Privacy Policy – APLIKE LUMINARIAS

‌Effective Date: October 6, 2026‌

Welcome to www.aplikeluminarias.com, operated by APLIKE LUMINARIAS DE BAÑO, S.L. (“we”, “us”, “our”). This Privacy Policy is designed to inform you about how we collect, use, store, disclose, and protect your personal data when you visit our e-commerce website, purchase our products, or interact with our services, in full compliance with applicable Spanish data protection regulations, the EU General Data Protection Regulation (GDPR), and related local legal requirements including Spanish Royal Decree 1055/2022 on packaging and packaging waste and the 7/2022 Act on circular economy, waste and contaminated soil. We design every piece of our aromatherapy and candle lamp products for people who love slow, intentional living: no unnecessary frills, just safe, reliable, beautifully balanced light and scent that makes your space feel like yours, and we are equally committed to protecting the privacy rights of every visitor and customer who engages with our platform.

1. Information We Collect From You

We only gather personal data that is relevant, necessary, and directly related to the operation of our e-commerce store, and we never process your information without a clear legal basis. The categories of personal information we may collect include:

‌Account and Registration Data‌: When you create an account on our site, proceed to checkout, or subscribe to our newsletter, we collect your full name, email address, physical billing and shipping address, contact telephone number, and account password. This information helps us verify your identity, manage your account preferences, and process all your order requests smoothly.
‌Transaction and Order Data‌: Every time you make a purchase on www.aplikeluminarias.com, we record details related to your order, including the specific products you select (such as our essential oil diffusers, candle warmer lamps, flameless aroma lamps, and smart home scent devices), purchase amount, payment method, partial payment card or financial transaction reference data (we never store full complete payment card details on our servers, all sensitive payment processing is handled via certified third-party payment gateways), delivery instructions, and order status records. We also keep records of your interaction with your shopping cart, including items you save for later or abandon before completing checkout, to help us improve your browsing and shopping experience.
‌Website Usage and Technical Data‌: As you navigate our website, we automatically collect standard technical information including your Internet Protocol (IP) address, browser type and version, device type and operating system, unique device identifiers, website referral sources, the pages you visit on our site, time spent on each page, click paths, download errors, and other browsing behavior metrics. This data is collected through cookies and similar tracking technologies, and it allows us to optimize website performance, fix technical bugs, and deliver personalized content that matches your interests in home aroma and lighting products.
‌Communication and Support Data‌: When you reach out to our customer service team via email at [email protected], call us at +34 697 881 891, submit a contact form, or leave product reviews, feedback, or testimonials on our site, we collect the full content of your messages, your preferred contact method, and our response records. This information helps us resolve your concerns quickly, improve our products and services, and provide you with the support you expect when shopping for our home fragrance and lighting goods.
‌Marketing Preference Data‌: If you opt in to receive our promotional emails, product update notifications, or exclusive offer alerts, we keep records of your consent preferences, the emails you open, links you click in our marketing messages, and your feedback on our new product launches such as our new arrival essential oil diffuser and flameless candle lamp lines.

2. How We Use Your Personal Data

We process your personal information only for legitimate, clearly stated purposes that are fully aligned with your expectations as a customer of our home aroma product store. The primary use cases for your data are:

‌Order Fulfillment and Transaction Processing‌: We use your order data, shipping address, and contact information to process your purchases, confirm payment status, arrange for product shipping through our trusted logistics partners, track delivery progress, and resolve any issues related to your order from the moment you complete checkout until you receive your items at your door. For example, when you purchase a Portable USB Rechargeable Personal Mini Essential Oil Diffuser or a Smart WiFi Essential Oil Diffuser with Alexa and Google Home Voice Control, we share only the necessary shipping details with our courier to make sure your product arrives to you safely and on time.
‌Compliance With Legal and Regulatory Obligations‌: As a business operating in Torrent, Valencia, Spain, we are required to retain transaction records for Spanish tax and accounting purposes for a minimum of 10 years as mandated by local commercial regulations. We also process relevant product sales data to meet our compliance obligations under the EU EPR (Extended Producer Responsibility) rules for packaging, WEEE (Waste Electrical and Electronic Equipment) for all our electronic aroma diffuser and LED candle products, and applicable battery regulations for any battery-powered devices we sell, to fulfill our legal responsibility to submit required annual recovery data to the relevant Spanish environmental authorities. We also process your data as needed to respond to valid legal requests from public authorities, courts, or regulatory bodies.
‌Website Functionality and User Experience Optimization‌: The technical usage data we collect helps us make sure our website runs smoothly for all visitors, whether you are browsing our new arrivals section, adding a Candle Warmer Lamp with Adjustable Height and Dimmable Bulb to your cart, or accessing your account page. We use this data to load our product pages faster on different devices, fix broken links, resolve compatibility issues for different browsers, and adjust our website layout to highlight the home aroma products that match your browsing preferences.
‌Customer Support and Post-Purchase Services‌: We use your contact information and communication history to respond to your questions about our products, for example answering questions such as how large a room our desktop diffuser can cover with steady fragrance (which works perfectly for spaces up to 300 sq ft, including bedrooms, home offices and small living areas), confirming details about our auto shutoff feature for our essential oil diffusers, assisting you with returns or exchanges under our Refund and Returns Policy, and providing you with guidance to help you get the best experience out of your purchased aroma lamp or diffuser.
‌Personalized Marketing (With Your Explicit Consent)‌: If you have opted in to receive our marketing communications, we will send you updates about new product launches, exclusive discount offers, seasonal promotions for our flameless candle and aroma diffuser collections, and tips for creating a warm, scented living space that aligns with our brand philosophy of slow, intentional living. You can opt out of these marketing messages at any time with immediate effect, and we will never send you unsolicited marketing communications without your clear prior consent.
‌Business Security and Fraud Prevention‌: We process your personal data to protect our website, our business, and our customers from fraudulent transactions, unauthorized account access, cyberattacks, and other illegal activities. This includes monitoring for unusual order patterns, verifying the identity of users requesting account changes, and taking appropriate action to block bad faith actors that could harm our community of home aroma lovers.

3. Legal Basis for Data Processing

All our processing activities of your personal data are grounded in clear, valid legal bases under the GDPR and Spanish data protection law:

‌Contractual Necessity‌: Most of the processing we perform is necessary to fulfill the sales contract we enter into with you when you place an order on our website. Without providing the required order, shipping, and payment information, we cannot complete your purchase and deliver the products you have selected to your location.
‌Legitimate Interests‌: Where appropriate, we process your data based on our legitimate business interests, which we always balance against your individual privacy rights. These legitimate interests include optimizing our e-commerce website performance, improving our product offerings for home fragrance and lighting enthusiasts, preventing fraud against our store and customers, and sending you service-related notifications that are necessary for the operation of your account, such as order status updates. We will never use your personal data for activities that override your privacy rights or that you could not reasonably expect as a customer of our store.
‌Legal Compliance‌: We process your personal data to meet the legal obligations we are subject to as a registered Spanish company APLIKE LUMINARIAS DE BAÑO, S.L., including tax reporting, EPR regulatory reporting for our packaging, electronic and battery products, responding to official legal requests, and complying with all applicable local and EU environmental and commercial regulations.
‌Explicit Consent‌: For any processing activities that are not covered by the three legal bases above, such as sending you non-transactional marketing emails, deploying non-essential cookies on your first visit to our site, or sharing your data with non-essential third-party partners, we will always collect your explicit, freely given consent first. You have the full right to withdraw this consent at any time, and withdrawal of consent will not affect the lawfulness of any processing that we completed before you withdrew your permission.

4. Data Sharing and Third-Party Disclosure

We never sell, rent, or trade your personal personal data to unrelated third parties for their own marketing purposes without your explicit written permission. We only share your information with carefully selected third-party service providers that are bound by strict data protection agreements, and only to the minimum extent necessary to operate our e-commerce business:

‌Payment Processors‌: We share only the necessary transaction details with certified, PCI-DSS compliant payment service providers to process your payments securely. These providers are not permitted to use your payment data for any other purposes, and they maintain full compliance with all EU data protection and payment security rules.
‌Logistics and Shipping Partners‌: We share your full name, shipping address, and contact telephone number with our selected courier and delivery services, exclusively for the purpose of shipping your ordered products to the address you specified during checkout, and tracking the delivery status until your order is successfully completed.
‌Website and Cloud Service Providers‌: We work with trusted third-party platforms that host our website, provide cloud storage services, power our e-commerce store functionality, send transactional notification emails to your registered email address, and analyze anonymized website usage data to help us improve site performance. All these service providers are required to implement strict data security measures, and they are prohibited from accessing or using your personal data for any purposes beyond the specific services they are providing to us.
‌Regulatory and Legal Authorities‌: We may disclose your personal data if we are required to do so by a valid, legally binding request from a Spanish public authority, court, law enforcement agency, or environmental regulatory body such as the Spanish Ecological Transition and Demographic Challenge Ministry (Miteco) or the local EPR compliance agency Ecoembes, as required by applicable Spanish and EU law.
‌Authorized Service Providers for EPR Compliance‌: When we submit mandatory sales and recycling data required under EU and Spanish EPR regulations for our packaging, electronic waste (WEEE) and battery related product obligations, we share only the minimum aggregated or required individual product sales data with our authorized local producer responsibility organizations (PROs), as required to meet our legal recycling and recovery reporting duties.
‌Business Transfer Circumstance‌: In the event of a full or partial merger, acquisition, or sale of all or part of our company assets, your personal data held by us may be transferred to the new operating entity, who will continue to be bound by the terms of this Privacy Policy, unless changes are made to the policy in compliance with legal requirements and properly notified to you in advance.

5. Data Retention Period

We will never keep your personal data for longer than it is necessary to fulfill the specific purposes for which we collected it:

For order-related transaction data, we retain all records for the full mandatory legal period required by Spanish tax and commercial regulations, which is 10 years from the date your order is completed, to meet tax audit and accounting compliance obligations.
For marketing preference data, we keep your consent records and related marketing activity data for as long as you remain subscribed to our marketing communications, or until you choose to opt out and request that we delete your marketing-related information.
For website account data, we will retain your account information for as long as your account remains active on www.aplikeluminarias.com. If you choose to permanently delete your user account, we will erase all your personal account data within 30 days, subject to the legally required data we must keep for tax, compliance and regulatory purposes as outlined above.
For customer support communication records, we retain these records for 3 years after we have fully resolved your related support request, to allow us to reference prior conversations if you contact us again with follow-up questions, unless you make a valid formal request to delete these records earlier.
Once the retention period for your personal data expires, we will securely and permanently anonymize or destroy all your information, in full compliance with data security best practices.

6. Your Data Protection Rights

As a user located in the European Economic Area (EEA), you hold a full set of enforceable data protection rights under the GDPR, which you can exercise at any time free of charge:

‌Right of Access‌: You have the right to request a copy of all the personal data we hold about you, and to receive clear information about how we process your information, who we have shared it with, and how long we intend to retain it.
‌Right to Rectification‌: If you find that any of the personal data we hold about you is inaccurate, incomplete, or out of date (for example, your shipping address or contact phone number has changed), you can submit a request to us, and we will correct the relevant information without unnecessary delay.
‌Right to Erasure (Right to be Forgotten)‌: You can request that we delete all your personal data from our systems, under circumstances where the information is no longer needed for the original purposes we collected it for, if you withdraw your consent for the processing, or if our processing of your data no longer has a valid legal basis. We will honor this request as soon as possible, except for the limited personal data that we are legally required to retain to meet tax, regulatory or legal obligation requirements.
‌Right to Restriction of Processing‌: You have the right to request that we temporarily pause the processing of your personal data, for example when you contest the accuracy of your data, when you believe our processing is unlawful but you do not want us to fully delete it, or when we no longer need the data for our processing purposes but you require it to establish, exercise or defend legal claims.
‌Right to Data Portability‌: You can request that we provide all the personal data you have directly submitted to us, in a structured, commonly used, machine-readable format, and you may also request that we transfer this data directly to another data controller you specify, where this is technically feasible.
‌Right to Object‌: You can object at any time to processing of your personal data that is based on our legitimate interests, including direct marketing activities. Once you submit an objection to marketing processing, we will immediately stop sending you all marketing related communications.
‌Right to Lodge a Complaint‌: If you believe that our processing of your personal data violates applicable data protection regulations, you have the full right to submit a formal complaint to the relevant Spanish data protection supervisory authority, the Agencia Española de Protección de Datos (AEPD).

To exercise any of the rights listed above, you can send your request to our dedicated data protection contact email at [email protected], or send a written request to our physical business address at C/ El Perelló, 9, 46900 Torrent, Valencia, Spain. We will respond to all valid requests within 30 calendar days, free of charge, and we may only request a small reasonable administrative fee if your request is clearly repetitive, excessive, or manifestly unfounded.

7. Data Security Measures

We take the security of your personal data extremely seriously, and we have implemented comprehensive industry-standard technical and organizational security measures to protect your information from unauthorized access, accidental loss, alteration, destruction, or unauthorized disclosure:

All personal data transmitted between your browser and our website is encrypted using up-to-date TLS 1.3 security protocols, to protect your data during all data transfers over the internet.
Our servers hosting personal data are stored in secured, access-restricted data centers located within the European Union, that meet strict international information security standards.
We implement strict role-based access controls, so only a very limited number of authorized employees who need to access your data to fulfill their work responsibilities (such as order processing or customer support) are granted permission to access your personal information, and all access activities are logged and monitored.
We run regular security audits, vulnerability tests, and data protection training for all our staff, to make sure our team understands the importance of protecting your privacy and follows all required data handling procedures.
While we continuously update and improve our security measures to protect your data, please note that no internet transmission or electronic storage method can be 100% completely secure, and we will always notify you and the relevant supervisory authority immediately if we ever experience a personal data breach that poses a high risk to your rights and freedoms, as required by applicable GDPR rules.

8. Cookies and Tracking Technologies

Our website www.aplikeluminarias.com uses cookies and other similar small text file tracking technologies to distinguish you from other visitors to our site, improve your overall browsing experience, analyze website traffic patterns, and customize the content you see. The different categories of cookies we use include:

‌Strictly Necessary Cookies‌: These cookies are essential for our website to function properly for you. They allow you to navigate across the different pages of our store, add products to your shopping cart, proceed to checkout, and access secure areas of your user account. These strictly necessary cookies do not collect any personal identifiable information about you for marketing purposes, and they cannot be turned off in our system.
‌Performance and Analytics Cookies‌: These cookies help us understand how visitors interact with our website, by collecting anonymous aggregated usage data such as which pages are most frequently visited, how long users stay on each product page for our essential oil diffusers and candle lamps, and what error messages users encounter. All the data collected by these cookies is anonymized, and it helps us optimize our website performance and fix functional issues quickly.
‌Functional Cookies‌: These cookies remember the preference settings you choose on our website, such as your selected language, preferred currency, or your saved product favorites list, so that when you return to www.aplikeluminarias.com, you do not need to re-enter all your preference settings again, and we can provide you with a more customized, smooth user experience.
‌Marketing and Targeting Cookies‌: These cookies may be placed on our site by our trusted advertising partners, to build a profile of your browsing interests, and show you relevant advertisements for our home aroma products on other external websites and platforms. These cookies will not store your directly identifiable personal information, and they are only activated if you give us your explicit consent on your first visit to our website.

You have full control over cookie settings on our site. You can adjust all your cookie preferences in the dedicated cookie consent banner that appears when you first visit our site, and you can also modify the settings directly in your own internet browser, to block or delete existing cookies at any time. Please note that disabling certain strictly necessary cookies may impact the normal functionality of our e-commerce store, and prevent you from being able to complete your checkout process normally.

9. Protection of Minors

Our e-commerce website and all our home aroma, lighting, and diffuser products are designed and intended for use by adults aged 18 years or older. We do not knowingly or intentionally collect any personal data from children under the age of 16. If you are a parent or legal guardian, and you believe that your child under 16 has provided personal data to us through our website, please contact us immediately via email at [email protected], and we will take immediate steps to fully delete that information from all our servers and systems.

10. International Data Transfers

All of your personal data that we collect and process via our website is primarily stored and processed on servers located within the European Economic Area (EEA). If in any rare circumstance we need to transfer your personal data to a country or territory located outside of the EEA, we will take all legally required steps to ensure that the destination jurisdiction provides an adequate level of data protection, and we will implement appropriate, legally approved safeguards (such as signing the European Commission approved Standard Contractual Clauses with the third-party recipient of your data) to fully protect your privacy rights, in full compliance with all GDPR requirements. We will never transfer your personal data to any third country that does not meet the required EU data protection adequacy standards, without providing you with clear information about the transfer and all related appropriate protection measures.

11. Updates to This Privacy Policy

We may occasionally make updates and revisions to this Privacy Policy, to reflect changes to our business operations, new legal or regulatory requirements, new product features we add to our website, or feedback we receive from our valued customers. When we make material changes to this policy, we will update the “Effective Date” posted at the top of this page, and we will also send a prominent notification to all registered users via email, and publish a clear alert on the homepage of www.aplikeluminarias.com, before the new revised policy officially takes effect. We strongly recommend that you review this Privacy Policy on a periodic basis, to stay informed about how we are protecting your personal data. Your continued use of our website and making purchases on our platform after the revised policy comes into effect will be deemed as your acknowledgment and acceptance of the updated terms of this Privacy Policy.

12. Contact Information

If you have any questions, comments, concerns, or formal requests related to this Privacy Policy, or the way we handle and process your personal data, you can contact our data protection team at any time:

Company Name: APLIKE LUMINARIAS DE BAÑO, S.L.
Official Website: www.aplikeluminarias.com
Contact Email: [email protected]
Contact Address: C/ El Perelló, 9, 46900 Torrent, Valencia, Spain
Contact Telephone Number: +34 697 881 891‌

We will respond to all your privacy related inquiries promptly and thoroughly, within the legal time frame required by applicable Spanish and EU data protection law.