Last updated: 24 September 2026.
This Privacy Policy explains how BambaKicks processes personal data related to the use of bambakicks.com, purchases, customer accounts, enquiries and marketing communications.
1. Controller and contact
Controller: Antonio Quiros Robles.
Trading name: BambaKicks.
NIF: 23946731M
Privacy and support email: bambakicks@gmail.com.
Contact address: Carrer dels Lleons 36, 46022 València, Valencia, Spain.
2. Data we may process
- Identification and contact data: name, surname, email, phone number and addresses.
- Order and transaction data: products, amounts, returns, incidents and order status.
- Payment data: processed by payment providers; BambaKicks does not need to store full card details.
- Account data: credentials, preferences and account activity where customer accounts are used.
- Communications: enquiries, requests, complaints and messages sent to customer support.
- Technical and usage data: IP address, device, browser, identifiers and data obtained through cookies or similar technologies, according to user preferences.
3. Purposes and legal bases
- Managing purchases, payments, shipping, returns and after-sales support: performance of the contract and pre-contractual steps.
- Answering enquiries unrelated to a purchase: legitimate interest in responding to requests or, where applicable, pre-contractual steps.
- Complying with tax, accounting, consumer and other legal obligations: compliance with legal obligations.
- Preventing fraud and protecting store security: legitimate interest and, where applicable, compliance with legal obligations.
- Sending marketing by email or other means: consent where required or another applicable legal basis for existing customers, always with the ability to object or unsubscribe.
- Analytics and advertising based on non-essential cookies: user consent.
4. Providers and recipients
Data may be communicated or made available to providers needed to deliver the service: Shopify as the ecommerce platform, payment providers, transport and logistics companies, hosting or infrastructure providers, support tools, fraud prevention, analytics or marketing services where enabled. Each provider will only access the information necessary according to its legal role.
5. Shopify
The store operates on Shopify. Shopify processes data to provide the platform and may carry out certain processing for its own purposes under its policies and the applicable contractual framework. Some features may involve processing or storage outside the European Economic Area with the safeguards required by applicable law.
6. International transfers
Where a provider processes data outside the European Economic Area and no applicable adequacy decision exists, legally recognised safeguards such as Standard Contractual Clauses or other valid mechanisms will be used where required.
7. Retention
Data will be kept for as long as necessary to provide the service and manage the contractual relationship. It may then be blocked or retained for the periods required by tax, commercial or consumer law or for the defence of legal claims. Data used exclusively for marketing will be processed until consent is withdrawn or the user exercises the right to object, without prejudice to the minimum retention necessary to demonstrate the request.
8. Rights
Data subjects may request access, rectification, erasure, objection, restriction of processing and portability where applicable, and may withdraw consent at any time. To exercise these rights, write to bambakicks@gmail.com stating the right you wish to exercise. Additional information may be requested where necessary to verify identity.
9. Complaints
If you believe that the processing of your data does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), without prejudice to any other remedies available to you.
10. Minors
The store is not specifically aimed at minors. If a minor provides personal data without the legally required authorisation, their representative may contact BambaKicks to request appropriate measures.
11. Security
Reasonable technical and organisational measures are applied to protect information. However, no system can guarantee absolute security. We recommend not sending financial or particularly sensitive information through channels not intended for that purpose.
12. Changes to this policy
This policy may be updated to reflect legal, technical or operational changes. The current version will be the one published on this page with its update date.