Privacy policy

Who is responsible

The data controller is Merlin Miller (NIF E3015499), Gijón, Asturias, Spain. You can contact us about your data at [email protected].

What we collect

Reservation form: your email address, the design, line, garment and size you chose, an optional discount code, the date and time of the reservation and a random session identifier.

Browsing interest: which designs you view, which sizes you select and when you press Reserve. These events carry only a random session identifier that lives in your browser until you close the tab; they do not contain your email unless you registered.

Technical logs: our hosting provider records connection data (such as IP address and request time) to operate and protect the service.

Google Analytics: only if you accept it in the banner, Google collects usage statistics (pages viewed, approximate location, device) through cookies. Nothing from Google runs before you accept.

Why and on what legal basis

To hold your reservation and tell you when your piece is ready — based on your consent (the checkbox in the form).

To measure interest in each design, size and price before production — based on our legitimate interest in validating demand, using pseudonymous data.

To understand how the site is used — based on your consent given in the analytics banner.

We do not sell your data, use it for advertising or take automated decisions about you.

How long we keep it

Reservations are kept until your piece is offered to you and for 12 months after that, or until you ask us to remove you, whichever comes first. Interest events are kept in pseudonymous form for the duration of the validation project. Google Analytics data follows the retention configured in our analytics property; we do not enable advertising features.

Who has access

Providers that process data on our behalf under contract: DigitalOcean (hosting), MongoDB Atlas (database) and, only if you accept analytics, Google Ireland Ltd. (Google Analytics). Some of these providers may transfer data outside the European Economic Area under the European Commission's standard contractual clauses or an adequacy decision.

Your rights

You can ask for access, rectification, erasure, restriction, portability and object to processing, and you can withdraw your consent at any time by writing to [email protected]. To cancel a reservation or stop receiving emails, send us a message from the registered address and we will remove you. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

This site is not directed at people under 14 years of age.

Cookies and local storage

Before you accept analytics, this site sets no cookies. It stores two technical values in your browser: a random session identifier in sessionStorage (removed when you close the tab) and, once you choose, your analytics decision in localStorage so we do not ask again.

If you accept analytics, Google Analytics sets its own cookies (_ga and _ga_*, up to 2 years) to distinguish visitors. You can change your decision below at any time; declining removes nothing already collected by Google but stops further collection on this site.