Privacy policy

Privacy Policy

Last updated: July 2026.

This Privacy Policy describes how OBSESSIVE collects, uses, and shares your personal information when you visit, use our services, make a purchase at www.obsessivesmiles.com (the “Site”), or otherwise communicate with us. When we refer to “you,” we mean you as a user, whether you are a customer, visitor, or any other individual whose personal information we process in accordance with this policy.

1. Data Controller

2. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will publish the revised version on the Site and update the “Last updated” date.

3. Personal Information We Collect

Information you provide directly to us:

  • Contact information: name, address, telephone number, and email address.
  • Order information: name, billing and shipping address, payment confirmation (credit/debit card or PayPal account), email address, and telephone number.
  • Account information: username, password, and account security information.
  • Purchase and account browsing information: products viewed, shopping cart, reviews, referrals, or saved vouchers.
  • Customer support information: information you provide when communicating with us.

Information we collect automatically (Usage Data): through cookies, pixels, and similar technologies, we collect information about your device, browser, network connection, IP address, pages visited, search terms, and how you interact with the Site.

Information from third parties: we may receive information from service providers that assist us in providing our services, such as Shopify (our e-commerce platform) or our payment providers.

4. How We Use Your Information

  • Providing products and services: processing payments, managing orders, shipping, returns and exchanges, and administering your account.
  • Marketing and advertising: sending you communications and displaying advertisements, where applicable and with your consent.
  • Security and fraud prevention: detecting and investigating fraudulent or malicious activity.
  • Communication and service improvement: providing customer support and optimizing the Site.
  • Legal compliance: complying with legal, tax, and accounting obligations.

5. Legal Basis for Processing (GDPR)

If you reside in the European Union, we process your personal information on the following legal bases:

  • Performance of a contract: to manage your order and account.
  • Legitimate interests: fraud prevention, security, and improvement of the Site.
  • Consent: for email or SMS marketing and non-essential cookies; you may withdraw your consent at any time.
  • Legal obligation: where we are required to retain or disclose information.

6. Cookies and Privacy Signals

We use first-party and third-party cookies to operate and improve the Site, remember your preferences, analyze usage, and personalize advertising. Most browsers accept cookies by default, but you can configure your browser to reject or delete them. Please note that blocking cookies may affect the functionality of the Site.

Our Site recognizes the Global Privacy Control (GPC) signal. If your browser sends this signal, we will treat it as a valid request to opt out of the “sale” or “sharing” of personal information for targeted advertising purposes for that browser or device. You can learn more at globalprivacycontrol.org. Except for the GPC signal, we do not respond to other “Do Not Track” signals because there is currently no uniform standard for such signals.

7. How We Share Your Information

We share information with third parties that enable us to provide our services:

  • Shopify (e-commerce platform) — Privacy Policy.
  • Google Analytics (website analytics) — Privacy Policy · Opt out.
  • Payment providers, to securely process transactions.
  • Logistics providers, to manage shipping and delivery.
  • Marketing partners, in accordance with their own privacy policies and with your consent where required.

We may also share information to comply with the law, respond to legal requests, protect our rights, or in connection with a corporate transaction (such as a merger or acquisition).

8. Behavioral Advertising

We use your information to show you advertisements that may be of interest to you. You can manage your personalized advertising preferences at:

9. SMS Marketing

If you provide us with your mobile telephone number and give your consent, we will use it only to send you transactional, informational, or promotional messages that you have agreed to receive (including order notifications and abandoned cart reminders).

  • We may collect your telephone number, information about your interactions with messages, and your opt-in/opt-out status.
  • You may opt out at any time by replying STOP; for assistance, reply HELP or contact us at info@obsessivesmiles.com.
  • Your mobile telephone number will not be shared or sold to third parties for marketing purposes.

10. Your Rights

If you reside in the European Union, you have the right to access, rectification, erasure (“right to be forgotten”), object (including to direct marketing), data portability, restriction of processing, and withdrawal of consent at any time without affecting the lawfulness of processing carried out before such withdrawal. You may also manage your communication preferences through the unsubscribe link in our emails.

To exercise these rights, contact us at privacidad@obsessivesmiles.com. We may ask you to verify your identity before responding. You have the right to lodge a complaint with the competent supervisory authority; in Spain, this is the Spanish Data Protection Agency (AEPD).

11. Children's Data

Our services are not directed at minors, and we do not knowingly collect personal information from minors. If you are a parent or legal guardian and believe that a minor has provided us with personal information, please contact us so that we can delete it.

12. Security and Retention

We implement reasonable technical and organizational measures to protect your personal information, although no security measure is completely infallible. We retain your information for as long as necessary to provide our services, maintain your account, comply with legal obligations (including tax and accounting obligations), resolve disputes, and enforce our agreements. If you request deletion of your personal information, we will delete it unless we are legally required to retain it.

13. International Transfers

Your personal information may be transferred to and processed outside the European Economic Area (EEA), for example through service providers such as Shopify (Canada) or Google (United States). These transfers are carried out using appropriate safeguards required under the GDPR, such as the Standard Contractual Clauses approved by the European Commission or applicable adequacy frameworks.

14. Complaints

If you have any concerns or complaints about how we process your personal information, please contact us first at privacidad@obsessivesmiles.com. If you are not satisfied with our response, you may contact your relevant data protection authority (in Spain, the AEPD).

15. Contact and Dispute Resolution

For any questions about this Privacy Policy or to exercise your rights, please contact us at privacidad@obsessivesmiles.com or at our postal address in Spain indicated in Section 1.

Online Dispute Resolution (ODR): in accordance with Regulation (EU) No 524/2013, the European Commission provides European Union consumers with an online dispute resolution platform, available at: https://ec.europa.eu/consumers/odr. Our contact email address for these purposes is privacidad@obsessivesmiles.com.