Privacy Policy

Last updated: October 15, 2026

Car Society operates this online store and website, including all related content, features, tools, products, and services, to provide you with a shopping experience (the “Services”). Our store is hosted by Shopify, which provides the technology that allows us to offer the Services.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, use our Services, make a purchase, or contact us.

By using our Services, you acknowledge that you have read this Privacy Policy. Where applicable law requires consent for a particular use of personal information, we will seek that consent separately.

1. Personal Information We Collect

The personal information we collect depends on how you interact with our Services, the choices you make, and applicable law.

The information we may collect includes:

• Contact information: Your name, billing address, shipping address, email address, and telephone number, where provided.

• Order and transaction information: Products you view, add to your cart, purchase, return, or attempt to cancel, along with order details, payment status, and transaction history.

• Payment information: Payment method and transaction details. Payments are processed through the payment providers available at checkout. We do not necessarily receive or store your full payment card details.

• Account information: If you create an account, your username, account preferences, and related settings.

• Communications: Information you provide when contacting us about an order, asking a question, or making a complaint.

• Device and technical information: Information such as your IP address, browser type, device information, and certain online identifiers.

• Usage information: Information about how you interact with our website, including browsing activity and interactions with store features.

2. Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you, when you place an order, contact us, create an account, or otherwise provide information.

• Automatically through our website, including through cookies and similar technologies used by Shopify and the Services.

• From service providers, including Shopify and the providers involved in processing and fulfilling your order.

• From other third parties, where permitted by applicable law and relevant to providing the Services.

3. How We Use Your Personal Information

We use personal information for the following purposes:

Processing and fulfilling orders

We use your information to process payments, confirm purchases, arrange production and delivery, provide order updates, respond to questions, and handle complaints, returns, replacements, and refunds.

Legal basis: Processing is generally necessary to perform our contract with you and, where relevant, to take steps you request before entering into a contract.

Operating and improving our store

We use relevant information to maintain the website, provide shopping features, remember preferences, and help ensure the Services function correctly.

Legal basis: Depending on the activity, processing may be necessary to provide the Services, comply with legal requirements, or pursue legitimate interests in operating and maintaining our store, where those interests do not override your rights.

Customer support and communications

We use your contact details and the information you provide to answer questions, resolve order issues, and communicate with you about your purchases.

Legal basis: Processing is generally necessary to perform our contract with you or pursue legitimate interests in providing customer support. Legal obligations may also apply.

Security and fraud prevention

We and our service providers may use relevant information to help protect payments, detect fraudulent transactions, maintain security, and prevent misuse of the Services.

Legal basis: Processing may be necessary to comply with legal obligations or pursue legitimate interests in protecting our store, customers, and transactions.

Legal and regulatory obligations

We may process and retain information when necessary to comply with tax, accounting, consumer protection, or other legal requirements, and to establish or defend legal claims.

Legal basis: Compliance with applicable legal obligations and, where relevant, our legitimate interests in establishing or defending legal claims.

Marketing communications

Car Society does not currently send promotional email campaigns or operate an email newsletter.

If we introduce marketing communications in the future, we will handle personal information for those purposes in accordance with applicable law, including obtaining consent where required and providing an appropriate way to unsubscribe.

4. How We Share Personal Information

We may share personal information with third parties when necessary to operate our store, provide the Services, or comply with legal obligations. These parties may include:

• Shopify: Our ecommerce platform and hosting provider, which processes information to operate and support our store.

• Production and fulfilment providers: Providers involved in producing, preparing, and shipping purchased products. They receive the information necessary to fulfil orders.

• Payment providers: Services that process payments and help prevent fraud.

• Technical and service providers: Providers that support website operation, security, and other necessary business functions.

• Legal and regulatory authorities: Where disclosure is required by law or necessary to protect legal rights.

We do not currently operate an email newsletter or use separate marketing email services.

We do not disclose personal information to third parties for their independent purposes except where permitted or required by applicable law.

5. Shopify and International Data Transfers

Our store is hosted by Shopify. Information submitted through our website may be processed by Shopify and by service providers involved in delivering our Services.

These providers may process or store information in countries other than the country where you live.

Where applicable law requires safeguards for international transfers of personal information, we and our service providers will rely on an appropriate legal transfer mechanism.

For more information about how Shopify handles personal information, please review Shopify's Consumer Privacy Policy.

You may also review Shopify's Privacy Portal for information about privacy choices and rights relating to data processed by Shopify.

6. Cookies and Similar Technologies

Our website and Shopify may use cookies and similar technologies to support essential website functions, remember preferences, maintain shopping sessions, improve security, and understand how the Services are used.

The cookies and technologies used may depend on your device, your settings, the features enabled in our store, and your consent where required.

You can manage your cookie preferences through the cookie banner or privacy settings made available on our website, where available. You can also manage certain cookies through your browser settings. Blocking essential cookies may affect the functionality of the store.

We do not currently use separate third-party advertising or analytics tools that we have deliberately connected to our store. If we add such tools in the future, we will review and update our privacy and cookie disclosures as necessary.

7. Third-Party Websites

Our website may contain links to websites or services operated by third parties. Those websites have their own privacy practices and policies.

We are not responsible for the privacy, security, or content of websites that we do not control. We recommend reviewing their privacy policies before providing personal information.

8. Children's Privacy

Our Services are not intended for children who are not legally permitted to make purchases or use the Services in their jurisdiction.

We do not knowingly collect personal information from children in circumstances where doing so would be unlawful. If you believe a child has provided us with personal information unlawfully, please contact us so we can review the matter and take appropriate action.

9. Data Security and Retention

We take reasonable measures to protect personal information against unauthorised access, loss, misuse, or disclosure.

However, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, providing customer support, resolving disputes, maintaining appropriate business records, and complying with legal obligations.

The applicable retention period depends on the type of information and the reason it was collected.

10. Your Privacy Rights

Depending on where you live and the laws that apply, you may have the right to:

• Request access to personal information we hold about you.

• Request correction of inaccurate or incomplete information.

• Request deletion of personal information, subject to legal exceptions.

• Request a copy of certain personal information or its transfer to another provider, where applicable.

• Object to or request restriction of certain processing activities.

• Withdraw consent where processing is based on your consent. Withdrawal does not affect processing that took place lawfully before consent was withdrawn.

• Lodge a complaint with a competent data protection authority.

Some rights are subject to legal conditions and exceptions. We may need to verify your identity before responding to a request.

To exercise your rights in relation to information handled by Car Society, contact us using the details in the Contact section below.

For information about rights relating to data processed directly by Shopify, you can visit the Shopify Privacy Portal.

We will respond to valid requests within the time limits required by applicable law.

11. Complaints

If you have a concern about how we handle your personal information, please contact us first using the details below so we can review it.

If you are located in the European Economic Area, you may also have the right to lodge a complaint with your local data protection authority. In Spain, the relevant authority is the Spanish Data Protection Agency (AEPD).

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, legal requirements, or other operational needs.

When we make changes, we will publish the updated policy on this page and revise the “Last updated” date. We will provide any additional notice required by applicable law.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Car Society
Email: mshopp9933@gmail.com
Address: Lugar Nión 7, 15107 Carballo, A Coruña, Spain

For the purposes of applicable data protection laws, the identity of the data controller is the legal person or individual operating Car Society. Additional identifying information will be provided where required by law.