Privacy policy

Last updated: 16 October 2026

1. Who we are

Kinly is the online store at regalalo.store, owned by Juan Brotons Llin (Tax ID (NIF) 49744264W), Ptda. de l'Ombria, 32-57, 46870 Ontinyent (Valencia), Spain. We are the data controller responsible for your personal data. You can contact us about privacy at any time at hola@regalalo.store.

This policy explains what personal data we collect when you visit our store, buy from us or contact us, why we use it, who we share it with and what rights you have.

2. What we collect

• Contact and delivery details: name, email address, phone number, and shipping and billing address.
• Order details: the products you buy, prices, discounts, your order number, and any returns or refunds.
• Payment details: payments are processed by our payment providers. We never see or store your full card number; we only receive confirmation of the payment and limited details, such as the card type and its last four digits.
• Messages: what you tell us when you email us or contact customer service.
• Device and usage data: IP address, browser and device type, approximate location, the pages you view and how you use the store, collected through cookies and similar technologies.
• Marketing preferences: whether you have agreed to receive our emails.

We collect this data directly from you, automatically when you use the store, and from our service providers (for example, when a payment provider confirms your payment or a carrier updates your delivery).

3. What we do not collect

The Kinly bracelet works with the free Smart Life app, which is provided by a third party. Alerts go from the bracelet to the app on your family's phones and never pass through us. We do not receive or store alerts, your Wi-Fi details or any data from the app, and we do not collect health data. The app's own privacy policy applies to the information you share with it.

If you buy a bracelet for someone else, such as a parent, and ship it to them, we use their name, address and phone number only to deliver the order.

4. Why we use your data and our legal basis

• To process and deliver your order, handle returns and refunds, and provide customer service: this is necessary to perform our contract with you.
• To keep invoices and accounting records: to comply with our legal obligations under tax and commercial law.
• To keep the store secure, prevent fraud and fix technical problems: our legitimate interest in running a safe store.
• To understand how the store is used and improve it: our legitimate interest or, where the law requires it for cookies, your consent.
• To send you marketing emails: only with your consent. You can unsubscribe at any time using the link in every email.
• To show you our ads on other websites and social networks: with your consent where the law requires it.

Our platform may run automated checks to flag orders that could be fraudulent. We review flagged orders ourselves before cancelling any of them, and we do not make other automated decisions that have legal or similarly significant effects on you.

5. Cookies

Our store uses cookies and similar technologies. Some are essential for the store to work, for example to keep items in your cart and complete checkout. Others help us understand how the store is used, or measure and personalise advertising. Where the law requires it, we only use non-essential cookies with your consent, which you can give or withdraw at any time through the cookie banner or your cookie preferences. You can also block or delete cookies in your browser settings, although some parts of the store may then stop working.

6. Who we share your data with

We do not sell your personal data. We share it only with the providers we need to run the store, and only as far as necessary:

• Shopify, the platform that hosts our store and processes orders and checkout.
• Payment providers, to process your payment and prevent fraud.
• Our supplier and shipping carriers, who prepare, ship and deliver your order. They receive your name, shipping address and phone number.
• Apps that help us run the store, such as email, customer support and product review tools.
• Advertising and analytics partners, such as Meta, Google or TikTok, if we use their tools and, where required, only with your consent.
• Authorities, courts and professional advisers, when the law requires it or to protect our rights.

If our business is ever sold or transferred, your data may pass to the new owner, who will have to respect this policy.

Shopify also uses some personal data to provide and improve its own services, such as Shop Pay, the Shop app and fraud prevention. For those purposes Shopify acts as an independent controller. You can read how Shopify handles your data in its Consumer Privacy Policy and exercise certain rights through the Shopify Privacy Portal.

7. International transfers

We are based in Spain, and our providers may process your data in other countries, including Ireland, Canada and the United States (Shopify) and China, where our supplier prepares and ships orders. When we transfer data outside the European Economic Area or the United Kingdom, we rely on adequacy decisions or on the European Commission's Standard Contractual Clauses (or the UK equivalent) where they apply. Data sent to our supplier is limited to what is needed to ship your order, and is transferred because it is necessary to perform our contract with you.

8. How long we keep your data

• Orders, invoices and accounting records: 6 years, as required by Spanish commercial and tax law.
• Customer service messages: up to 2 years after your last contact, unless we need them for a claim.
• Marketing: until you unsubscribe or withdraw your consent.
• Cookies: for the period set by each cookie, which you can check and change in your browser.

After that, we delete your data or make it anonymous.

9. Your rights

Wherever you live, you can ask us to:

• give you access to the personal data we hold about you, and a copy of it;
• correct data that is wrong or incomplete;
• delete your data, unless we have to keep it by law (for example, invoices);
• stop sending you marketing, at any time;
• withdraw any consent you have given, without affecting what we did before.

United Kingdom and European Economic Area: you also have the right to restrict or object to our use of your data, including when it is based on our legitimate interests, and to receive your data in a portable format. You can complain to the Spanish Data Protection Agency (AEPD, www.aepd.es), to the UK Information Commissioner's Office (ICO, ico.org.uk) or to the data protection authority where you live.

United States: we do not sell your personal data. Depending on your state, you may have the right to know, access, correct and delete your personal data, and to opt out of targeted advertising. To opt out, email us or change your cookie preferences. We will not discriminate against you for exercising any of these rights.

Canada, Australia and New Zealand: you can access and correct your personal information and make a complaint to us. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada, the Office of the Australian Information Commissioner (OAIC) or the New Zealand Office of the Privacy Commissioner.

To exercise any of your rights, email hola@regalalo.store. We will reply within one month, or within the period set by your local law. We may need to confirm your identity first, and you can authorise someone else to make a request on your behalf.

10. Security

We use reasonable technical and organisational measures to protect your data, and our platform and payment providers use encryption to protect payment details. No system is completely secure, so please don't send us sensitive information by email.

11. Children

Our store is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will publish the new version here with a new "Last updated" date and, if the changes are important, we will let you know by email or on the store.

13. Contact

For any question about this policy or your personal data, email us at hola@regalalo.store or write to Juan Brotons Llin, Ptda. de l'Ombria, 32-57, 46870 Ontinyent (Valencia), Spain.