Privacy policy

Data controller

Aarón Cazaña Coello, tax ID (NIF) 53990661R, based in Madrid, Spain. Contact email: blacktopcards8@gmail.com

What data is collected

When you buy a card or a collection, the payment process (handled by Stripe) collects the buyer's name, shipping address and email, along with card details — the card details are handled directly by Stripe and never reach this site or its owner. If you write by email, the information you choose to include in your message is processed.

Purpose

Data is used exclusively to manage the order, ship the card, and handle questions or issues related to the purchase. It is not used for marketing and is not shared with third parties for commercial purposes.

Legal basis

Performance of the sales contract (Art. 6.1.b GDPR) for the data needed to process the order and shipment.

Who the data is shared with

• Stripe, Inc., as the payment gateway, to process the payment securely.
• Correos (Spain's postal service), with the name and address strictly necessary to deliver the shipment.
• Vercel and Neon, as technical hosting and database providers, acting as data processors.

Retention period

Order data is kept for as long as there's an active contractual relationship and, afterwards, for the legal limitation periods for possible tax or commercial liabilities.

Cookies

This site does not use advertising or third-party tracking cookies. Vercel Web Analytics (basic visit statistics) is cookieless by design. Two small technical cookies are used: one keeps the admin panel session open (irrelevant to shoppers), and one remembers your chosen language and display currency so you don't have to pick them again on your next visit — both are purely functional and don't track you across other sites.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to blacktopcards8@gmail.com. You also have the right to file a complaint with the Spanish Data Protection Agency (aepd.es) if you believe your data isn't being handled correctly.

Security

The site is always served over HTTPS and never stores payment card data — that information is handled by Stripe under its own security standards (PCI-DSS).