Who is responsible
Ignacio Navarro Poves (NIF 09080053K), Calle Pedraza, 12, 29601 Marbella (Málaga), Spain. Contact: info@uncleiggyworld.com.
What data we collect
This website only asks for personal data if you create an account or buy something (see below). It uses only technical cookies, listed in the cookie policy. We measure visits with Cloudflare Web Analytics, which does not use cookies or identify individual visitors.
If you write to us by email, we use your address and message only to answer you, based on your request (art. 6.1.b GDPR), and we keep them while we handle it. Afterwards we delete them, unless we must keep them blocked to deal with possible legal claims, and then only for the legal limitation period.
This website does not process any data based on consent, so there is no consent to withdraw. The cookies we use are strictly necessary and you can delete them from your browser at any time.
Accounts
If you create an account we process your name, your email address and your password (stored encrypted by Clerk; we never see it). If you sign in with Google, we also receive your Google profile picture. Clerk also records technical data about your sessions (IP address, browser and device) to keep you signed in and protect your account; you can see them in “My account”. We use these data only to provide your account, based on our contract with you (art. 6.1.b GDPR), and we keep them while the account exists. You can delete your account yourself at any time from “My account”, and its data are then erased, except the order and invoice data we must keep by law (see Purchases).
Purchases
When you buy, we process your name, email address, billing address and the details of your order (what you bought, the price, the VAT and the date). Payment is made on a page hosted by Stripe Payments Europe, Ltd. (Ireland), which acts as our processor: it collects your card or payment details and uses them to take the payment and prevent fraud. We never see your full card number. VAT is calculated by Stripe Tax. We use these data to deliver your purchase, issue your invoice and let you download your files again from “My account”, based on performance of the contract (art. 6.1.b GDPR) and on our legal obligations (art. 6.1.c GDPR).
We keep orders and invoices for at least 6 years (Spanish Commercial Code, art. 30), and for tax purposes at least 4 years (General Tax Law, art. 66). After that we delete them.
We send your order confirmation and invoice by email. Those emails go through Resend, Inc. (United States), our processor, using its EU region in Ireland. Any transfer to the United States is covered by the EU-US Data Privacy Framework or by standard contractual clauses.
Recently viewed and email reminders
When you open the page of a book, a bundle or a coloring page, we store which product you viewed and when (the last 50), linked to your account or to the cart cookie, to show you “Recently viewed” and recommendations in “My account”. We do this on the basis of our legitimate interest in making the shop useful to you (art. 6.1.f GDPR); we keep it for 12 months at most, and the cart cookie expires after 90 days.
If you tick the box “Email me about my cart and new releases” in “My account” (unticked by default), we store your consent (art. 6.1.a GDPR) and, if you leave something in your cart, we send you at most one email 24 hours later, through Resend. You can withdraw it at any time by unticking the box or with the unsubscribe link in every email.
Who else sees the data
We do not sell or share personal data. The website is hosted by Cloudflare, Inc., which acts as our processor and may handle technical data (such as your IP address) in the United States under the EU-US Data Privacy Framework. Accounts are managed by Clerk, Inc., also our processor, which stores account data in the United States under the same framework. Cloudflare also stores the files you download from us (Cloudflare R2). Payments are handled by Stripe Payments Europe, Ltd. and order emails by Resend, Inc., as explained in “Purchases”.
Your rights
You can ask for access, rectification, erasure, restriction, portability or objection by writing to info@uncleiggyworld.com. We will answer within one month. You can also complain to the Spanish Data Protection Agency (www.aepd.es).