Privacy policy
Last updated: 27 October 2026
Who processes your data
Controller: [pendiente: nombre y apellidos o razón social], Tax ID (NIF) [pendiente], Calle Gran Vía, 28013 Madrid (Spain). Contact email for any privacy matter: hello@nowandthen.es.
What data we process and why
- Orders: name, address, phone, email and purchase details, to prepare and ship your order, take payment, handle returns and help you. Legal basis: the purchase contract. Your card details are handled directly by the payment gateway; we never see them.
- Subscriptions: your subscription details and tokenised payment method, to make the recurring deliveries and charges you choose. Legal basis: the contract.
- Customer account: your email and order history, if you sign in to your account. Legal basis: the contract.
- Customer service: whatever you tell us by email or through the contact form, so we can reply. Legal basis: your consent and our legitimate interest in helping you.
- Newsletter: your email, only if you sign up, to send you news and offers. Legal basis: your consent, which you can withdraw at any time through the unsubscribe link in every email.
- Cart reminders and reviews: if you start a purchase or buy, we may email you to remind you about your cart or ask for your opinion of the product. Legal basis: our legitimate interest regarding products you have bought or nearly bought; you can object at any time.
- Analytics and advertising: browsing data through cookies, only if you accept them. More details in the cookie policy.
- Legal obligations: invoices and accounting records, for the periods required by law.
How long we keep it
Order data, for as long as the relationship lasts and then for the legal periods (generally 6 years for accounting and tax records). Newsletter data, until you unsubscribe. Customer service data, for as long as needed to resolve your query.
Who we share it with
We do not sell your data. We only share it with the providers we need to serve you, who process it on our behalf:
- Shopify (shop platform and payments).
- Our manufacturing laboratory and its warehouse in the European Union, which prepare and ship orders, and the carriers.
- Payment gateways, depending on the method you choose (for example, Shopify Payments or PayPal).
- The email, review and analytics tools we use at any given time (for example, Klaviyo, Judge.me or Google Analytics).
- Public authorities, when required by law.
Some of these providers are outside the European Economic Area (for example, in the United States or Canada). In those cases, the transfer relies on European Commission adequacy decisions, such as the EU-US Data Privacy Framework, or on standard contractual clauses.
Your rights
You can request access, rectification, erasure, objection, restriction of processing and portability of your data, and withdraw your consent at any time, by emailing hello@nowandthen.es. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
Minors
The shop is not aimed at children under 14 and we do not knowingly collect their data.
Changes
If we change this policy, we will publish the new version here with its date.
