Privacy policy

Last updated: 5 September 2026

1. Who is responsible for your data?

The data controller is Laia Turon Giralt, trading as Laia Branding, Carrer Berlin, 08029 Barcelona, Barcelona, Spain. Contact: hello@laiabranding.com.

2. What data do we collect?

Depending on how you use the website, we may process:

• Identity and contact details, such as your name, email, billing address and company details.
• Order, invoice, transaction and licence information.
• Enquiry and project information you submit through forms or email.
• Newsletter preferences and consent records.
• Account details if you create a customer account.
• Technical information such as IP address, device, browser, cookie identifiers and website interactions.

Payment card details are processed by Shopify and the payment providers available at checkout; Laia Branding does not receive your full card number.

3. Why and on what legal basis?

Purpose	Legal basis
Respond to enquiries and prepare proposals	Steps requested before entering a contract and our legitimate interest in managing enquiries
Process orders, deliver digital products and provide support	Performance of a contract
Issue invoices, maintain records and meet tax obligations	Legal obligation
Send newsletters and promotional emails	Your consent; you may withdraw it at any time
Protect the website, prevent fraud and improve essential operation	Legitimate interests in security and service administration
Analytics, preferences or advertising technologies	Your consent where required

4. How long do we keep it?

We retain personal data only for as long as needed for the relevant purpose and afterwards for any period required to meet tax, accounting, contractual or legal-claim obligations. Newsletter data is kept until you unsubscribe or withdraw consent. Enquiry data that does not lead to a project is periodically reviewed and deleted or anonymised when it is no longer needed.

5. Who receives it?

We may share data with service providers that help operate the business, including Shopify (commerce and hosting), payment providers selected at checkout, email and communication providers, digital-delivery tools, analytics or marketing providers you consent to, and professional advisers. We may also disclose data where required by law.

Some providers may process data outside the European Economic Area. Where required, transfers are protected through an adequacy decision, standard contractual clauses or another lawful safeguard. You may contact us for information about the relevant safeguard.

6. Shopify

Our store is hosted by Shopify. Shopify processes customer and visitor data to provide the storefront, checkout, fraud prevention and related commerce services. You can read more in Shopify’s consumer privacy policy.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent at any time without affecting earlier lawful processing. Email hello@laiabranding.com and identify the right you wish to exercise. We may request information necessary to verify your identity.

You may lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es, or with the competent authority where you live.

8. Children

The store and its paid products are intended for adults. Please do not submit personal data or make a purchase if you are not legally able to enter the relevant contract.

9. Changes

We may update this policy to reflect legal, technical or business changes. The latest version and its update date will remain available here.