to getlockin.co@gmail.com and stating which right you wish to exercise.

If you consider that we have not dealt with your request properly, you may lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es) or with the data protection authority of your country.

This shop is not directed at children under 14 years of age. We do not knowingly collect their data.

We apply reasonable technical and organisational measures to protect your data: encrypted connection, access control and providers offering sufficient guarantees.

We may update this policy to adapt it to legal changes or changes to the service. The date of the latest version appears at the top of the page.