Last updated: October 14, 2026.

1. Data Controller

Ellevera, S.L., NIF B16397697, with registered office at Av. Diagonal 534, entr. izq., 08006 Barcelona (Spain), registered in the Commercial Registry of Barcelona, volume 49,246, page 88, section 8, sheet B-613140. Contact for any data protection matters: hello@ellevera.eu.

2. What data we process, for what purpose and on what basis

Purchases

Data: first and last name, email, phone number, shipping and billing addresses, products, amounts, and order history. Card details are processed directly by the payment provider; Ellevera does not see or store them.
Purpose: to manage the order, payment, shipping, 90-day warranty, returns, and invoicing, and to send you transactional emails related to the order (confirmation and tracking).
Legal basis: performance of the contract (Art. 6.1.b GDPR) and compliance with legal accounting and tax obligations (Art. 6.1.c).
Retention: for the duration of the relationship and, thereafter, for six years due to commercial and tax obligations, and the limitation period for potential claims.

Private list and Ellevera communications

Data: email and, if you provide it, your name and preferences (e.g., the format you are interested in) and your activity with our emails (opens and clicks).
Purpose: to send you news, early access, and Ellevera marketing communications.
Legal basis: your consent (Art. 6.1.a GDPR and Art. 21 LSSI). If you are already a customer, we may also write to you about products similar to those you purchased (Art. 21.2 LSSI), with an option to unsubscribe from each email.
Retention: until you unsubscribe or withdraw your consent.

Skin test

Data: your answers to the test (e.g., how you describe your skin, your routine, and what you are looking for) and, if you choose to submit it, your email.
Purpose: to show you an indicative result and, if you provide your email, to save it and send you your routine and related communications. The result is indicative: it is not a diagnosis and has no legal effect on you.
Legal basis: your consent. If you do not provide your email, your answers will not be saved or associated with you.
Retention: until you unsubscribe or request their deletion.

Reviews

Data: name, email, order number, and the text of your review.
Purpose: to verify that the review is based on an actual purchase, to respond to you, and, only if you authorize it, to publish your review on the website with your first name and the initial of your last name. Your email and order number will never be published.
Legal basis: your consent, which you can withdraw at any time by writing to hello@ellevera.eu; we will remove the published review.
Retention: as long as the review is published and, if it is not published, for one year from the date we receive it.

Ellevera Circle

Data: email and any information you provide.
Purpose: to invite you to brand experiences and collaborations.
Legal basis: your consent.
Retention: until you unsubscribe.

Inquiries (form, email, or WhatsApp)

Data: name, email or phone number, order number if you provide it, and the content of your message.
Purpose: to respond to you.
Legal basis: your request and, if it relates to an order, the performance of the contract.
Retention: the time necessary to resolve it and, at most, one year thereafter, unless it is part of an order or a claim.

Browsing and cookies

Data: IP, device, browser, pages visited, and cookie identifiers.
Purpose: to ensure the store functions (cart, checkout, security) and, only if you accept, to measure website usage and personalize advertising.
Legal basis: technical cookies are necessary to provide the service; analytical and advertising cookies require your consent (Art. 22.2 LSSI). See the cookie policy.

3. Mandatory data

Fields marked as mandatory are necessary to complete your order or request. If you do not provide them, we will not be able to process it.

4. Who we share the data with

We do not sell your data. We only share it with providers that process it on behalf of Ellevera under a data processing agreement:

• Shopify (Shopify International Ltd., Ireland): store platform, checkout, and payments.
• Payment providers that process the method you choose (card, Bizum, Apple Pay, Google Pay, Shop Pay).
• Hive (Germany): order storage and preparation.
• Shipping companies: order delivery.
• Klaviyo (Klaviyo, Inc., USA): email delivery and list and skin test management.
• Review tool integrated into the store, if used to collect or display reviews.
• Meta and Google: only if you accept advertising or analytical cookies.
• Tax and accounting advisor and invoicing software: accounting and tax obligations.

We may also communicate data to authorities, courts, and administrations when required by law.

5. International transfers

Some providers (e.g., Klaviyo, Shopify, Meta, or Google) may process data outside the European Economic Area, particularly in the USA and Canada. In such cases, the transfer is based on an adequacy decision by the European Commission (such as the EU-US Data Privacy Framework, when the provider is certified, or the decision on Canada) or on approved standard contractual clauses. You can request more information at hello@ellevera.eu.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and portability, and withdraw your consent at any time without affecting the lawfulness of the prior processing. Write to us at hello@ellevera.eu indicating which right you are exercising. We will respond within one month. To unsubscribe from emails, simply use the link provided in each one.

If you believe we have not processed your data correctly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply technical and organizational measures appropriate to the risk to protect your data against loss, unauthorized access, or alteration.

8. Minors

The website and products are not intended for minors under 18 years of age, and we do not knowingly collect data from minors.

9. Changes

If we change this policy, we will publish the new version here with its date. If the change is significant, we will notify you by email.