Privacy policy

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 (LOPDGDD), you are informed that the controller of the personal data collected through this website is:

Owner: Heavens Privee S.L. · Tax ID (NIF): B02822740 · Registered address: Calle Abrera, 6, local 2, 08760 Martorell (Barcelona) · Email: info@heavensprivee.com

The personal data you provide is processed for the following purposes:

— Answering enquiries received through the contact form.

— Preparing the digital sales channel management proposals requested by interested brands.

— Managing the business relationship with client brands.

— Measuring statistically how the website is used (Google Analytics 4), only if you accept it in the cookie notice.

The legal basis depends on the purpose:

— Contact form enquiries: your consent (art. 6(1)(a) GDPR), given by ticking the acceptance box — never pre-ticked.

— Proposals and business relationship with brands, including their access to the brand portal: with the brand, taking pre-contractual steps at its request and performing the contract (art. 6(1)(b) GDPR); with the contact persons working for it, the legitimate interest in maintaining that professional relationship (art. 6(1)(f) GDPR and art. 19 of the Spanish LOPDGDD), which you may object to; and compliance with tax and accounting legal obligations (art. 6(1)(c) GDPR).

— Web analytics: your consent (art. 6(1)(a) GDPR), given in the cookie notice; you may withdraw it at any time from “Cookie settings”.

You may withdraw the consent given in the form by writing to info@heavensprivee.com; withdrawing it does not affect the lawfulness of processing carried out before.

The data marked as mandatory in the form is needed to answer you: without it we cannot handle the enquiry. For the business relationship, the brand's contact and billing data is needed. Only the data strictly necessary for each purpose is collected.

Data is not disclosed to third parties except where required by law. The following provide services as processors, under a contract compliant with article 28 GDPR:

— Indedmedia Hosting (Martorell, Barcelona, Spain): hosting of the website and the forms service, on Hetzner Online GmbH servers in Germany (EU).

— Google Ireland Ltd.: web analytics (Google Analytics 4 and Google Tag Manager), only if accepted in the cookie notice (IE).

— Google Ireland Ltd. (Google Workspace): email for info@heavensprivee.com, where form enquiries are received and answered (IE).

Google may process data in the United States (Google LLC): email data and, if you accept analytics, browsing data. It does so with the safeguards of the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023). The other processors handle the data within the European Economic Area. Analytics details in the cookie policy.

— Enquiries and proposals that do not lead to a business relationship: 1 year from the last contact, so the conversation can be picked up if it continues, unless you ask for deletion earlier.

— Client brands: for as long as the business relationship lasts. Afterwards, only what the law requires us to keep: books, correspondence and supporting documents of the business, 6 years from the last entry (art. 30 of the Spanish Commercial Code), and anything relevant for tax purposes, until the tax obligations become time-barred (generally 4 years; arts. 66 to 68 of the Spanish General Tax Act). During that time the data is blocked (art. 32 of the Spanish LOPDGDD): it is only used to meet those obligations or possible liabilities.

— Web analytics: in Google Analytics, data linked to each visitor is kept for 14 months, which Google may count again from their last visit, and Google deletes it monthly; aggregated statistics, which identify no one, may be kept longer.

After those periods, the data is deleted.

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time by writing to info@heavensprivee.com, stating which right you are exercising. If we have reasonable doubts about your identity, we may ask for the information needed to confirm it.

If you believe the processing does not comply with the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Last updated: October 5, 2026 (legal bases and periods by purpose; web analytics).

This is a courtesy translation. The legally binding version is the one written in the owner's language (Spanish); Spanish law applies in any case.