Privacy policy

<h2>1. Data Controller</h2>

<p>
  PIXEL DISCOVERY S.L.<br>
  CIF: ESB40547465<br>
  C/ Dr. Zamenhof, 20 Bajo<br>
  46008 Valencia, Spain<br>
  Phone: +34 621 040 764<br>
  Contact: <a href="https://www.teleprompterpad.com/contact">teleprompterpad.com/contact</a>
</p>

<h2>2. Personal Data We Collect</h2>

<p><strong>When you place an order:</strong> name, email address, shipping and billing address, phone number, payment information (processed by third-party payment providers — we do not store your payment card data), and order details.</p>

<p><strong>When you browse our site:</strong> device information (browser type, operating system), IP address, cookies and similar technologies (see Section 7), pages visited, and referring URL.</p>

<p><strong>When you contact us:</strong> name, email address, and any information you voluntarily provide in your message.</p>

<p>We do not collect sensitive personal data (racial or ethnic origin, political opinions, religious beliefs, health data, etc.).</p>

<h2>3. Purpose and Legal Basis for Processing</h2>

<table>
  <thead>
    <tr>
      <th>Purpose</th>
      <th>Legal Basis (GDPR Art. 6)</th>
    </tr>
  </thead>
  <tbody>
    <tr>
      <td>Processing and fulfilling orders</td>
      <td>Performance of a contract (Art. 6.1.b)</td>
    </tr>
    <tr>
      <td>Sending order confirmations and shipping updates</td>
      <td>Performance of a contract (Art. 6.1.b)</td>
    </tr>
    <tr>
      <td>Complying with tax, accounting, and legal obligations</td>
      <td>Legal obligation (Art. 6.1.c)</td>
    </tr>
    <tr>
      <td>Responding to support inquiries</td>
      <td>Legitimate interest (Art. 6.1.f)</td>
    </tr>
    <tr>
      <td>Fraud prevention and website security</td>
      <td>Legitimate interest (Art. 6.1.f)</td>
    </tr>
    <tr>
      <td>Sending commercial communications</td>
      <td>Consent (Art. 6.1.a)</td>
    </tr>
    <tr>
      <td>Website analytics (Google Analytics)</td>
      <td>Consent (Art. 6.1.a)</td>
    </tr>
  </tbody>
</table>

<h2>4. Data Sharing and Processors</h2>

<p>We share your personal data only with the following categories of third-party service providers, acting as data processors on our behalf and bound by contractual data protection obligations:</p>

<ul>
  <li><strong>Shopify Inc.</strong> — E-commerce platform (hosting, order processing). Data may be transferred to Canada/USA under adequate safeguards. <a href="https://www.shopify.com/legal/privacy">Shopify Privacy Policy</a>.</li>
  <li><strong>Payment providers</strong> — PayPal, Klarna, Shopify Payments (Stripe). Payment data is processed directly by these providers; we do not have access to your full card details.</li>
  <li><strong>Shipping carriers</strong> — To deliver your order (name, address, phone number shared as necessary).</li>
  <li><strong>Google Analytics</strong> — Website analytics. Only activated with your consent via our cookie banner. <a href="https://policies.google.com/privacy">Google Privacy Policy</a>.</li>
</ul>

<p>We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.</p>

<h2>5. International Data Transfers</h2>

<p>Some of our service providers (Shopify, Google, payment processors) may process data outside the European Economic Area (EEA). These transfers are protected by European Commission adequacy decisions, Standard Contractual Clauses (SCCs), or other approved transfer mechanisms.</p>

<h2>6. Data Retention</h2>

<ul>
  <li><strong>Order data:</strong> Retained for the duration required by Spanish tax and commercial law (minimum 6 years, per Article 30 of the Spanish Commercial Code).</li>
  <li><strong>Support communications:</strong> Retained for the duration of the warranty period plus 1 year.</li>
  <li><strong>Analytics data:</strong> Anonymized and retained for up to 26 months.</li>
  <li><strong>Marketing consent data:</strong> Retained until consent is withdrawn.</li>
</ul>

<h2>7. Cookies</h2>

<p>TeleprompterPAD.com uses cookies — small text files stored on your device — for the following purposes:</p>

<ul>
  <li><strong>Strictly necessary cookies:</strong> Essential for the website to function (shopping cart, session, security). These cannot be disabled and do not require consent.</li>
  <li><strong>Analytics cookies:</strong> Used to understand how visitors interact with our website (Google Analytics). These are <strong>only activated with your explicit consent</strong> via our cookie banner.</li>
  <li><strong>Third-party cookies:</strong> Payment providers and Shopify may set cookies necessary for their services.</li>
</ul>

<p>You can manage or withdraw your cookie consent at any time through the cookie banner or your browser settings. Disabling certain cookies may affect website functionality.</p>

<h2>8. Your Rights</h2>

<p>Under the GDPR and Spanish Organic Law 3/2018 (LOPDGDD), you have the right to:</p>

<ul>
  <li><strong>Access</strong> your personal data.</li>
  <li><strong>Rectify</strong> inaccurate or incomplete data.</li>
  <li><strong>Erase</strong> your data ("right to be forgotten"), subject to legal retention obligations.</li>
  <li><strong>Restrict</strong> processing in certain circumstances.</li>
  <li><strong>Data portability</strong> — receive your data in a structured, machine-readable format.</li>
  <li><strong>Object</strong> to processing based on legitimate interest.</li>
  <li><strong>Withdraw consent</strong> at any time (without affecting the lawfulness of prior processing).</li>
</ul>

<p>To exercise any of these rights, contact us at <a href="https://www.teleprompterpad.com/contact">teleprompterpad.com/contact</a>. We may request additional information to verify your identity where reasonably required. We will respond within 30 days.</p>

<p>You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): <a href="https://www.aepd.es">www.aepd.es</a>.</p>

<h2>9. Security</h2>

<p>We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Payment transactions are encrypted using SSL/TLS technology. Payment card data is processed exclusively by PCI-DSS compliant payment providers.</p>

<h2>10. Changes to This Policy</h2>

<p>We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated revision date. Continued use of the website after changes constitutes acceptance of the revised policy.</p>