Privacy policy

Privacy Policy

Last updated: August 2026

Deseo Absoluto ("we", "us", or "our") operates the website deseo-absoluto.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Data Controller

The data controller responsible for your personal data is:
Deseo Absoluto
Website: deseo-absoluto.com
Email: contact@deseoabsoluto.com

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity Data: first name, last name, username or similar identifier
Contact Data: billing address, delivery address, email address, and telephone number
Financial Data: payment card details (processed securely through our payment providers)
Transaction Data: details about payments to and from you and other details of products and services you have purchased from us
Technical Data: internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Site
Usage Data: information about how you use our website, products, and services
Marketing and Communications Data: your preferences in receiving marketing from us and your communication preferences

3. Legal Bases for Processing

We process your personal data on the following legal bases under Article 6 UK GDPR:

Performance of a contract: where processing is necessary to fulfil your order or to take steps at your request before entering into a contract
Legal obligation: where processing is necessary for compliance with a legal obligation (for example, tax and accounting requirements)
Legitimate interests: where processing is necessary for our legitimate interests (for example, fraud prevention and improving our services) and your interests and rights do not override those interests
Consent: where you have given consent for specific processing activities (for example, marketing communications)

4. How We Use Your Personal Data

We use your personal data for the following purposes:

  • To process and fulfil your orders, including managing payments, shipping, and returns
  • To manage our relationship with you, including notifying you about changes to our terms or privacy policy
  • To send you marketing communications where you have opted in, or on the basis of the soft opt-in permitted under PECR where you have previously purchased from us and have not opted out
  • To administer and protect our business and website, including troubleshooting, data analysis, testing, and system maintenance
  • To comply with legal and regulatory obligations

You may opt out of marketing communications at any time using the unsubscribe link in any message, or by contacting us at contact@deseoabsoluto.com.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Site. You can control cookie preferences through our cookie consent tool. For more information, please refer to our Cookie Policy. Cookies that are strictly necessary for the functioning of the Site are placed without consent, while non-essential cookies (analytics, marketing) are placed only with your prior consent, in accordance with PECR.

6. Data Sharing and Third Parties

We may share your personal data with the following categories of third parties:

Service providers: including Shopify (e-commerce platform), payment processors, shipping carriers, and IT service providers who process data on our behalf under written data processing agreements
Legal authorities: where required by law or to establish, exercise or defend our legal rights

We do not sell your personal data to third parties.

7. International Transfers

Some of our service providers are located outside the United Kingdom. Where we transfer your personal data outside the UK, we ensure appropriate safeguards are in place — such as transfers to countries covered by UK adequacy regulations, the International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses — so that your data receives a level of protection essentially equivalent to that required under UK data protection law.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. In general, we retain customer order data for up to 6 years following the end of the relevant financial year, in order to comply with HMRC record-keeping requirements.

9. Your Rights Under UK GDPR

As a UK data subject, you have the following rights regarding your personal data:

Right of access: you may request a copy of the personal data we hold about you
Right to rectification: you may request correction of inaccurate or incomplete data
Right to erasure ("right to be forgotten"): you may request deletion of your data in certain circumstances
Right to restriction of processing: you may request that we restrict the processing of your data
Right to data portability: you may request a copy of your data in a structured, commonly used, machine-readable format
Right to object: you may object to processing based on legitimate interests, and you have an absolute right to object to processing for direct marketing purposes
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, please contact us at contact@deseoabsoluto.com. We will respond within one month of receiving your request. This period may be extended by up to two further months where a request is complex or where we have received a number of requests from you, in which case we will inform you within one month and explain the reason for the delay.

Right to complain: if you are unhappy with how we have handled your personal data, we ask that you contact us first so that we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, and against accidental loss, destruction, or damage. All payment information is encrypted in transit using TLS and processed by PCI DSS compliant payment providers.

11. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on this page and, where required by law, by providing you with prior notice. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: contact@deseoabsoluto.com