Privacy policy
Privacy policy
This policy explains how Athletic Aliments S.L. uses the personal data of people who visit athleticaliments.com, buy from it or contact us.
1. Who is responsible for your data
- Controller: Athletic Aliments S.L.
- CIF: B56308737
- Address: Carrer d'Atenes 9, 08006 Barcelona, Spain
- Email: support@athleticaliments.com
2. What data we collect
- Identity and contact data: name, email address, phone number, delivery and billing addresses.
- Order data: products, amounts, order history, shipping method and delivery status.
- Payment data: payment method and transaction status. Card details are entered on the payment provider's page and are not stored by us.
- Customer account data: the email you sign in with and your saved addresses.
- Subscription data: products, delivery frequency and subscription status, if you subscribe.
- Messages you send us and our replies.
- Reviews: your name, rating, review text and any photos you choose to add.
- Affiliate programme data, if you join: name, email, referral activity and payout details.
- Browsing data: IP address, device, browser and pages visited, through cookies and similar technology.
We collect this data from you when you use the site. We do not make decisions about you based solely on automated processing.
3. Why we use your data, on what legal basis and for how long
| Purpose | Legal basis | Retention |
|---|---|---|
| Process, ship and deliver your order, and answer questions about it | Performance of the contract (GDPR art. 6.1.b) | While the order is open, then as long as claims can be brought under the contract |
| Invoicing, accounting and tax | Legal obligation (GDPR art. 6.1.c) | Six years, as required by commercial and tax law |
| Customer account | Performance of the contract (GDPR art. 6.1.b) | Until you close the account |
| Subscriptions | Performance of the contract (GDPR art. 6.1.b) | While the subscription is active; its orders as in the rows above |
| Answer messages that are not about an order | Legitimate interest in answering you (GDPR art. 6.1.f) | Until the question is resolved |
| Ask for a review after a purchase | Legitimate interest (GDPR art. 6.1.f; LSSI art. 21.2). You can object at any time | Until you object or the request is sent |
| Publish your review | Consent (GDPR art. 6.1.a) | While the review is published, or until you ask us to remove it |
| Marketing emails | Consent (GDPR art. 6.1.a; LSSI art. 21) | Until you unsubscribe |
| Website analytics | Consent (LSSI art. 22.2; GDPR art. 6.1.a) | As set out in the cookie banner |
| Affiliate programme | Performance of the contract (GDPR art. 6.1.b) | While you take part, then six years for payout records |
| Security and fraud prevention on payments and accounts | Legitimate interest (GDPR art. 6.1.f) | As long as needed for that purpose |
| Handle your data protection requests | Legal obligation (GDPR art. 6.1.c) | As long as claims about the request can be brought |
Data needed for an order is required to complete it. Without it we cannot accept or deliver the order.
4. Who receives your data
We do not sell your data. We share it only with the providers that run the store for us, under a data processing agreement, and with public authorities when the law requires it.
| Recipient | What for |
|---|---|
| Shopify | E-commerce platform: hosting of the store, checkout, customer accounts and order records |
| Payment providers shown at checkout, including Shop Pay and Apple Pay | Taking payment and preventing fraud |
| D10 Logistics (warehouse, Pallejà), Sendcloud and the carriers | Picking, packing and delivering your order |
| Appstle Subscriptions | Managing subscriptions and the subscription portal |
| Judge.me | Collecting and showing product reviews |
| UpPromote | Running the affiliate programme and tracking referrals |
| Orderly Emails | Order emails and invoices |
| Google Analytics (Google) | Website statistics, only with your consent |
| Simprosys and the Google & YouTube app | Showing our products on Google |
| TLab translations | Translating the store into Spanish and Catalan |
| PageFly and Smart SEO | Building store pages and search metadata |
| Tax authorities, courts and banks | Where a law requires it |
5. Transfers outside the European Economic Area
Some of these providers process data outside the European Economic Area. When they do, the transfer relies on an adequacy decision of the European Commission or on the standard contractual clauses approved by the Commission. You can ask us for a copy of the safeguards at support@athleticaliments.com.
6. Your rights
You have the right to:
- access the data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict how we use it;
- receive it in a portable format;
- object to its use based on legitimate interest, including review requests and marketing;
- withdraw your consent at any time, without affecting earlier use.
To exercise a right, email support@athleticaliments.com or write to Athletic Aliments S.L., Carrer d'Atenes 9, 08006 Barcelona. We may ask you to confirm your identity. We answer within one month.
Every marketing email includes a link to unsubscribe.
7. Complaints
If you think we have not handled your data correctly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es). We would appreciate the chance to resolve it first at support@athleticaliments.com.
8. Cookies
The site uses cookies that are needed for the store to work, such as the cart and checkout, and analytics cookies. Analytics cookies are only set if you accept them in the cookie banner. You can change your choice at any time from the cookie settings.
9. Minors
The store is meant for adults. We do not knowingly collect data from children under 14.
10. Changes to this policy
We update this policy when the way we use data changes. The version published on this page is the one in force.