At Essencial by EM we handle your personal data with transparency and respect for your rights. This policy explains what data we collect, what we use it for, how long we keep it and how you can exercise your rights at any time.
Data controller
- Holder: Elizabeth Martín Torres
- Trade name: Essencial by EM
- Tax ID (NIF): 76425015V
- Address: Málaga, Spain
- Email: [email protected]
Data we collect
We only collect the data strictly necessary to provide the service you request. Depending on how you interact with Essencial by EM, we may process:
- Account and order data: first and last name, address, phone, email, tax ID (if required for invoicing).
- Payment data: processed directly by the payment provider (PayPal, bank gateway). Essencial by EM does not store card numbers.
- Contact data: name and message when you write to us through the form or by email.
- Subscription data: email address when you sign up for the newsletter.
- Browsing data: technical cookies and, with your consent, analytics and marketing (see Cookies policy).
Purposes and legal basis
- Order management and invoicing — legal basis: performance of the contract (Art. 6.1.b GDPR).
- Customer support — legal basis: performance of the contract or legitimate interest.
- Newsletter and commercial communications — legal basis: explicit consent, revocable in every email.
- Compliance with tax and accounting obligations — legal basis: legal obligation.
- Analytics and marketing — legal basis: consent managed from the cookie banner.
Retention periods
We keep your data only for as long as strictly necessary to fulfil the purpose for which it was collected:
- Order and invoicing data: for the duration of the commercial relationship and, after it ends, the legal periods of 5 years (Spanish Tax Law) and 6 years (Commercial Code).
- Contact data: until your enquiry is resolved, unless the relationship continues.
- Newsletter: until you withdraw your consent.
- Cookies: according to the duration indicated in the Cookies policy.
Recipients and data processors
Your data is not shared with third parties except where strictly necessary to provide the service or required by law. The processors we work with are:
- Hosting provider: Tropical Server S.L.U., which stores the website's data.
- Payment gateway: PayPal and bank provider, which process the transactions.
- Transactional email / newsletter provider: Mailchimp.
- Shipping carriers: to deliver the orders.
- Analytics tools: Google Analytics 4 only if you give your consent.
International transfers
Some of the providers listed above may be located outside the European Economic Area. In such cases, transfers are made under appropriate safeguards: standard contractual clauses approved by the European Commission, or adequacy decisions.
Your rights
You may exercise the following rights over your data at any time:
- Access — know what data we hold about you.
- Rectification — correct inaccurate data.
- Erasure ("right to be forgotten") — delete your data when it is no longer necessary.
- Objection — to the processing in certain cases.
- Restriction — limit the processing while a claim is being resolved.
- Portability — receive your data in a structured format to transfer it to another controller.
- Withdraw your consent at any time, without affecting the lawfulness of the previous processing.
To exercise them, write to [email protected] stating which right you wish to exercise and attaching a copy of your identity document. We will respond within a maximum of one month.
Complaint before the supervisory authority
If you believe your data is not being handled in accordance with the GDPR, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD) through aepd.es.
Automated decisions
Essencial by EM does not make automated decisions nor build profiles with legal effects on users.
Changes to this policy
We may update this policy to reflect legal, technical or operational changes to the store. We will publish the date of the last update at the bottom; substantial changes will also be notified by email to registered users.
Last updated: April 2026
