Privacy Policy
Last updated: April 2026 — In compliance with GDPR (EU) 2016/679
At Sao Beach we are committed to protecting your privacy. This policy explains clearly and transparently how we handle the personal data you may provide when you use our website or get in touch with us.
1. Data controller
Trading name: Sao Beach | Bohemian Fashion & Accessories
Address: Paseo Marítimo de la Carihuela 101, Local A, 29620 Torremolinos (Málaga)
Contact: saobeach.carihuela@gmail.com — +34 605 23 85 41
2. Data we process and how we obtain it
This website does not have any registration or online purchase forms. The only personal data we may process is data you voluntarily provide when you choose to contact us through:
- WhatsApp: your name and phone number linked to your account.
- Email: your email address and any data included in your message.
- Phone call: the number you call from.
Additionally, if you accept analytics cookies, Google Analytics 4 collects anonymised browsing data (pages visited, session time, device and country of origin) without personally identifying you.
3. Purpose and legal basis
We process your data exclusively for the following purposes:
- Customer service: to respond to your enquiries, manage orders or shipments, and provide the service requested. Legal basis: performance of a contract or pre-contractual measures (Art. 6.1.b GDPR).
- Statistical website analysis: to understand how users browse the site in order to improve it. Only if you accept analytics cookies. Legal basis: consent (Art. 6.1.a GDPR).
We do not use your data for mass marketing communications, nor do we share it with third parties for commercial purposes.
4. Retention periods
Contact data will be kept for as long as necessary to handle your request and, thereafter, for the limitation period applicable to any legal claims that may arise (generally 4 years under Spanish civil and commercial law).
Anonymised Google Analytics data is retained in accordance with our account settings (default: 14 months).
5. Recipients and international transfers
As a general rule, Sao Beach does not share your data with third parties. However, access to data may occur in the following cases:
- Google LLC (Google Analytics 4): web analytics service provider based in the USA. The international transfer is covered by Standard Contractual Clauses approved by the European Commission.
- Meta Platforms / WhatsApp: to the extent that you use WhatsApp to contact us, data is processed under WhatsApp’s terms of use.
No other international data transfers are carried out.
6. Your rights
Under the GDPR, you have the following rights:
Obtain confirmation of whether we process your data and access a copy of it.
Request the correction of inaccurate or incomplete data.
Ask us to delete your data when it is no longer necessary.
Request that we suspend processing in certain circumstances.
Receive your data in a structured, commonly used format.
Object to processing based on legitimate interest.
To exercise any of these rights, please contact us at saobeach.carihuela@gmail.com, stating “GDPR Rights Request” in the subject line and attaching a copy of your ID or equivalent document.
You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es if you consider that the processing of your data does not comply with applicable regulations.
7. Security
Sao Beach applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR.
8. Changes to this policy
We reserve the right to update this Privacy Policy when necessary, for example to reflect regulatory changes or updates to our services. We recommend you review it periodically. The date of the most recent update appears at the top of this page.
Back to home