WhatsApp Facebook Instagram

PRIVACY & COOKIE POLICY

Last Updated: 17/04/2026

This Privacy & Cookie Policy explains how Medina by Sarah (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit medinabysarah.com (the “Website”) or make a purchase. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable Spanish/EU laws.

1. Data Controller

Medina by Sarah Website: https://medinabysarah.com Email: This email address is being protected from spambots. You need JavaScript enabled to view it. Address: C. Eneldo, 3, Orihuela-Costa, Alicante, 03189

We determine the purposes and means of processing your personal data.

2. Information We Collect

A. Information You Provide Directly

  • Name

  • Email address

  • Phone number

  • Billing and shipping address

  • Payment details (processed securely by third‑party providers)

  • Account login details (if you create an account)

  • Messages or inquiries sent to us

B. Information Collected Automatically

When you browse the Website, we may collect:

  • IP address

  • Device type and browser

  • Pages viewed and time spent

  • Referring URLs

  • Approximate location (city/country)

  • Website interaction data

C. Cookies & Tracking Technologies

We use cookies, pixels, and similar technologies to:

  • Enable website functionality

  • Improve performance

  • Analyze traffic

  • Personalize content

  • Deliver targeted advertising

(See Cookie Policy section below.)

3. How We Use Your Information

We use your personal data for:

  • Processing and fulfilling orders

  • Sending order confirmations and updates

  • Providing customer support

  • Improving Website performance and user experience

  • Personalizing content and recommendations

  • Marketing communications (only with your consent)

  • Fraud prevention and security

  • Legal and regulatory compliance

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

  • Contractual necessity — to process and deliver your orders

  • Legitimate interest — to improve services, prevent fraud, and maintain security

  • Consent — for marketing, cookies, and analytics

  • Legal obligation — for tax, accounting, and regulatory requirements

5. Sharing Your Information

We may share your data with trusted third parties, including:

  • Payment processors (e.g., Stripe, PayPal)

  • Shipping and logistics providers

  • Email marketing platforms

  • Analytics and advertising partners

  • Website hosting and e‑commerce platforms

We never sell your personal data.

All third‑party processors comply with GDPR and process data only as instructed.

6. International Data Transfers

Some partners may be located outside the EU. When this occurs, we ensure:

  • Standard Contractual Clauses (SCCs)

  • Adequacy decisions

  • Equivalent GDPR‑compliant safeguards

7. Data Retention

We retain personal data only as long as necessary:

  • Order and transaction records: 6–10 years (legal requirement)

  • Marketing data: until you withdraw consent

  • Account data: until account deletion

  • Cookies: according to their expiration period

8. Your Rights (GDPR)

You have the right to:

  • Access your personal data

  • Correct inaccurate information

  • Request deletion (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Withdraw consent at any time

  • Request data portability

  • File a complaint with a supervisory authority

To exercise your rights, contact: This email address is being protected from spambots. You need JavaScript enabled to view it.

9. Security Measures

We implement technical and organizational measures to protect your data, including:

  • Encrypted connections (HTTPS)

  • Secure payment gateways

  • Access controls

  • Regular security monitoring

However, no online system is completely secure.

10. Children’s Privacy

We do not knowingly collect data from individuals under 16. If you believe a minor has provided personal data, contact us immediately.

 

COOKIE POLICY

1. What Are Cookies?

Cookies are small text files stored on your device to improve your browsing experience and help us understand how the Website is used.

2. Types of Cookies We Use

A. Essential Cookies

Required for the Website to function. Used for:

  • Shopping cart

  • Checkout

  • Security and authentication

These cannot be disabled.

B. Performance & Analytics Cookies

Used to analyze traffic and improve performance. Examples:

  • Google Analytics

  • Shopify analytics

  • Server logs

C. Functional Cookies

Enhance user experience, such as:

  • Remembering preferences

  • Saving login sessions

D. Advertising & Targeting Cookies

Used to deliver personalized ads and measure campaign performance. Examples:

  • Meta Pixel

  • Google Ads cookies

  • Retargeting cookies

These require explicit consent under GDPR.

3. Cookie Consent (GDPR)

When you first visit the Website, you will see a cookie banner allowing you to:

  • Accept all cookies

  • Reject non‑essential cookies

  • Customize cookie settings

You may change your preferences at any time.

4. Managing Cookies

You can manage or delete cookies through your browser settings:

  • Chrome

  • Safari

  • Firefox

  • Edge

Disabling cookies may affect Website functionality.

5. Third‑Party Cookies

Some cookies are placed by third‑party services integrated into the Website. We do not control these cookies directly.

6. Updates to This Policy

We may update this Privacy & Cookie Policy periodically. Changes will be posted on this page with an updated revision date.

7. Contact

For privacy or cookie‑related questions: Email: This email address is being protected from spambots. You need JavaScript enabled to view it. Address: C. Eneldo, 3, Orihuela-Costa, Alicante, 03189