Privacy Policy

Last updated: 2026-08-31

1. Data controller

The controller responsible for processing your personal data is:

  • Trading name: Serigrafía Utopía
  • Owner: Sergio Sánchez-Cano Mora-Granados
  • Tax ID (NIF): 03940120J
  • Registered address: Calle de Cabrahigos, 15, 45006 Toledo, España
  • Email: info@serigrafiautopia.com

2. What data we collect

  • Contact form: name, email, telephone, company and message.
  • Order and checkout: full name, email, telephone, delivery address (street, number, floor, postcode, town and province) and, if you request an invoice, company name, tax ID and billing address.
  • Customer account (optional): email and password (always stored encrypted, never in plain text), together with the data above.
  • Designs you upload: the images or text you provide to personalise your products.
  • Payment data: handled by our payment provider. We never store your full card number; we only receive a secure identifier for the transaction.

3. Why we use your data and on what legal basis

  • To manage your order (production, invoicing and delivery) — legal basis: performance of the contract.
  • To answer your enquiries and quotation requests — legal basis: your consent or pre-contractual measures.
  • To comply with legal obligations (tax and accounting) — legal basis: legal obligation.
  • To send you offers and news — legal basis: your express consent, which you may withdraw at any time.

We do not carry out automated decision-making or profiling with your data.

4. Who we share your data with

We only share your data with those strictly necessary to provide the service, acting as data processors:

  • Payment gateway (Stripe): to process payment securely.
  • Transport companies: to deliver your order.
  • Technology providers: web hosting, email and our internal order management tool.
  • Public authorities, where legally required.

We do not sell or transfer your data to third parties for commercial purposes. If any provider processes data outside the European Economic Area, this will be done with the safeguards provided for in the GDPR (standard contractual clauses).

5. How long we keep it

  • Contact enquiries: while they are being handled and, afterwards, for up to 1 year.
  • Order and invoicing data: for the statutory tax and accounting periods (generally 6 years).
  • Customer account: for as long as you keep it active; if you delete it, the data is erased except for what we must retain by law.
  • Marketing consent: until you withdraw it.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, as well as withdraw your consent, by writing to info@serigrafiautopia.com stating the right you wish to exercise. We may ask you to prove your identity.

If you believe we have not handled your request properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es.

7. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction: encrypted connection (HTTPS), passwords stored using irreversible hashing functions, and restricted access to information.

8. Minors

This site is not directed at children under 14. By placing an order you declare that you are of legal age.

9. Cookies

We use only strictly necessary technical cookies. You can find the details in our Cookie Policy.

10. Changes to this policy

This policy may be updated to reflect legal changes or changes to our services. The date of the latest revision appears at the top of this page.

This text is a translation provided for convenience. In the event of any discrepancy, the Spanish version shall prevail.