Privacy policy

Last updated: 10 October 2026

Courtesy translation. The Spanish version is the legally binding text.

1. Data controller

Controller: Sevillana de Fragancias y Perfumes, S.L. (trade name Amor&Psique)

Tax ID (NIF): B21774724

Registered office: Avda. República Argentina, 13, 8.º C, 41011 Seville, Spain

Email: info@amorpsique.com

Telephone: +34 641 79 34 58

2. Data processed and source

We may process identification and contact data, billing and delivery data, order and payment information, enquiries and communications, and technical browsing data obtained through cookies. Data is obtained directly from the data subject, from their use of the Website or from the providers involved in payment, delivery or the operation of the store. Mandatory data will be identified in the forms; if it is not provided, we may be unable to handle the request or process the order.

3. Purposes and legal bases

We process data for the following purposes:

Purpose	Legal basis
Managing the order, payment, delivery, invoicing and returns.	Performance of the contract.
Handling enquiries and complaints.	Pre-contractual measures, performance of the contract or legitimate interest, as applicable.
Complying with accounting, tax and consumer obligations.	Legal obligation.
Sending newsletters and news.	Consent; for customers and similar own products, where the legal requirements are met.
Preventing fraud and protecting the Website.	Amor&Psique's legitimate interest in preventing fraudulent use, protecting the security of the Website and defending its rights, after weighing against the data subject's rights.
Analysing browsing and personalising advertising through non-necessary cookies.	Consent.

4. Recipients and providers

We may disclose the necessary data to the following recipients and providers: Shopify (e-commerce platform and store hosting), Shopify Payments, Apple Pay and Google Pay (payment gateway and payment methods), Correos for delivery, Shopify Email (sending order emails and communications) and our tax and accounting advisers.

Providers acting as processors do so under contract. Some entities, such as certain payment gateways, Correos or Public Administrations, may act as independent controllers where applicable. We do not sell personal data. We may also disclose it where there is a legal obligation.

5. International transfers

Some providers of the e-commerce and payment platform may process data outside the European Economic Area, for example in Canada or the United States. These transfers are carried out with the safeguards provided in the GDPR, such as European Commission adequacy decisions or standard contractual clauses. You can request information about those safeguards by writing to info@amorpsique.com.

6. Retention

We will keep order, billing and customer service data for as long as necessary to manage the relationship and, afterwards, blocked for the applicable legal retention and limitation periods. Data used for commercial communications will be kept until the data subject withdraws consent or objects, depending on the legal basis used.

7. Rights

You may request access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent where processing is based on it, by writing to info@amorpsique.com or to the postal address indicated. We will reply within the legal period, normally one month. You may also lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.

8. Commercial communications

The newsletter will only be sent with consent where necessary. If a person is already a customer, we may send them communications about our own products similar to those purchased where the legal requirements are met; they may object free of charge when their data is collected and in every message. Unsubscribing does not affect communications necessary to manage orders or handle requests.

9. Minors

The store is aimed at adults. If we become aware that data of a minor has been collected without the necessary authorisation, we will take appropriate steps to delete it.

10. Security

We apply technical and organisational measures appropriate to the risk to protect data against loss, alteration, and unauthorised access or use. The Website uses an encrypted HTTPS connection.

11. Changes

We may update this policy to reflect changes in processing or in the regulations. The current version will be available on the Website.