Privacy Policy

Last updated: 12 January 2026

1. Who we are

This website, popplyrankshlf.beauty, is operated by Popplyrankshlf Marine Media S.L., company number (CIF) B57493218, with its registered address at Carrer de Sant Miquel 14, 2º, 07002 Palma, Illes Balears, Spain. We are the data controller for personal data processed through this website. You can reach us at [email protected].

2. Data we collect

We keep data collection to a minimum. We process:

  • Information you give us through the contact form: your name, email address, the region and budget band you are interested in, and the content of your message.
  • Technical data recorded automatically by our hosting infrastructure, such as IP address, browser type, device type, pages requested and timestamps, used for security and to keep the site running.
  • Consent and preference data stored in your browser's local storage, recording your cookie choices.

We do not knowingly collect special-category data and ask you not to include it in messages.

3. How and why we use your data

  • To reply to enquiries — based on your request and our legitimate interest in responding (GDPR Article 6(1)(b) and (f)).
  • To secure and maintain the website — based on our legitimate interest (Article 6(1)(f)).
  • To measure how the site is used, only if you consent to analytics (Article 6(1)(a)).
  • To comply with legal obligations such as tax and accounting rules (Article 6(1)(c)).

We do not sell your personal data and do not use it for automated decision-making that produces legal effects.

4. Cookies and similar technologies

We use essential storage to remember your consent choice. Analytics and functional storage are used only if you allow them. Full details, including a table of each item, are in our Cookie Policy. You can change your choice at any time using the "Cookie settings" link in the footer.

5. Third-party processors

We share data only with service providers who process it on our behalf under written agreements:

  • Web hosting provider — stores website files and server logs.
  • Email service provider — delivers and stores correspondence sent through the contact form or by email.
  • Picsum Photos (picsum.photos) — serves illustrative images; your browser sends your IP address to this service when images load.
  • Professional advisers — accountants and lawyers, where necessary.

Where a provider processes data outside the European Economic Area, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses.

6. Retention

  • Contact enquiries: up to 24 months after our last exchange, unless a longer period is legally required.
  • Server logs: up to 30 days.
  • Consent records in your browser: until you clear them; we ask you to review your choice every 12 months.

7. Your rights under GDPR

If you are in the EEA or UK, you have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with a supervisory authority — in Spain, the Agencia Española de Protección de Datos (aepd.es).

8. Your rights under the CCPA/CPRA

If you are a California resident, you have the right to know what personal information we collect and how it is used, to request deletion and correction, and to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.

9. Security

We use encrypted connections (HTTPS), access controls and reputable providers to protect personal data. No online transmission is entirely secure, so please avoid sending sensitive information through the contact form.

10. Children

This website is intended for adults. We do not knowingly collect data from anyone under 16.

11. Data protection contact

For any privacy request or question, contact our Data Protection Officer at [email protected] or by post at our registered address, marked "Data Protection Officer". We aim to respond within one month.

12. Changes to this policy

We may update this policy to reflect changes in law or in how we operate. The date at the top shows when it was last revised.