Legal terms

Privacy notice

Last updated: July 2026

In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Ley Orgánica 3/2018 (LOPDGDD), we inform you of how we process your personal data when you visit indiewatch.es or make a purchase.

1 · Data controller

Controller
VELVETDREAMS, S.L. (Indie Watch)
Tax ID (CIF)
ESB22652481
Address
Cr. Andalucía, 0 · 28300 Aranjuez (Madrid), España

2 · Data we process

  • Order data: first and last name, shipping and billing address, email address, phone number and, if you provide it, tax ID (NIF).
  • Payment data: processed directly by our payment gateways (Stripe and PayPal). Your card number never passes through our servers and is never stored on them.
  • Newsletter: email address, only if you subscribe voluntarily.

3 · Purposes and legal basis

  • Managing your orders, shipping, invoicing and warranty (performance of the contract).
  • Handling your enquiries and requests (legitimate interest or pre-contractual measures).
  • Sending you commercial communications if you have subscribed (consent, revocable at any time).
  • Complying with legal, tax and accounting obligations (legal obligation).

4 · Recipients

We share your data only with the providers essential to delivering the service, who act as processors or joint controllers:

  • Stripe (card and Klarna payments) and PayPal: secure payment processing.
  • Google (Places): address suggestions as you type in the shipping form; only the text you type is sent.
  • Shipping carriers: name, address and phone number for delivering your order.

Some of these providers may transfer data outside the European Economic Area under standard contractual clauses or other valid GDPR mechanisms. We do not sell or transfer your data to third parties for commercial purposes.

5 · Retention

Order data is retained for the periods required by commercial and tax regulations. Newsletter data, until you withdraw your consent. Enquiry data, for as long as necessary to handle your request.

6 · Your rights

You may at any time exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to [email protected] or by post to Cr. Andalucía, 0 · 28300 Aranjuez (Madrid), España.

If you believe your rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.