Privacy policy

Last updated: May 10, 2026

1. Data Controller

  • Owner: Javier José Guzmán Rubio
  • Tax ID: 09246617L
  • Registered address: Perales de Tajuña, 28806 Alcalá de Henares, Madrid
  • Email: namlight.contact@gmail.com
  • Website: https://namlight.com
  • Trade name: Namlight

2. Purpose of processing

At Namlight, we process the personal data you provide us for the following purposes:

  • Order management: processing, shipping, and delivering your purchases.
  • Customer service: responding to your inquiries, returns, and complaints.
  • Commercial communications: sending you newsletters, offers, and news (only with your express consent).
  • Legal compliance: invoicing, accounting, and tax obligations.
  • Service improvement: website usage analysis through cookies.

3. Lawful basis

  • Performance of the sales contract (Art. 6.1.b GDPR).
  • Express consent for newsletters (Art. 6.1.a GDPR).
  • Compliance with legal obligations (Art. 6.1.c GDPR).
  • Legitimate interest for analysis and service improvement (Art. 6.1.f GDPR).

4. Data Retention

Data will be retained for the time necessary to fulfill the purpose for which it was collected and to determine any potential liabilities. Accounting and tax data: 6 years (Commercial Code).

5. Recipients

Your data may be communicated to:

  • Payment gateway: Shopify Payments (Stripe), PayPal.
  • Shipping and logistics companies for order delivery.
  • Technology providers (Shopify, Google Analytics, Meta).
  • Tax administration when legally required.

International transfers: some providers are located outside the EEA (USA, China). We apply appropriate safeguards (EU standard contractual clauses).

6. Rights

You can exercise the following rights at any time by sending an email to hola@namlight.com:

  • Access, rectification, erasure, opposition.
  • Restriction of processing, data portability.
  • Withdrawal of consent.
  • Complaint to the AEPD: www.aepd.es

7. Security

We apply appropriate technical and organizational measures to ensure the security of your data. The website uses an SSL certificate.

8. Minors

We do not intentionally collect data from children under 14 years of age. If we detect a case, we will delete the data immediately.