Privacy policy

Controller

• Controller: Milenia Sarai Escobar Guevara
• NIF/NIE: 60519865B
• Business address: Calle Rectoría 12, local 4, 08980 Sant Feliu de Llobregat.
• Email for privacy and rights requests: info@cielebrunch.com

Data we process

• Contact data submitted through forms: name, email, phone if provided, enquiry reason and message.
• Order data: name, email, phone, selected products, amount, payment method and Stripe reference.
• Basic technical browsing data required for security, cart functionality, admin session and abuse prevention.

Purposes

• Replying to enquiries, bookings, collaborations or questions about allergens and orders.
• Managing click & collect orders, confirmations, incidents, refunds and related communications.
• Complying with legal, accounting and tax obligations arising from a purchase.
• Maintaining the security of the website and admin panel.

Legal basis

• Consent: contact forms and communications requested by the user.
• Contract performance: management of click & collect orders and payments.
• Legal obligation: retention of purchase receipts and accounting documentation.
• Legitimate interest: security, fraud prevention and technical maintenance of the service.

Recipients and providers

To provide the service we use technology providers such as Stripe for payments, Resend for transactional emails and Vercel for hosting. These providers may process necessary data under their own safeguards and processing agreements.

We do not sell your data or transfer it to third parties for third-party advertising.

Retention

Contact messages are kept for the time needed to respond and reasonably follow up on the enquiry. Order data is kept for the legal periods applicable to invoicing, accounting and defence of claims.

Your rights

You can request access, rectification, erasure, objection, restriction and portability by writing to info@cielebrunch.com. If you believe the processing is not appropriate, you may contact the Spanish Data Protection Agency.