Privacy Policy
Last updated: 19/07/2026
This Privacy Policy explains how ILESO DESIGN collects, uses and protects personal data when you visit this website, contact us, place an order or make a donation.
1. Who is responsible for your data
The data controller is:
DIEGO DE LA MAZA
Trading as: ILESO DESIGN
Address: NOT YET PHYSICAL
Tax ID: 51549286F
Email: ILESODESIGNSTUDIO@GMAIL.COM
2. What personal data we collect
Depending on how you use the website, we may collect:
- Contact details, such as your name, email address and message, when you contact us.
- Order details, such as your name, billing address, shipping address, email, phone number, purchased products and order history.
- Payment-related information processed through our payment providers. We do not directly store full card details.
- Shipping information needed to prepare and deliver orders.
- Donation information, if you choose to make a contribution.
- Technical and usage data, such as IP address, device information, browser type, pages visited and cookie preferences.
3. Why we use your data
We use your personal data for the following purposes:
- To answer messages and customer enquiries.
- To process, prepare, package and ship orders.
- To manage payments, invoices, refunds and customer service.
- To comply with legal, tax and accounting obligations.
- To maintain the security and correct functioning of the website.
- To improve the website and understand how visitors use it.
- To send marketing communications only when you have given consent or where legally permitted.
4. Legal basis
We process your data on the following legal bases:
- Performance of a contract, when you place an order.
- Legal obligation, for tax, accounting and consumer-law requirements.
- Consent, for optional marketing communications and non-essential cookies.
- Legitimate interest, for website security, fraud prevention, basic business administration and responding to enquiries.
5. Service providers and third parties
We may share data with trusted service providers when necessary to operate the website and fulfil orders, including:
- Squarespace, which hosts and powers this website.
- Payment processors used to process transactions.
- Shipping and fulfilment providers used to deliver orders.
- Email, analytics, accounting and business administration tools.
- Public authorities, if required by law.
These providers may process personal data only as needed to provide their services or comply with legal obligations.
6. International transfers
Some service providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards, such as standard contractual clauses or equivalent legal mechanisms.
7. Cookies
This website uses cookies and similar technologies. Some cookies are necessary for the website to work. Others may be used for analytics, preferences or marketing only where allowed by your cookie settings.
You can manage your cookie preferences through the cookie banner or your browser settings.
8. How long we keep your data
We keep personal data only for as long as necessary for the purpose for which it was collected.
- Order, invoice and tax-related data may be kept for the legally required period.
- Contact messages are kept for as long as needed to answer and manage the enquiry.
- Marketing data is kept until you unsubscribe or withdraw consent.
- Technical and cookie data is kept according to the relevant cookie settings and provider retention periods.
9. Your rights
You have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to processing, data portability and withdrawal of consent where processing is based on consent.
To exercise your rights, contact us at:
You also have the right to lodge a complaint with the Spanish Data Protection Agency, Agencia Española de Protección de Datos.
10. Security
We take reasonable technical and organisational measures to protect personal data. However, no online system can be guaranteed to be completely secure.
11. Minors
This website is not intended for children under 14 years old. We do not knowingly collect personal data from children.
12. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page.