In short
ShopMythos uses your data to process and ship your orders. Stripe handles payment and our dropshipping suppliers handle shipping, receiving your address. We only personalize the catalogue from your browsing if you accept cookies.
01Controller
The data controller is Lur Apps. You can contact us about any privacy matter at soporte.lur.apps@gmail.com.
02What data we process
- Account: name, email and password (stored hashed).
- Orders: products, shipping and billing addresses, phone and purchase history.
- Language and approximate country (from your connection) to show suitable prices and text.
- With your consent: the products you view and interact with in the store.
- Your cart, stored in your browser.
- Your IP address, to protect the store from abuse.
03What we use it for
- Process, charge and ship your orders and handle returns.
- Send you account verification and order status emails.
- Personalize the catalogue, only if you accept.
- Meet tax and commercial obligations.
04Where it is stored
In the store's database (PostgreSQL) under our control. Personalization browsing data expires after 30 days.
05Third-party services
| Service | What it receives and why |
|---|---|
| Stripe | Processes payment. Your card details go straight to Stripe; we never see or store them. |
| Printful, Spocket, CJ Dropshipping, AliExpress | Depending on the product, the supplier receives your name, shipping address, phone and items to prepare and ship the order. Some are outside the EU (USA, China). |
| Resend, SendGrid | Delivery of transactional emails. |
06Device permissions
None.
07Retention and deletion
Account data is kept while you have an account. Orders and invoices are kept for the periods required by law (generally 6 years in Spain). You can ask us to delete your account at any time.
08Children
You must be 18 or older to buy.
09Other notes
- Cookies: vx_sid (session, essential), vx_auth_token (sign-in, essential) and vx_consent (stores your choice). Browsing-based personalization is only enabled if you accept in the banner; you can change your mind by clearing cookies.
- When a supplier is outside the EU, the transfer is necessary to perform the purchase contract you have made.
10Your rights
- You can ask us to access, correct or delete your data, object to or restrict its processing, and request its portability.
- Where processing is based on your consent, you can withdraw it at any time without affecting prior processing.
- We only process data on a legal basis: providing the service you request, your consent, a legal obligation or our legitimate interest in keeping the service secure.
- If you believe we have mishandled your data, you can complain to the Spanish Data Protection Agency (aepd.es) or your local authority.
To exercise your rights, email us at soporte.lur.apps@gmail.com from the address linked to your account, if you have one. We reply within one month.
11Security
We use encrypted connections (HTTPS) for all communication with our servers, restrict access to data and store passwords hashed. We never sell your data or share it with third parties other than the providers listed, who only use it to provide their service to us.
12Changes to this policy
If we change how an app handles data, we will update its policy and revision date. If the change is significant, we will let you know in the app.