Privacy policy

PRIVACY POLICY
Last updated: 19 September 2026

1. Data controller
DXB-FACTOR CAR CARE, S.L. (DXB FACTOR) · Tax ID B26899062 · Rambla Sant Francesc, 23, 1.º 1.ª, 08720 Vilafranca del Penedès (Barcelona), Spain · info@dxbfactor.com · +34 661 230 441

2. What data we process
Name and contact details; shipping and billing addresses; data about your orders, returns and communications with us; payment data, which is processed by the payment gateways (we do not store your full card details); and, if you accept it, browsing data such as your IP address, device and interaction with the website.

3. Why we use it and on what legal basis

  • Managing your orders, payments, shipping and returns: performance of the purchase contract (Art. 6.1.b GDPR).
  • Handling your enquiries and complaints: performance of the contract and our legitimate interest in providing good service.
  • Meeting accounting and tax obligations: legal obligation (Art. 6.1.c GDPR).
  • Sending you marketing emails (news, promotions and purchase reminders): your consent when you subscribe (Art. 6.1.a GDPR). If you are already a customer, we may send you information about products similar to those you bought (Art. 21.2 of the Spanish LSSI). You can unsubscribe at any time using the link in every email.
  • Analytics, website improvement and advertising: your consent via the cookie banner.
  • Affiliate programme (attributing a sale to an affiliate code or link): legitimate interest.
  • Security and fraud prevention: legitimate interest.

4. Who we share your data with
We do not sell your data. We only share it with providers that process it on our behalf and with appropriate safeguards: Shopify (store platform and payments), Klaviyo (email sending), Microsoft Clarity (web analytics, only with your consent), UpPromote (affiliate programme), Packlink PRO and carriers (order delivery), payment providers such as PayPal or Klarna (if you choose them at checkout) and our accounting and tax advisers. Also with the authorities when required by law.

5. International transfers
Some providers (such as Shopify, Klaviyo or Microsoft) may process data outside the European Economic Area, for example in the United States or Canada. In those cases the safeguards set out in the GDPR apply: European Commission adequacy decisions (including the EU-US Data Privacy Framework where the provider is certified) or standard contractual clauses.

6. How long we keep it
Order and billing data, for as long as the law requires (up to 6 years). Data for marketing emails, until you unsubscribe. Cookie data, according to the duration of each cookie.

7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@dxbfactor.com with the subject “Data protection”. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country.

8. Cookies
We use technical cookies that are necessary for the store to work (cart, checkout, security) and, only if you accept them, analytics and marketing cookies. You can accept, reject or configure them in the cookie banner and change your choice at any time via “Your privacy choices” in the website footer.

9. Shopify
Our store runs on Shopify. For some features of its platform, Shopify acts as an independent data controller. More information in the Shopify Privacy Policy.

10. Minors
Our store is not aimed at children under 14 and we do not knowingly collect their data.

11. Changes
We may update this policy. We will always publish the current version on this page, with its update date.