Privacy
We collect what an order needs and nothing else: a name, a way to reach you, and the address the courier has to drive to.
Who is responsible
FLOFUM, S.L., Calle Parcerisa 13, Local 1, 08014 Barcelona, Spain, CIF B75621250, trading as Mavrora. Data protection questions: support@mavrora.com.
What we hold
| Data | Where it comes from | Why |
|---|---|---|
| Name, email, phone, country, tool | The enquiry form or your email | To answer your question |
| Name, address, phone, email | The checkout, when you order | To confirm the order and give the courier a delivery address |
| Order records and correspondence | The order itself | Proof of sale, guarantee claims, tax records |
| Bank details (IBAN) | Only if you ask for a refund | To transfer a refund back when you paid the courier in cash |
| The IP address a form was sent from | Your browser | To recognise automated abuse of the form |
There are no accounts and no passwords on this site. Card payments are handled by the payment provider named at the checkout, so card numbers never reach us; with cash on delivery there is nothing to handle at all.
Why we are allowed to hold it
- Steps before a contract and performance of it (Article 6(1)(b) GDPR) – orders, delivery, returns, guarantee.
- Legal obligation (Article 6(1)(c)) – invoices and accounting records kept as Spanish tax law requires.
- Legitimate interest (Article 6(1)(f)) – answering general questions and keeping the enquiry form from being abused.
Who else sees it
The courier who carries your parcel, because they must know the name, address and the sum to collect. Our hosting provider, which stores the site and its enquiry records. Our accountant and the Spanish tax authorities, for invoices. That is all: we do not sell personal data, we run no advertising, and no analytics or marketing company receives anything from this site.
Where it is kept
On servers inside the European Union. If that ever changes, this page will name the country and the safeguard used before the change takes effect.
How long
| Record | Kept for |
|---|---|
| Enquiries that do not become orders | 12 months |
| Order and delivery records | 4 years, to cover the three-year guarantee |
| Invoices and accounting records | 6 years, as Spanish law requires |
| Bank details used for a refund | Deleted once the transfer has cleared |
Your rights
You may ask for a copy of what we hold, have it corrected or deleted, restrict how we use it, receive it in a portable format, or object to use based on legitimate interest. Write to support@mavrora.com; we reply within one month and charge nothing. If you are not satisfied, you may complain to the Agencia Española de Protección de Datos or to the authority in the EU country where you live.
Security
The site runs over HTTPS. Enquiry records are readable only by the people who handle orders, and accounts that no longer need access are closed. We do not send marketing email, so there is no list to leak.
Cookies
A normal visit sets none. The detail is on the cookies page.
Last updated 23 September 2026
Mavrora