Privacy policy

Privacy Policy

This Privacy Policy explains how we process your personal data when you visit www.nenetoys.com (the "Site"), buy from us or contact us. It is provided in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

INTERGLOBAL TRADING SOLUTIONS GROUP S.L. (trading as Nene Toys)
NIF: B01836923
Registered office: Rambla Celler 133, Planta 4, 08172 Sant Cugat del Vallès, Barcelona, Spain
Email for privacy matters: contact@nenetoys.com

2. What data we process, why, and on what legal basis

Purpose Data Legal basis (GDPR)
Processing and delivering your order, payments, returns and the legal guarantee Name, email, phone (if given), delivery and billing address, order details, payment status (we do not store full card numbers) Performance of the contract (art. 6.1.b)
Invoicing, accounting and tax obligations Order, billing and tax data Legal obligation (art. 6.1.c)
Customer account (if you create one) Name, email, addresses, order history Performance of the contract (art. 6.1.b)
Answering your questions and complaints Contact details and the content of your message Performance of the contract or pre-contractual steps (art. 6.1.b) and our legitimate interest in answering you (art. 6.1.f)
Newsletter and marketing emails Email, name, purchase preferences Your consent (art. 6.1.a). For existing customers, emails about similar products may be sent under art. 21.2 of Spanish Law 34/2002 (LSSI); you can opt out at any time
Fraud prevention and Site security IP address, device and browser data, order data Legitimate interest (art. 6.1.f)
Analytics and personalisation through non-essential cookies Browsing data, device identifiers Your consent (art. 6.1.a and art. 22.2 LSSI)

Providing the data marked as required at checkout is necessary to complete your order. If you do not provide it, we cannot process the order.

3. Cookies

We use cookies that are strictly necessary for the Site and checkout to work. We only use analytics, personalisation or advertising cookies if you accept them in our cookie banner. You can accept, reject or configure them, and change your choice at any time through the cookie settings link on the Site.

4. Who we share your data with

We do not sell your personal data. We share it only with service providers who process it on our behalf, under a data processing agreement, or where required by law:

  • Shopify (Shopify International Limited, Ireland), which hosts our online store and checkout.
  • Payment providers shown at checkout, which process your payment. They do not share your full card details with us.
  • Amazon (Multi-Channel Fulfilment), which stores our products and prepares and ships your order, together with the carriers that deliver it. They receive your name, delivery address and, where needed for delivery, your contact details.
  • Apps that run our store, such as our cookie consent tool and email messaging tool.
  • Our accountants and advisers, and public authorities such as the tax administration, where the law requires it.

5. International transfers

Some of our providers, or their subprocessors, may process data outside the European Economic Area, for example in Canada or the United States. In those cases the transfer is covered by an adequacy decision of the European Commission (such as the decision for Canada or the EU-US Data Privacy Framework for certified companies) or by the European Commission's Standard Contractual Clauses. You can ask us for more information about these safeguards.

6. How long we keep your data

  • Order, invoice and accounting data: for six years, as required by Spanish commercial law (article 30 of the Commercial Code), and in any case for as long as tax obligations can be reviewed.
  • Data needed to handle the legal guarantee and possible claims: for the duration of the guarantee and the applicable limitation periods.
  • Customer account data: until you close your account.
  • Marketing data: until you withdraw your consent or unsubscribe.
  • Cookies: for the period shown in the cookie settings.

After these periods we delete or anonymise the data.

7. Your rights

You can request access to your data, rectification, erasure, restriction of processing, data portability, and object to processing. Where processing is based on consent, you can withdraw it at any time, without affecting processing carried out before. To exercise your rights, email contact@nenetoys.com. We may ask you to confirm your identity. We will reply within one month.

If you believe we have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the data protection authority of your country of residence.

8. Children

Our products are for children, but our Site and purchases are intended for adults. We do not knowingly collect personal data from children under 14. If you believe a child has sent us personal data, please contact us so we can delete it.

9. Security

We and our providers apply technical and organisational measures to protect your data, including encrypted connections (HTTPS) and restricted access to personal data.

10. Changes to this policy

We may update this Privacy Policy. The current version is always available on this page. Last updated: November 2026.