Privacy policy

Privacy Policy

Last updated: 5 October 2026

This policy explains how personal information is handled when you visit Hollysart™, make a purchase, or contact us.

Privacy Contact

For questions about the processing of your information or to exercise your rights, contact:

MerryLux™
Calle Pintor Lorenzo Goñi 53
23009 Jaén
Spain

Email: daquanzimiga79548@outlook.com

Information We Process

Depending on how you interact with us, we process:

• Contact information, such as your name, email address, delivery address, billing address, and any telephone number you provide.
• Order information, including products purchased, payment status, delivery details, and return requests.
• Payment-related information supplied through our payment providers. Payment details are handled according to the relevant provider’s services and privacy practices.
• Messages, attachments, and other information you send to customer support.
• Technical information generated when you use the store, such as IP address, browser details, device information, and activity necessary to operate and secure the website.

Why We Use Information

We use information to:

• Process purchases, arrange delivery, and handle refunds.
• Respond to questions and provide customer support.
• Maintain transaction records and meet legal obligations.
• Protect the store, investigate suspected fraud, and resolve disputes.
• Send marketing communications where you have consented or another lawful permission applies.

Legal Bases

We rely on performance of a contract to fulfil orders and provide related support; legal obligations for required records and disclosures; legitimate interests for proportionate security, fraud prevention, and claims management; and consent where required for marketing or non-essential tracking.

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

Service Providers

We share information as necessary with providers supporting our operations, including Shopify for the online store, payment providers, fulfilment and delivery partners, email service providers, and professional advisers.

Customer support emails sent to our Outlook address are handled through Microsoft’s email services.

We may disclose information where required by law, to respond to lawful requests, or to establish, exercise, or defend legal claims.

Cookies and Similar Technologies

The store uses technologies necessary for functions such as the shopping cart, checkout, preferences, and security.

If analytics or advertising technologies are enabled, we will provide relevant information and obtain consent where required before using non-essential technologies.

Where a privacy preferences control is available, you may use it to review or change your choices. Browser settings also allow you to manage cookies, although blocking essential cookies may affect store functionality.

International Processing

Our service providers may process information outside your country, including outside the European Economic Area.

Where required, transfers are protected through recognised safeguards, such as adequacy decisions or approved contractual clauses. Contact us for information about safeguards relevant to your data.

Retention

We retain personal information only for as long as necessary for the purposes described in this policy.

Order and accounting records are retained for applicable legal retention periods. Support records are kept as needed to resolve enquiries and related claims. Marketing information is retained until you unsubscribe or it is no longer needed, subject to records necessary to respect your preferences.

Your Rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, or receive a portable copy of your information, and to object to certain processing.

You may object to direct marketing at any time. Marketing emails, if sent, include an unsubscribe option.

To exercise your rights, email daquanzimiga79548@outlook.com. We may request proportionate information to verify your identity.

We normally respond to GDPR requests within one month. If an extension is permitted and necessary, we will explain it within the initial period.

You may lodge a complaint with your local supervisory authority or the Spanish Data Protection Agency at www.aepd.es.

Required Information

Certain information, such as contact, delivery, and payment information, is necessary to complete a purchase. If it is not provided, we may be unable to fulfil your order.

Security

We take reasonable organisational and technical measures to protect personal information. No method of online transmission or storage can be guaranteed completely secure.

Children

Our store is intended for people legally able to make purchases. We do not knowingly collect children’s personal information for marketing.

Changes

We may update this policy to reflect changes in our practices or legal requirements. The date above indicates the latest update.