Privacy policy

PRIVACY POLICY MAKE.HEAD

Effective Date: May 27, 2026

This Privacy Policy describes how MAKE.HEAD collects, uses, stores, and protects the personal data of users of the MAKE.HEAD online store.

1. Data Controller

MAKE.HEAD SL
VAT Number: ESB22819098
Registered Address: Paseo Taulat, Num 283, Puerta 3, Planta 14, 08019 Barcelona, Spain Email: info@makehead.eu
Website: www.makehead.eu

2. Applicable Laws and Data Processing Principles MAKE.HEAD processes personal data in accordance with:

  •  the General Data Protection Regulation (GDPR);

  •  European Union data protection laws;

  •  Spanish personal data protection laws;

  •  consumer protection and e-commerce legislation.

    We adhere to the principles of lawfulness, transparency, data minimization, purpose limitation, accuracy, storage limitation, confidentiality, and security.

3. What Data We Collect 3.1. Data Provided by the User

  •  first and last name;

  •  email address;

  •  phone number;

  •  shipping and billing address;

  •  payment information;

  •  account information;

  •  order history;

  •  messages and inquiries;

  •  reviews and comments;

  •  information related to promotions and loyalty programs.

3.2. Automatically Collected Data

  •   IP address;

  •   browser type;

  •   operating system;

  •   device type;

  •   browser language;

  •   date and time of visit;

  •   referral source;

  •   user activity on the website;

  •   cookies;

  •   technical logs and analytics data.


4. Purposes of Data Processing

Personal data may be processed for the following purposes:

  •   account registration and maintenance;

  •   order processing and delivery;

  •   payment processing;

  •   communication with users;

  •   customer support;

  •   returns and complaint handling;

  •   website improvement;

  •   user behavior analytics;

  •   fraud prevention;

  •   website security;

  •   compliance with legal obligations;

  •   marketing communications where consent has been provided.

5. Legal Bases for Data Processing

Data Category

Purpose of Processing

Legal Basis

Order data

Order fulfillment and delivery

Performance of a contract

Payment data

Payment processing and anti-fraud measures

Performance of a contract / legitimate interest

Marketing email data

Marketing and brand news

Consent

Analytics data

Website analytics and service improvement

Consent / legitimate interest

Fraud prevention data

Payment and website security

Legitimate interest

Accounting and tax data

Tax and accounting compliance

Legal obligation

 

6. Cookies and Similar Technologies 

MAKE.HEAD uses cookies and similar technologies for website functionality, authorization, preference storage, analytics, marketing, advertising, and content personalization.

We use:

  •   essential cookies;

  •   analytics cookies;

  •   functional cookies;

  •   marketing cookies;

  •   third-party cookies.

    Upon the first visit to the website, users may accept all cookies, reject non-essential cookies, or customize cookie preferences.

 

7. Third-Party Services and Data Processors MAKE.HEAD may use the following third-party services:

  •   Stripe;

  •   PayPal;

  •   Apple Pay;

  •   payment and banking providers for card payments;

  •   Google Analytics;

  •   Meta Pixel;

  •   Google advertising technologies;

  •   email marketing and newsletter tools;

  •   UPS, DHL, Correos, FedEx, and selected logistics partners;

  •   cloud hosting and IT contractors.

    These services may process personal data in accordance with their own privacy policies and data processing agreements.

8. Data Sharing
Personal data may be shared with:

  •   payment providers;

  •   delivery services;

  •   IT contractors;

  •   marketing and analytics services;

  •   legal and accounting advisors;

  •   governmental authorities where legally required. MAKE.HEAD does not sell users’ personal data to third parties.

9. International Data Transfers

Some service providers may be located outside the European Economic Area (EEA). In such cases, MAKE.HEAD uses GDPR-compliant safeguards, including Standard Contractual Clauses (SCCs) and other recognized data protection mechanisms.

10. Data Retention Periods

  •   order data — up to 7 years;

  •   account data — while the account remains active;

  •   marketing consents — until consent is withdrawn;

  •  analytics cookies — up to 14 months unless otherwise specified;

  •  customer support requests — up to 3 years.

After the retention period expires, data is deleted or anonymized.

11. Data Security
MAKE.HEAD implements appropriate security measures, including:

  •   SSL encryption;

  •   restricted data access;

  •   secure servers;

  •   data backups;

  •   security monitoring;

  •   internal security procedures.

    Despite these measures, no method of internet transmission can be guaranteed to be completely secure.

     

12. User Rights have the right to:

  •   obtain information about data processing;

  •   request access to their data;

  •   correct inaccurate data;

  •   request deletion of data;

  •   restrict processing;

  •   object to processing;

  •   request data portability;

  •   withdraw consent;

  •   unsubscribe from marketing communications;

  •   file a complaint with a supervisory authority.

    Requests may be submitted to: info@makehead.eu Response time for requests: up to 30 calendar days.

13. Marketing Communications

Marketing communications are sent only where the user has provided consent or where otherwise permitted by law. Users may unsubscribe from marketing communications at any time.

14. Accounts and Security

Users are responsible for maintaining the confidentiality of their passwords, the security of their accounts, and all activities carried out through their accounts. In the event of suspected unauthorized access, users must notify MAKE.HEAD immediately.

15. Children’s Data

The MAKE.HEAD website is not intended for individuals under the age of 16. MAKE.HEAD does not knowingly collect personal data from minors without parental or legal guardian consent.

16. Changes to This Policy

MAKE.HEAD may update this Privacy Policy from time to time. The latest version will always be published on the MAKE.HEAD website.

17. Contact Information

MAKE.HEAD SL
VAT Number: ESB22819098
Registered Address: Paseo Taulat, Num 283, Puerta 3, Planta 14, 08019 Barcelona, Spain Email: info@makehead.eu
Website: www.makehead.eu