Privacy policy

Last updated: July 2, 2026

1. Data controller

Trade name: Petecoart
Owner: Óscar Cardona Riera
NIF/CIF: 41460379G
Registered address: Carrer de Floridablanca 68, 08015 Barcelona, Spain
Contact email: [email protected]
Website: https://petecoart.com

2. Data we process

We process the following personal data when you interact with us:

Contact details: name, surname, email, telephone number.
Shipping and billing address.
Payment details: processed directly through our gateways (Stripe, PayPal, Bizum). We do not store card numbers on our servers.
Photos of your pet that you send us for the creation of the personalized portrait.
Order history and communications with customer service.
Navigation data (IP, browser, pages visited) through cookies — see Cookie policy.

3. Purposes

We use your data to:

Manage and ship your order.
Create your pet's personalized portrait.
Send you the preview of the design and answer questions.
Billing and compliance with tax obligations.
After-sales service, returns and complaints.
Send you commercial communications only if you have given your express consent (newsletter, offers). You can unsubscribe at any time.

4. Legal basis

Contract execution: to process your order and deliver it to you.
Legal obligation: for billing, accounting and taxes.
Consent: for newsletter, marketing cookies and promotional communications.
Legitimate interest: for anonymized statistical analysis of web use.

5. Conservation period

Order and billing information: 6 years (tax obligation in Spain).
Pet Photos: Up 1 year after delivery, unless you request removal beforehand.
Data for newsletter: until you withdraw your consent.

6. Recipients

We share data only with the providers strictly necessary to provide you with the service:

Payment providers: Stripe, PayPal, Bizum.
Companys de mensajería for shipping the product.
Print on demand provider (receive only the data essential to manufacture and send the order).
Transactional email services to send you the order confirmation and preview.
Google Analytics / Microsoft Clarity (anonymized statistics, opt-in via cookie banner).

We do not sell or transfer your data to third parties for commercial purposes.

7. International transfers

Some of our providers (Google, Stripe) may process data outside the European Economic Area. In these cases, they do so under the standard contractual clauses approved by the European Commission, which guarantee a level of protection equivalent to the GDPR.

8. Your rights

You have the right to:

Access: know what data of yours we process.
Rectification: correct inaccurate data.
Suppression: delete your data when it is no longer necessary.
Opposition: object to the treatment for legitimate reasons.
Limitation: restrict treatment in certain cases.
Portability: receive your data in a structured format.
Withdraw consent at any time without affecting the legality of the prior treatment.

To exercise these rights, write to us at [email protected] indicating the right you want to exercise and attaching a copy of your ID or equivalent document.

You can also file a claim with the Spanish Data Protection Agency (www.aepd.es).

9. Security

We apply reasonable technical and organizational measures to protect your data: HTTPS encryption throughout the website, restricted access to the management panel, regular backups and suppliers with security certifications (PCI-DSS for payments).

10. Minors

Petecoart is not aimed at children under 14 years of age. If we detect that we have received data from a minor without parental authorization, we will delete it.

11. Changes to this policy

We may update this policy to reflect changes in the law or our services. We will always publish the latest version on this page with the update date indicated above.