Privacy Policy
Last updated: January 2025
1. Data Controller
Plan Zeta Tech SL is the data controller responsible for your personal data.
- Company: Plan Zeta Tech SL
- CIF: B72322886
- Address: Av. Ingeniero Jose Luis Prats, 41703 Dos Hermanas, Spain
- Contact: jmacias@qashops.com
2. Data We Collect
2.1 Data you provide
- Purchase information: Name, email address, billing address (collected by Paddle)
- Contact information: Email address when you contact us
2.2 Data collected automatically
- Technical data: IP address, browser type, device information
- Usage data: Pages visited, time spent, referral source
3. How We Use Your Data
We process your data for:
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Processing purchases and delivering products | Contract performance |
| Sending purchase confirmations and receipts | Contract performance |
| Responding to your inquiries | Legitimate interest |
| Improving our website and services | Legitimate interest |
| Complying with legal obligations | Legal obligation |
4. Payment Processing
Purchases are processed by Paddle (Paddle.com Market Limited), who acts as our Merchant of Record. Paddle collects and processes payment information according to their own privacy policy. We do not store your payment card details.
Paddle’s privacy policy: https://www.paddle.com/legal/privacy
5. Data Sharing
We share your data only with:
- Paddle: Payment processing and order fulfillment
- Hosting providers: Website hosting (technical operation only)
We do NOT sell your personal data to third parties.
6. International Transfers
Your data may be transferred outside the EEA only where appropriate safeguards are in place (e.g., Standard Contractual Clauses, adequacy decisions).
7. Data Retention
We retain your data for:
- Purchase records: 6 years (Spanish tax law requirement)
- Contact inquiries: 2 years after last contact
- Technical logs: 90 days
8. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data (“right to be forgotten”)
- Restriction: Limit how we process your data
- Portability: Receive your data in a portable format
- Object: Object to processing based on legitimate interests
- Withdraw consent: Where processing is based on consent
To exercise these rights, contact us at: jmacias@qashops.com
We will respond within 30 days.
9. Cookies
Our website uses essential cookies for basic functionality. We do not use tracking or advertising cookies without your consent.
For analytics, we use privacy-friendly solutions that do not require cookie consent under GDPR.
10. Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- HTTPS encryption
- Secure payment processing via Paddle
- Limited access to personal data
11. Children’s Privacy
Our products are not directed at children under 16. We do not knowingly collect data from children.
12. Complaints
If you believe we have violated your data protection rights, you may lodge a complaint with the Spanish Data Protection Authority (AEPD):
- Website: https://www.aepd.es
- Address: C/ Jorge Juan, 6, 28001 Madrid, Spain
13. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated revision date.
14. Contact
For privacy-related questions:
- Email: jmacias@qashops.com
- Address: Av. Ingeniero Jose Luis Prats, 41703 Dos Hermanas, Spain