Privacy Policy

Last updated: July 2026

At VESTRA, we take the protection of your personal data very seriously. This Privacy Policy explains what information we collect, for what purpose, what is the legal basis for its processing, and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable regulations.

1. Data Controller

VESTRA is the data controller of your data. For any privacy-related queries, you can write to us at privacidad@vestra.com.

2. Data We Collect

  • Identification and contact data: name, surname, shipping and billing address, email, and phone number.
  • Order and payment data: products purchased, amount, and purchase history. Card data is processed directly by our certified payment providers; VESTRA does not store full card numbers.
  • Browsing data: IP address, device type, pages visited, and cookies (see section 7).

3. Purposes and Legal Basis

  • Manage and ship your orders, as well as customer service — contract performance.
  • Comply with legal and tax obligations — legal obligation.
  • Send you commercial communications if you have subscribed — consent, revocable at any time.
  • Improve the store and prevent fraud — legitimate interest.

4. Retention

We retain your data as long as a commercial relationship exists and, subsequently, for the applicable legal periods (e.g., tax and accounting obligations). Data processed based on your consent will be retained until you withdraw it.

5. Recipients

We only share data with necessary service providers (logistics, payment gateway, technological platform), subject to data processing agreements. We do not sell your data to third parties.

6. Your Rights

You can exercise your rights of access, rectification, erasure, objection, restriction, and portability at any time, as well as withdraw your consent, by writing to privacidad@vestra.com. You also have the right to lodge a complaint with the competent supervisory authority.

7. Cookies

We use our own and third-party cookies for the operation of the store, traffic analysis, and personalization. You can configure or reject their use from your browser. Continued use of the site implies acceptance of the necessary technical cookies.

8. Security

We apply technical and organizational measures to protect your data against unauthorized access, loss, or alteration, including encryption of communications.