Privacy policy

This policy explains how MUGO DEPARTMENT SL uses your personal data when you visit www.mugodepartment.com, create an account, buy from us, contact us or subscribe to our communications. It complies with the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD).

1. Data controller

Company: MUGO DEPARTMENT SL
CIF: B55397582
Address: Calle José Luis Velasco 15, 28250 Torrelodones (Madrid), Spain
Email: help@mugodepartment.com

2. What data we collect

Identification and contact data: name, email, phone number, billing and shipping address.
Order data: products bought, order history, returns, exchanges and refunds.
Payment data: processed directly by our payment providers. We do not store your full card details.
Account data: if you create an account, your login details and preferences.
Communications: what you tell us when you contact us or open a ticket.
Browsing data: IP address, device, browser and how you use the website, collected through cookies and similar technologies (see section 8).

We do not process special categories of data (such as health data).

3. Why we use your data and on what legal basis

To process and deliver your orders, and to manage returns, exchanges and refunds. Legal basis: performance of the purchase contract.
To answer your questions and give you customer service. Legal basis: your request and our legitimate interest in helping you.
To issue invoices and meet our tax and accounting obligations. Legal basis: legal obligation.
To send you our newsletter and offers by email or SMS. Legal basis: your consent, which you can withdraw at any time with the unsubscribe link in every message. If you are already a customer, we may send you offers about products similar to those you bought, based on our legitimate interest; you can object at any time.
To measure and improve the website and to show you relevant advertising on other platforms. Legal basis: your consent through the cookie banner.
To prevent fraud and keep the website secure. Legal basis: our legitimate interest.

4. How long we keep your data

Order and invoice data: for as long as the law requires (6 years under the Spanish Commercial Code, and the periods set by tax law).
Account data: until you delete your account.
Marketing data: until you unsubscribe or withdraw your consent.
Customer service communications: up to 24 months after the matter is closed.
Cookies: for the period shown in the cookie banner.

After these periods, data is deleted or kept blocked only for the time needed to deal with possible legal claims.

5. Who we share your data with

We only share the data each provider needs to do its job, under a data processing agreement. We work with the following categories of providers:

E-commerce platform: Shopify, which hosts our online store, checkout and customer accounts.
Payment providers, to process your payment (those shown at checkout).
Logistics and carriers: Amphora Logistics, which prepares and ships our orders, and the carrier that delivers your parcel.
Returns and exchanges: Reveni, which runs our returns portal.
Email and SMS marketing: Klaviyo, to send our newsletter, offers and "back in stock" notifications.
Customer service and store tools, such as messaging, invoicing and promotions apps.
Analytics and advertising platforms, only if you accept the related cookies (see section 8).
Marketing and advertising service providers that help us manage our campaigns.
Public authorities, banks and professional advisers (such as our tax adviser), when the law requires it or to meet our obligations.

We do not sell your personal data.

6. International transfers

Some of these providers are located, or store data, outside the European Economic Area (for example, in the United States or Canada). In those cases transfers are protected by an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or by the European Commission's standard contractual clauses.

7. Your rights

You can ask us at any time to access, correct or delete your data, to restrict or object to its processing, or to receive it in a portable format. You can also withdraw any consent you have given, without affecting processing carried out before. Write to help@mugodepartment.com with the subject "Data protection". We may ask you for information to confirm your identity.

If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the data protection authority of your country.

8. Cookies

We use our own and third-party cookies and similar technologies:

Technical cookies (Shopify), needed for the website, the cart and checkout to work. They do not require consent.
Preference cookies (Shopify), to remember your country, language and currency.
Analytics cookies (Google and Microsoft Clarity), to understand how the website is used and improve it.
Advertising cookies (Meta, Google, TikTok, Pinterest and Klaviyo), to measure our ads and show you relevant ones on other platforms.
Third-party content such as YouTube or Vimeo videos may set their own cookies when you play them.

Analytics and advertising cookies are only used if you accept them in the cookie banner, where you can also reject them. You can change your choice at any time from the cookie banner or by deleting cookies in your browser settings. Each third party's own privacy and cookie policy explains how it uses the data it collects.

9. Minors

Our website is not aimed at children under 14. We do not knowingly collect data from children under 14 without the consent of their parents or guardians.