Privacy PolicyLast updated: June 2026 · Alohacanary.com |
|
Our promise to you
|
Alohacanary.com is fully committed to protecting the privacy and security of our customers and site visitors. This policy explains who we are, what data we collect, why we collect it, and what your rights are.
| 🏠 |
1. Who We Are |
The data controller responsible for your personal information is Alohacanary.com, a company registered and operating in the Canary Islands, Spain. As a business based in Spain, we are subject to European Union data protection law, including the General Data Protection Regulation (GDPR) (EU) 2016/679.
| 📄 |
2. What Data We Collect |
We collect personal data in the following situations:
| • When you place an order: name, delivery address, email address, phone number, and payment details (processed securely via our payment provider). |
| • When you create an account: email address, password (encrypted), and any saved preferences. |
| • When you browse our site: IP address, browser type, pages visited, and session data via cookies (see Section 6). |
| • When you contact us: your name, email address, and the content of your message. |
| • When you sign up for marketing: email address and communication preferences. |
We do not collect special category data (e.g. health, religion, ethnicity) and we do not knowingly collect data from children under 16.
| ⚙ |
3. Why We Use It & Our Legal Basis |
Under GDPR, we must have a lawful basis for processing your data. Here is what we do and why:
| Processing your order — necessary to perform our contract with you. |
| Managing your account — necessary to perform our contract with you. |
| Sending order updates and delivery notifications — necessary to perform our contract with you. |
| Fraud prevention and security — legitimate interest to protect our business and customers. |
| Improving our website and services — legitimate interest to develop and improve our offerings. |
| Sending you marketing emails — only with your explicit consent, which you may withdraw at any time. |
| Meeting legal obligations — where required by law (e.g. tax, customs, or regulatory requirements). |
| 👥 |
4. Who We Share Your Data With |
We do not sell your data. We only share it where necessary, with trusted third parties bound by their own data protection obligations:
| • Delivery and logistics providers — to fulfil and ship your order. |
| • Payment processors — to handle transactions securely. We do not store full card details. |
| • Customs and border authorities — where required for international shipments. |
| • Marketing and analytics platforms (including Google Analytics, Mailchimp) — only where you have consented. |
| • Trustpilot — we share your name and email address with Trustpilot after a completed order so they can invite you to leave a review. Trustpilot's privacy policy is at legal.trustpilot.com. |
| • Legal and regulatory authorities — where required by law. |
Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
| 🕐 |
5. How Long We Keep Your Data |
We only keep your data for as long as we need it:
| • Order data — retained for up to 7 years to comply with Spanish tax and accounting law. |
| • Account data — retained while your account is active. When you close your account, your data is removed from our live systems immediately. It may remain in infrastructure backups for up to 30–90 days before being purged as part of our standard backup cycle. Unless a legal retention obligation applies, it is gone. |
| • Marketing data — retained until you unsubscribe or withdraw consent. We use email marketing tools such as Mailchimp to manage these communications. |
| • Analytics and cookie data — typically 13 months, depending on the tool used. |
| 🍪 |
6. Cookies |
We use cookies when you visit our site. There are four types:
|
⚙ Site Functionality Cookies Enable core features such as Add to Cart and Save for Later. These are essential and cannot be disabled. |
|
📈 Analytics Cookies Allow us to measure and analyse how customers use the site, so we can improve its functionality and your experience. We use Google Analytics for this purpose. Google may process data on servers outside the EEA. You can opt out via Google's opt-out tool. Google's privacy policy is at policies.google.com/privacy. |
|
🌟 Preference Cookies Remember your settings (such as language or location) to make your shopping experience seamless and personal. |
|
🎯 Advertising & Targeting Cookies Deliver ads relevant to you, limit how often you see an ad, and measure campaign effectiveness. These are only placed with your consent. |
Under GDPR, non-essential cookies require your consent before they are placed. You can manage or withdraw your consent at any time via our cookie settings. To remove cookies from your device, refer to your browser's help section. Disabling certain cookies may affect site functionality.
| ⚖ |
7. Your Rights |
Under GDPR you have rights over your personal data, including the right to access, correct, delete, or restrict how we use it. You can also object to certain processing, request a portable copy of your data, or withdraw consent at any time.
To exercise any of these rights, get in touch using the link below. We will respond within 30 days.
| 🔐 |
8. How We Protect Your Data |
We use appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. This includes SSL encryption, secure payment processing, and restricted internal access to personal data. In the event of a breach that poses a risk to your rights, we will notify the relevant supervisory authority within 72 hours and inform you where required under GDPR.
| 📋 |
9. Changes to This Policy |
We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you by email. Continued use of our site after changes are published constitutes acceptance of the updated policy.
|
We are not a mega-corp. If you have any concern about how we handle your data, just get in touch. We are a small team and we will work with you directly to sort it out. No ticketing systems, no runaround. |
|
Questions about your privacy? We are here to help. Reach out any time. Contact Us |