Privacy Policy
Last updated 3 September 2026
Your privacy matters to us. This policy sets out what personal data EcoYard Works collects, why we collect it, and the choices and rights you have. It is written in line with Regulation (EU) 2016/679 (the GDPR) and Spanish Organic Law 3/2018 on Data Protection and the Guarantee of Digital Rights (LOPDGDD).
Who is responsible for your data
FLOFUM, S.L., trading as EcoYard Works
Calle Parcerisa 13, Local 1, 08014 Barcelona, Spain
CIF: B75621250 · VAT: ESB75621250
Email: privacy@ecoyard-works.com
The data we collect
- Details you give us: your name, delivery and billing address, email and phone number.
- Order information: the products you buy, your order history and confirmation of payment (we do not keep full card numbers — see below).
- Account details: if you register, your sign-in credentials and saved preferences.
- Messages: anything you send us by email, contact form or social media.
- Technical data: your IP address, device and browser type, and how you use the site, gathered partly through cookies (see our Cookie Policy).
Why we use it, and our legal basis
| What we do | Legal basis (GDPR Art. 6) |
|---|---|
| Take, deliver and manage your orders, payments and returns | Performance of a contract (6.1.b) |
| Answer your questions and provide support | Contract / legitimate interest (6.1.b/f) |
| Meet our tax, accounting and consumer-law duties | Legal obligation (6.1.c) |
| Send you marketing emails, if you have asked for them | Consent (6.1.a) — withdraw any time |
| Keep the site secure and prevent fraud | Legitimate interest (6.1.f) |
| Use analytics and non-essential cookies | Consent (6.1.a) |
Payments
Card and online payments are handled by trusted payment providers such as Stripe, PayPal and Redsys. You enter your card details directly with the provider and we never store them on our servers. If you choose pay on delivery (cash on delivery), you pay the courier in cash and no card details are collected at all.
Who we share it with
We only share your data where it is needed to run our service — with delivery partners such as Correos, SEUR, GLS and DHL to bring you your order; with payment providers to process transactions; and with the IT, hosting and email suppliers who process data on our behalf under written agreements. We may also disclose data where the law requires it. We never sell your personal data.
Keeping your data safe and for how long
We apply appropriate technical and organisational safeguards, including SSL encryption of the website. We keep your data only as long as needed: order and invoice records for the period Spanish tax and commercial law require (generally up to six years), marketing data until you opt out, and account data while your account stays active.
Your rights
You may ask us to give you access to your data, correct it, delete it, restrict or object to its use, or provide it in a portable format; and you may withdraw consent at any time. To do so, email privacy@ecoyard-works.com. You can also complain to the Spanish Data Protection Agency (www.aepd.es).
Changes
We may revise this policy from time to time. The version shown here, with its “last updated” date, is the one that applies.