PRIVACY POLICY

Last updated: 15 June 2026

  1. DATA CONTROLLER

The controller responsible for processing personal data through this website is:

Cristian Salazar Sanchez, trading as Black Cobra Miniatures
Tax identification number: [43537327y]
Business address: Francesc Torrecassana num6, 2º2º
Email: info@blackcobraminiatures.com
Website: https://blackcobraminiatures.com

  1. PERSONAL DATA WE COLLECT

Depending on how you use the website, we may collect:

  • Identification and contact details, such as your name, billing address and email address.
  • Account details and login information.
  • Order, invoice and transaction information.
  • Technical information, such as your IP address, browser, device and security logs.
  • Communications sent through customer support or contact forms.
  • Newsletter subscription details and consent records.
  • Information required to provide and control access to purchased digital downloads.

We do not directly store complete payment-card details. Payments are processed by the payment providers described below.

  1. PURPOSES AND LEGAL BASES

We process personal data for the following purposes:

  • To process purchases, payments, invoices and access to digital products. The legal basis is the performance of a contract or steps taken before entering into a contract.
  • To create and manage customer accounts. The legal basis is the performance of a contract.
  • To provide customer support and respond to enquiries. The legal basis is the performance of a contract, pre-contractual measures or our legitimate interest in assisting customers.
  • To comply with accounting, tax, consumer-protection and other legal obligations. The legal basis is compliance with a legal obligation.
  • To prevent fraud, abuse and security incidents. The legal basis is our legitimate interest in protecting the website, customers and business.
  • To send newsletters and promotional communications. The legal basis is your consent. You may withdraw consent at any time by using the unsubscribe link included in each email.
  • To manage essential cookies and, where applicable, optional analytics or marketing cookies. Optional cookies are used only according to the choices expressed through the cookie-consent system.
  1. PAYMENTS

Payments may be processed through:

  • WooPayments, including supported credit or debit cards, Apple Pay, Google Pay and other available payment methods.
  • PayPal.

These providers process the information required to authorize payments, prevent fraud and comply with their legal obligations. Their own privacy policies apply to the data they process as independent controllers or service providers.

  1. SERVICE PROVIDERS AND DATA RECIPIENTS

Personal data may be accessed or processed when necessary by providers that support the operation of the store, including:

  • WooCommerce and Automattic services used to operate the online store and WooPayments.
  • PayPal for payment processing.
  • MailerLite for newsletter subscriptions and email communications.
  • Cloudflare, including R2 object storage, for securely storing and delivering downloadable product files and providing infrastructure or security services.
  • Namecheap and its hosting infrastructure for website hosting and related technical services.
  • Security, caching, backup, email-delivery and technical-support providers used by the website.
  • Public authorities, tax authorities, courts or other competent bodies where disclosure is legally required.

We require service providers to process personal data only for the agreed purposes and with appropriate safeguards.

  1. INTERNATIONAL DATA TRANSFERS

Some service providers may process data outside the European Economic Area. Where this occurs, transfers will be based on an adequacy decision, Standard Contractual Clauses or another mechanism permitted by the GDPR.

  1. DATA RETENTION

Personal data is retained only for as long as necessary for the purpose for which it was collected and to comply with applicable legal obligations.

Current store retention settings include:

  • Inactive customer accounts: 24 months.
  • Pending and failed orders: 7 days.
  • Cancelled orders: 12 months.
  • Refunded and completed orders: 72 months.
  • Newsletter information: until consent is withdrawn or the subscription is otherwise removed, subject to retaining evidence of consent where legally necessary.
  • Support communications and security records: for the period reasonably necessary to resolve the request, protect the website or establish, exercise or defend legal claims.

Certain invoicing, transaction or accounting information may be retained for longer where required by Spanish tax, commercial or other applicable law.

  1. CUSTOMER ACCOUNTS AND DIGITAL DOWNLOADS

Customers may purchase as guests or create an account. Account holders can access and update certain personal information from the My Account area.

Access to purchased downloadable products is controlled through WooCommerce. Download links may be time-limited, restricted by download count and generated using protected cloud-storage links.

  1. NEWSLETTER

When you subscribe to the Black Cobra Miniatures newsletter, your email address and subscription information are sent to MailerLite. You will receive marketing communications only where you have provided the required consent.

You may unsubscribe at any time using the link included in every marketing email. Unsubscribing does not affect processing carried out before consent was withdrawn.

  1. COOKIES

This website uses cookies and similar technologies that are necessary for functions such as shopping carts, checkout, account login, security and session management.

Optional analytics, personalization or marketing technologies, if enabled, will be governed by the choices made through the cookie-consent banner. Further information should be provided in the website’s Cookie Policy.

  1. YOUR RIGHTS

Under applicable data-protection law, you may request:

  • Access to your personal data.
  • Correction of inaccurate or incomplete data.
  • Erasure of your data where legally permitted.
  • Restriction of processing.
  • Objection to processing based on legitimate interests.
  • Portability of data where applicable.
  • Withdrawal of consent at any time.

To exercise these rights, contact info@blackcobraminiatures.com. We may request information necessary to verify your identity.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Espanola de Proteccion de Datos): https://www.aepd.es

  1. SECURITY

We use reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss or destruction. No internet service can guarantee absolute security.

  1. CHILDREN

This website and its products are not directed at children. We do not knowingly collect personal data from children without the authorization required by applicable law.

  1. CHANGES TO THIS POLICY

We may update this Privacy Policy when services, legal requirements or data-processing activities change. The current version and its last-updated date will always be published on this page.

Shopping Cart
Scroll to Top