Privacy policy

1. Who is responsible

1.1La Española Beauty Supply, LLC, registered in Puerto Rico, is responsible for processing the personal data you provide through app.laespanolabeautysupply.com. You can contact us at servicioalcliente@laespanolabs.com or 787.884.2363.

2. What data we collect

2.1Account: name, email, phone, preferred language, password (stored only in an encrypted, irreversible form) and the addresses you save.

2.2Orders: products purchased, amounts, delivery address or pickup store, shipping method and order status.

2.3Payments: payment is processed by Stripe. We never see or store your full card number; we only receive from Stripe the result of the payment, the type of method (for example, "card" or "Apple Pay") and an internal reference.

2.4Contact and support: what you write to us through the contact form or by email, and the availability alerts you request.

2.5Browsing: pages visited, products viewed, cart, language and device, linked to an anonymous identifier. Only with your consent do we use analytics and advertising tools (see section 4 and the Cookie policy).

2.6IP address: we use it to protect forms and sign-in against abuse, and we keep it only in hashed (non-reversible) form.

3. What we use it for

3.1To manage your account, your orders, shipments, in-store pickups, returns and refunds.

3.2To send you transactional emails: account verification, password recovery, order confirmation, shipping notices and the availability alerts you requested.

3.3To send you marketing communications (offers, news, cart reminders) only if you have expressly agreed. You can unsubscribe at any time using the link in every email or from your account.

3.4To handle your inquiries and claims, and to keep a customer service history.

3.5To protect the store against fraud and abuse, and to comply with legal and accounting obligations.

3.6To improve the store with usage statistics, only with your consent for analytics.

4. Who we share data with

4.1Stripe (payments): processes payments and receives the data needed to charge, prevent fraud and handle refunds and disputes. Stripe is the one who handles your card data.

4.2BigCommerce (orders and catalog): our commerce platform, where orders are registered for preparation, shipping and invoicing.

4.3Resend (email): sends our transactional emails and, if you agreed, our marketing emails, and reports deliveries, opens, clicks, bounces and complaints to us.

4.4Google Analytics 4 (analytics) and Meta (Pixel and Conversions API, advertising): they are only activated if you accept analytics or marketing cookies. Without your consent, no data is sent to them.

4.5n8n (internal automation): a tool we use to organize our customer service and CRM with your order and inquiry data; it is not a third party that uses your data for its own purposes.

4.6Carriers (USPS or others): receive your name, address and phone number to deliver the order.

4.7We do not sell your personal data. We will only disclose it to authorities when required by law.

5. How long we keep it

5.1Account: while it is active. You may request its deletion (see section 6); we then anonymize the account and keep orders without identifying data due to accounting obligations.

5.2Orders, payments and invoices: as long as tax and accounting obligations require.

5.3Carts: expire after 30 days of inactivity and are deleted after 90. Technical payment and notification data: 90 days, except those under review.

5.4Contact inquiries: up to two years from the last action.

6. Your rights

6.1You can access your data, correct it, request its deletion, withdraw your consent for marketing or cookies at any time, and unsubscribe from our communications. From your account you can edit your data and preferences.

6.2To exercise any of these rights, write to servicioalcliente@laespanolabs.com from the email associated with your account. We will respond within a reasonable time.

7. Security

7.1We use encrypted connections (HTTPS), irreversibly hashed passwords, protected sessions and access controls for our team. No system is infallible; if we detect an incident that affects you, we will notify you.

8. Changes to this policy

8.1We may update this policy. We will publish the current version on this page with its update date.