Privacy policy

Last updated: 29 October 2026

IAIOS operates the online shop iaios.com and related services (the "Services"), powered by Shopify. This Privacy Policy explains what personal data we collect when you visit the website, make a purchase or communicate with us, what we use it for, who we share it with and what rights you have. Please read it carefully. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy prevails in everything relating to your personal data.

Data controller

The controller of your data is IAIOS (Amadeu Barbany, NIF 77085596S), with registered address at Carrer Santa Esperança, 7, 08401 Granollers (Barcelona), Spain. You can contact us about any privacy matter at admin@iaios.com.

Personal data we collect

"Personal data" means any information that identifies you or can reasonably be linked to you. Depending on how you use the Services, we may process:

  • Contact details: name, billing and shipping address, phone number and email address.
  • Payment data: payment method, payment confirmation and transaction details. Your full card details are processed directly by our payment providers (Shopify Payments, PayPal, Klarna, Bizum); we do not store them.
  • Account data: username, password, preferences and language.
  • Purchase data: products you view, add to your basket, buy, exchange or return, and your order history.
  • Communications: what you write to us when you contact customer service, and your reviews or comments.
  • Device and usage data: IP address, browser, device, network connection and how you browse the website, collected through cookies and similar technologies.

Where we get your data from

  • Directly from you, when you create an account, make a purchase, subscribe to our newsletter or write to us.
  • Automatically, from your device, when you browse the website (cookies and similar technologies).
  • From our service providers, when they process data on our behalf (platform, payments, logistics, email).

What we use your data for and on what legal basis

  • To provide the Services and manage your purchase (performance of a contract): processing payment, preparing and shipping your order, handling exchanges, returns and guarantee claims, maintaining your account and sending you notifications about your order.
  • To assist you (performance of a contract and legitimate interest): answering your queries and maintaining our relationship with you.
  • Marketing (consent, or legitimate interest if you are already a customer, with the option to object at any time): sending you our newsletter and emails about new products and offers, and showing you personalised advertising on the website or on other platforms based on your activity. You can unsubscribe at any time using the link at the bottom of each email.
  • Security and fraud prevention (legitimate interest and legal obligation): authenticating your account, providing secure payment and detecting fraudulent or malicious activity.
  • Improving the Services (legitimate interest): analysing how the website is used in order to improve it and personalise your experience, for example by recommending products to you.
  • Legal obligations (legal obligation): invoicing, accounting, tax obligations and responding to requests from the authorities.

Who we share your data with

We do not sell your data. We only share it with those who need it to provide the Services to you:

  • Shopify, which hosts the shop and processes payments (Shopify Payments), and the other payment providers you choose (PayPal, Klarna, Bizum).
  • Logistics and shipping: our logistics centre and carriers (Nacex, UPS, GLS) to prepare and deliver your order, and the returns portal to handle exchanges and returns.
  • Communications: our email marketing platform (Klaviyo) to send you our newsletter and notifications.
  • Analytics and advertising: web analytics tools and advertising platforms, which use your data in accordance with their own privacy policies. You can manage this in the cookie settings.
  • When you request it or consent to it, for example when using social media integrations.
  • Authorities and third parties when required by law, in legal proceedings, or to protect our rights and those of our users; and in the event of a corporate transaction (merger, sale), subject to the legal safeguards.

Our relationship with Shopify

Shopify hosts the Services and processes data about your access to and use of the shop in order to provide and improve them. In addition, we use Shopify features that combine data from your interactions with our shop with data from other merchants that use Shopify, for example to prevent fraud or personalise the shopping experience; in those cases Shopify is the controller. You can read the Shopify Consumer Privacy Policy and exercise your rights with Shopify at privacy.shopify.com.

Cookies

We use cookies and similar technologies to make the website work, remember your preferences (language, basket), analyse usage and show you personalised advertising. Non-essential cookies are only set with your consent, which you can give, refuse or change at any time via the cookie banner or your browser settings. You will find the details in our cookie policy and at shopify.com/legal/cookies. We recognise the Global Privacy Control (GPC) signal as a request not to share your data for targeted advertising on that browser.

Links to third-party sites

The website may contain links to third-party sites or platforms (social media, returns portal). We do not control and are not responsible for their privacy practices; please review their policies before using them.

Children

The Services are not directed at minors and we do not knowingly collect data from children under 14. If you are the parent or guardian of a minor who has provided us with their data, email us and we will delete it.

Security and retention

We apply technical and organisational measures to protect your data, although no measure is infallible; we recommend that you do not send us sensitive information through insecure channels. We keep your data for as long as you have an account or a relationship with us and, after that, for the periods required by law (for example, billing data for the tax and accounting limitation period). Marketing data is kept until you unsubscribe or object.

International transfers

Some of our providers (such as Shopify or Klaviyo) may process data outside the European Economic Area. In that case we rely on adequacy decisions of the European Commission or on standard contractual clauses that guarantee an equivalent level of protection.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given us (without affecting the lawfulness of processing carried out before). You can also object to receiving marketing communications and personalised advertising. To exercise these rights, email us at admin@iaios.com stating which right you wish to exercise; we may ask you to verify your identity. We will respond within one month at the latest. We will not discriminate against you for exercising your rights.

If you believe we have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the supervisory authority of your EEA country.

Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or for legal reasons. We will publish the revised version on this page with its update date and, if the change is significant, we will notify you as required by law.

Contact

For any questions about this policy or to exercise your rights, email us at admin@iaios.com or write to IAIOS, Carrer Santa Esperança, 7, 08401 Granollers (Barcelona), Spain.