Privacy policy
Last updated: October 2026
This policy explains how The Woolcatcher processes your personal data when you visit our website, shop on it, subscribe to our newsletter or contact us, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
WIP TO FO, S.L. (The Woolcatcher) · Tax ID B21884507 · Calle Patricia Urquiola Hidalgo 2, Esc. C, 33007 Oviedo (Asturias), Spain · hello@thewoolcatcher.com · +34 646 19 38 41.
2. What data we process
- Identification and contact: first name, surname, email, phone, shipping and billing addresses.
- Orders and transactions: products purchased, amounts, returns, payment method used (we do not store your full card details).
- Customer account: login credentials and preferences, if you create an account.
- Communications: the content of your messages and complaints.
- Reviews: your name or nickname, rating, text and photos you publish.
- Browsing data: IP address, device, browser and interaction with the website, via cookies when you consent (see our Cookie policy).
3. Why we use it, legal basis and retention period
| Purpose | Legal basis | Retention period |
|---|---|---|
| Managing orders, payments, shipping, returns and guarantees | Performance of the contract | For the duration of the relationship and thereafter for the statutory limitation periods |
| Invoicing, accounting and tax obligations | Legal obligation | 6 years (Commercial Code) and 4 years (tax law) |
| Managing your customer account | Performance of the contract | Until you request its deletion |
| Handling enquiries and complaints | Performance of the contract / legitimate interest | Up to 3 years after resolution |
| Sending our newsletter and marketing communications | Your consent | Until you unsubscribe |
| Sending offers for products similar to those already purchased | Legitimate interest (Art. 21.2 LSSI), with an unsubscribe option in every email | Until you object |
| Requesting and publishing reviews of your purchase | Legitimate interest / your consent when you publish it | While the review is published |
| Web analytics and personalised advertising (Google, Meta) | Your consent (cookie banner) | As set out in the Cookie policy |
| Preventing fraud and ensuring security | Legitimate interest | As long as necessary for this purpose |
| Defending our rights in the event of claims | Legitimate interest | Until the relevant limitation periods expire |
Data marked as mandatory during checkout is necessary to process your order; without it we cannot fulfil it. We do not make decisions based solely on automated processing that produce legal effects concerning you.
4. Recipients
We only share your data with the providers needed to deliver our service, who act as processors or, in some cases, as independent controllers:
- Shopify (Shopify International Ltd., Ireland): shop platform and hosting.
- Payment methods: Shopify Payments, PayPal, Apple Pay and Google Pay.
- Shipping: FedEx, Correos, Packlink and other courier companies that carry out delivery.
- Reviews: Judge.me.
- Online withdrawal: Revoq (BuschBytes), to manage withdrawal requests.
- Analytics and advertising, only with your consent: Google and Meta.
- Email service provider for the newsletter.
- Accounting and tax advisers, and public authorities where required by law (for example, the Spanish Tax Agency or customs).
We do not sell your personal data.
5. International transfers
Some providers (for example, Shopify, Google, Meta, PayPal or FedEx) may process data outside the European Economic Area. In such cases, the transfer is based on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework or the decision on Canada) or on standard contractual clauses. For shipments to countries outside the EEA, we share your delivery details with the carrier and the customs authorities of the destination country because this is necessary to perform the contract.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent at any time, by writing to hello@thewoolcatcher.com and stating the right you wish to exercise. If necessary to verify your identity, we will ask you for additional information. We will reply within one month.
You can unsubscribe from the newsletter at any time using the link in every email, and change your cookie preferences via the "Cookie settings" link in the footer.
If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the data protection authority of your country of residence.
7. Children
Our website is not aimed at children under 14 and we do not knowingly process their data. You must be 18 or over to make a purchase.
8. Security
We apply appropriate technical and organisational measures to protect your data. Payments are processed over encrypted connections through certified providers.
9. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. We will publish the current version on this page, showing the date of the last update, and inform you of any significant changes.