Privacy policy
Last updated: October 3, 2026
Privacy Policy
This Privacy Policy explains how Brewjoe collects, uses, shares and protects your personal information when you visit our store brewjoe.store, make a purchase or contact us. Because our business is established in Spain, we process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD). We also respect the rights granted by US state privacy laws (such as the California Consumer Privacy Act, as amended) and the UK GDPR, where applicable.
1. Who is responsible for your data
Data controller: Brewjoe (full owner details are available in our Legal Notice)
Address: Avda. Nervión 42, 41740 Lebrija, Sevilla, Spain
Email: brewjoestore@gmail.com
2. Information we collect
- Contact details: name, shipping and billing address, email and phone number.
- Order information: products purchased, returns, amounts and order history.
- Payment information: payments are processed by Shopify Payments, PayPal and the other payment providers available at checkout. Brewjoe does not store your full card details.
- Account information: if you create an account, your login details and preferences.
- Communications: information you share when you contact us.
- Device and usage information: IP address, device, browser and how you interact with the website, collected through cookies and similar technologies.
3. How we use your information and our legal bases
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Processing orders, payments, shipping, returns and customer support | Performance of the sales contract (Art. 6(1)(b)) |
| Issuing invoices and complying with tax and accounting obligations | Legal obligation (Art. 6(1)(c)) |
| Sending marketing emails or text messages | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Personalized advertising and website analytics through non-essential cookies | Your consent, given through the cookie banner where required |
| Preventing fraud and keeping the store secure | Legitimate interest (Art. 6(1)(f)) |
| Answering your questions and requests | Legitimate interest or, where applicable, performance of the contract |
Text messages (SMS): we only send marketing text messages if you have expressly opted in. Message and data rates may apply. You can opt out at any time by replying STOP.
4. How long we keep your information
- Order and billing data: for the duration of our commercial relationship and then for the periods required by law (6 years for commercial obligations and 4 years for tax obligations under Spanish law).
- Marketing data: until you withdraw your consent or unsubscribe.
- Account data: while your account remains active.
- Inquiries: for as long as needed to resolve them and handle any related claims.
- Cookies: as described in Section 10.
5. Who we share your information with
We only share your information with:
- Shopify, the platform that hosts our store.
- Payment providers (Shopify Payments, PayPal and others available at checkout).
- Fulfillment, shipping and order-tracking providers, to prepare and deliver your order and send you shipping updates.
- Marketing and advertising partners (for example, Meta, TikTok or Google), only where you have given consent to the relevant cookies or where permitted by applicable law.
- Public authorities, when required by law.
6. US privacy rights — "sale" and "sharing" of personal information
We do not sell your personal information for money. However, using advertising cookies and pixels to show you personalized ads may be considered a "sale" or "sharing" of personal information, or "targeted advertising", under some US state privacy laws.
You can opt out of this at any time here. If your browser sends a Global Privacy Control (GPC) signal, we will treat it as a request to opt out for that browser and device.
Depending on your state of residence, you may have the right to: know and access the personal information we hold about you; correct it; delete it; obtain a portable copy; and opt out of sale, sharing or targeted advertising. You may use an authorized agent to submit a request on your behalf; we may ask for proof of authorization and to verify your identity. If we deny your request, you may appeal by replying to our response. We will never discriminate against you for exercising your privacy rights.
7. Relationship with Shopify
Our store is hosted by Shopify, which collects and processes information about your access to and use of the store in order to provide and improve its services. For certain enhanced features, Shopify may act as an independent controller of your personal information. Learn more in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
8. International transfers
Your information may be processed outside your country of residence, including in the United States and other countries where our providers operate. When personal data is transferred outside the European Economic Area or the United Kingdom, we rely on adequacy decisions or appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the UK equivalent.
9. Your rights (EU, EEA and UK)
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent, by emailing brewjoestore@gmail.com. We may ask you to verify your identity before handling your request. We will respond within one month.
If you believe we have not handled your data properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), with the UK Information Commissioner's Office (ico.org.uk) if you live in the UK, or with the data protection authority of your country of residence.
You can unsubscribe from marketing emails at any time using the link included in every email. You will still receive essential emails about your orders.
10. Cookies
We use cookies and similar technologies:
- Strictly necessary cookies: essential for the store to work (cart, checkout, session, security). These do not require consent.
- Analytics cookies: help us understand how the website is used.
- Advertising cookies: allow us to show you personalized ads on other platforms (for example, Meta or TikTok).
Where required by law (for example, in the EU and UK), analytics and advertising cookies are only set if you accept them in the cookie banner. In the US, you can opt out as described in Section 6. You can change your choice at any time through the cookie banner or by deleting cookies in your browser settings. Shopify and third-party cookies last for the period set by each provider, generally from the session up to 2 years.
11. Children
Our store is not directed to children, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe a child has provided us with personal information, please contact us so we can delete it.
12. Security
We apply reasonable technical and organizational measures to protect your information. However, no transmission over the internet is completely secure, so we recommend not sending us sensitive information through unsecured channels.
13. Changes to this policy
We may update this Privacy Policy to reflect legal or operational changes. We will post the new version on this page with its "Last updated" date and, where the changes are significant, notify you as required by law.
14. Contact
For any questions about this Privacy Policy or to exercise your rights, email us at brewjoestore@gmail.com or write to Brewjoe, Avda. Nervión 42, 41740 Lebrija, Sevilla, Spain.