Privacy Policy

Last updated: July 2026

1. Who we are

Nacarea is the data controller for the personal data described in this policy. You can reach us at [email protected].

Nacarea is currently run as an independent, unincorporated project rather than a registered company.

2. What we collect

• Newsletter: your email address, and the language you're browsing in.
• Contact form: your name, email address, and the content of your message.
• Custom design requests: your name, email, phone number, a description of the piece you'd like, and any reference images or files you attach.
• Product orders: your name, phone number, email address, and the details of the piece you configure — placement, chain material, packaging, and any custom text.

We don't collect payment information through this website — payment is arranged directly with our studio once your order is confirmed.

3. Why we collect it, and on what legal basis

• To respond to your inquiries and process your order requests — performance of a contract, or steps you've asked us to take before entering one.
• To send you the newsletter, only if you've subscribed — based on your consent, which you can withdraw at any time.
• To keep a record of your custom design and order requests for our own studio workflow — our legitimate interest in running the business.

4. Who we share it with

We use the following processor to run this site and communicate with you:

• Brevo — sends order confirmations, runs our newsletter, and stores your contact details for that purpose.

Brevo acts as a data processor on our behalf under its own data processing agreement — it doesn't use your data for its own purposes.

5. How long we keep it

We keep your data for as long as needed to fulfil the purpose it was collected for, and afterwards only as long as required by applicable tax, accounting, or consumer protection law. Newsletter subscribers stay on our list until they unsubscribe.

6. Your rights

Under the GDPR, you can ask us to:

• give you access to the personal data we hold about you,
• correct it if it's inaccurate,
• delete it,
• restrict or object to how we use it,
• give you a copy in a portable format,
• or let you withdraw consent at any time — for the newsletter, use the unsubscribe link in any email, or just write to us.

To exercise any of these, email [email protected]. If you're not satisfied with our response, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Cookies

This site doesn't currently use analytics, advertising, or tracking cookies — only what's strictly necessary for it to function, which needs no consent. If that changes, for example if we add analytics, we'll update this policy and ask for your consent where required.

8. Security

We take reasonable technical and organizational measures to protect your data, though no method of transmission over the internet is ever 100% secure.

9. Children

This site isn't directed at children, and we don't knowingly collect data from anyone under 16.

10. Changes to this policy

We may update this policy from time to time; the date at the top reflects the latest revision.

11. Contact

Questions about this policy or your data: [email protected]