Privacy policy
Last updated: 30 August 2026
Who handles your data
The data controller is Bagalux Marbella S.L. (trading as BAG À LUX), tax ID B56952047, registered at Avenida de la Marina, Local 7A, 11310 Puerto de Sotogrande, Cádiz (Spain). Email: info@bagaluxboutique.com. Phone: +34 659 565 011.
What we collect, and when
We only handle personal data in three situations, and in all three you make the first move:
- If you fill in the sell or consign form: your name, your phone number, your email address and whatever you tell us about the piece in your message.
- If you tap a WhatsApp button: we keep a record of the page you wrote from, the piece you were looking at and, if you arrived from an advert, which campaign brought you. That record carries neither your name nor your number: it tells us which pieces draw interest.
- If you write to us by WhatsApp or email, or call: whatever you choose to tell us in that conversation.
What we do not do
We use Google Analytics to learn which pages and which pieces draw interest, with IP addresses anonymised. We do not build personal profiles, we make no automated decisions about you, and we neither sell nor share your data with anyone for commercial purposes.
Google Analytics runs here without cookies: it stores nothing in your browser. The only thing the site stores is, if you arrived from an advert, which campaign it was, held in session storage. It clears itself when you close the tab.
Why, and on what legal basis
- To answer your enquiry and value your piece: performance of a contract or of pre-contractual steps taken at your request (Article 6(1)(b) GDPR).
- To learn which pieces draw interest and which campaigns work: our legitimate interest in understanding how the site is used (Article 6(1)(f)), using data that does not identify you.
- To meet our tax and accounting obligations when a purchase is involved: legal obligation (Article 6(1)(c)).
How long we keep it
Enquiries that do not lead to a transaction are kept for one year. Where there is a purchase, sale or consignment, the data attached to it is kept for as long as Spanish tax and commercial law requires. Records of site use are kept for twenty-four months.
Who else sees it
Nobody for their own purposes. We rely on two providers who act as data processors on our behalf:
- Supabase, which hosts the database where enquiries are stored. Its servers are in the European Union (Frankfurt).
- Netlify, which hosts and serves this website.
If you write to us on WhatsApp, that conversation takes place on a Meta Platforms service, under its own terms and its own privacy policy. If you would rather not use it, email us or call instead.
The boutique page carries a map embedded from Google Maps so you can find the shop: when you open that page your browser contacts Google, which applies its own terms and its own privacy policy. No other page on the site carries it.
Your rights
You can ask us at any time to give you access to your data, correct it, delete it, restrict how we use it, object to our using it, or hand it over to someone else. Just write to info@bagaluxboutique.com saying what you want. We will reply within one month.
If you believe we have not dealt with your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es), which is the competent supervisory authority.
Children
This site is not aimed at children under fourteen and we do not knowingly collect their data.
Anything here you would like explained? Email us at info@bagaluxboutique.com or call +34 659 565 011. You are also welcome at the boutique, Avenida de la Marina, Local 7A, Puerto de Sotogrande.
