Privacy Policy
1. Who We Are
Meme Moda SL ("Meme Moda", "we", "us") is a fashion retailer based in Madrid, Spain. We are the data controller for personal data collected through mememoda.com. Contact us at [email protected] for any data-related requests.
2. What Data We Collect
We collect the following categories of personal data:
- Account data: name, email address, password (hashed)
- Order data: delivery address, order history, payment confirmation (not card numbers)
- Contact data: messages sent to us via email or contact forms
- Usage data: pages visited, device type, browser, IP address (anonymised after 24 h)
- Marketing data: email preferences, newsletter subscription status (only if you opt in)
We do not store card numbers. Payments are handled entirely by Stripe, Inc., under their own Privacy Policy.
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Fulfilling and managing your orders | Contract performance |
| Creating and managing your account | Contract performance |
| Customer support | Legitimate interests |
| Fraud prevention and security | Legitimate interests / Legal obligation |
| Sending order confirmation & shipping emails | Contract performance |
| Marketing emails and newsletters | Consent (opt-in only) |
| Improving our website and services | Legitimate interests |
| Complying with legal obligations | Legal obligation |
4. Cookies
We use only essential cookies required to operate the Site (session management, cart persistence). We do not use tracking cookies, advertising pixels, or third-party analytics cookies. You can clear cookies through your browser settings at any time.
5. Data Sharing
We share your data only where necessary:
- Stripe Inc. — payment processing
- Shipping carriers (DHL, Correos, etc.) — delivery of your order
- Email service provider — transactional and marketing emails
- Legal authorities — when required by law
We do not sell your data. We do not share your data with third parties for advertising purposes.
6. Data Retention
- Order data: retained for 7 years (tax and legal obligations)
- Account data: retained for the duration of your account + 2 years after deletion request
- Marketing consent: until you unsubscribe or withdraw consent
- Usage logs: anonymised after 24 hours
7. Your Rights (GDPR)
As an EU resident, you have the following rights regarding your personal data:
- Access: obtain a copy of your data
- Rectification: correct inaccurate data
- Erasure: request deletion ("right to be forgotten")
- Restriction: limit how we process your data
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interests
- Withdraw consent: for marketing, unsubscribe at any time
To exercise any right, email [email protected]. We respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at aepd.es.
8. Security
We use HTTPS/TLS for all data in transit and store passwords using industry-standard hashing. Access to production systems is restricted to authorised personnel. We notify affected users promptly in the event of a data breach.
9. Children
Our Site is not directed at anyone under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us immediately.
10. Changes to This Policy
We may update this policy as our practices evolve. The current version is always on this page with the date at the top. Material changes will be communicated by email where we hold your address.
11. Contact
For all privacy-related questions, email [email protected] or write to: Meme Moda SL, Madrid, Spain.
Email [email protected] — we respond within 30 days. For urgent data deletion requests, mark your subject line "URGENT – Data Request".