Privacy Policy

Last Updated: 31 January 2026

This Privacy Policy explains how Whisperal (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit or make a purchase from https://whisperal.com (the “Website”).

We process personal data in accordance with:

EU General Data Protection Regulation (GDPR) 2016/679
Spanish Organic Law 3/2018 on Data Protection (LOPDGDD)
Spanish Law on Information Society Services (LSSI-CE)

1. Data Controller

Whisperal — Sole Trader (Autónomo)
Owner: Goda Koriznaitė
Self-employed sole trader registered in Spain (autónomo)
Trading as “Whisperal”
NIF: Y5277542E
Address: Calle Lajial 1, 12, Puerto Santiago
38683 Santiago del Teide, Tenerife, Spain
Phone: +34 674 105 791
Email: info@whisperal.com

2. Personal Data We Collect

We may collect the following categories of personal data:

Information you provide directly

Name and surname
Billing and shipping address
Email address
Phone number
Payment details (processed by secure providers)
Account login details (if applicable)
Messages sent via contact forms or email

Information collected automatically

When you browse the Website:

IP address
Device type and browser information
Operating system
Pages visited and interaction data
Referring website
Cookies and tracking technologies

3. Payment Information

Payments are processed by secure third-party providers such as Stripe, PayPal, Apple Pay, or similar services.

We do not store full credit card details on our servers.

These providers process your data according to their own privacy policies.

4. Purposes of Processing

We process personal data for the following purposes:

To process and fulfill orders
To deliver products and services
To communicate about orders and inquiries
To manage customer accounts
To comply with legal obligations
To prevent fraud and ensure security
To improve Website performance and user experience
To send marketing communications (only with consent)

5. Legal Basis for Processing

Under GDPR, we rely on the following legal bases:

Performance of a contract — processing orders and deliveries
Legal obligation — accounting, tax compliance
Legitimate interest — fraud prevention, service improvement
Consent — marketing communications and non-essential cookies

6. Data Retention

We retain personal data only as long as necessary:

Order data — as required by tax and accounting laws (typically up to 6 years in Spain)
Customer service communications — as needed to resolve inquiries
Marketing data — until consent is withdrawn
Technical data — according to cookie retention periods

7. Sharing of Personal Data

We may share your data with trusted third parties when necessary:

Payment processors
Shipping and logistics providers
IT and hosting providers
Accounting or legal services
Authorities when required by law

All processors are bound by confidentiality and data protection obligations.

8. International Transfers

If personal data is transferred outside the European Economic Area (EEA), appropriate safeguards will be applied, such as:

European Commission adequacy decisions
Standard Contractual Clauses (SCCs)
Equivalent protective measures

9. Cookies and Tracking Technologies

The Website uses cookies and similar technologies to ensure functionality, analyze usage, and improve services.

Non-essential cookies are used only with your consent.

For detailed information, please see our Cookies Policy.

10. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time
Right not to be subject to automated decision-making

To exercise your rights, contact: info@whisperal.com

11. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you may lodge a complaint with:

Spanish Data Protection Authority (AEPD)
Website: https://www.aepd.es

You may also contact the supervisory authority in your country of residence within the EU.

12. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.

However, no method of transmission over the Internet is completely secure.

13. Third-Party Links

The Website may contain links to third-party websites. We are not responsible for their privacy practices.

14. Children’s Data

The Website is not intended for children under 16 years of age. We do not knowingly collect personal data from children.

15. Marketing Communications

You will receive marketing emails only if you have given explicit consent or where permitted by law.

You can unsubscribe at any time using the link in the email or by contacting us.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with the updated date.

17. Contact

If you have questions about this Privacy Policy or how your data is handled, please contact:

Email: info@whisperal.com
Phone: +34 674 105 791
Address: Calle Lajial 1, 12, Puerto Santiago, 38683 Santiago del Teide, Tenerife, Spain