PRIVACY POLICY

1. Data Controller
• Identity: OLIVELY SLU
• NRT: L-718063-U
• Address: Av. de la Cortinada 5, Local 1, AD300 Ordino, Andorra
• Email: hello@olively.store

2. Data we collect
OLIVELY SLU collects the following personal data:
• First and last name
• Email address
• Postal address (for order delivery)
• Browsing data through technical and analytical cookies (see Cookie Policy)

3. Purpose and legal basis for processing
• Order and shipping management: performance of the sales contract (Art. 6.1.b GDPR / LQPD).
• Sending commercial communications and newsletters: consent of the data subject (Art. 6.1.a GDPR / LQPD).
• Compliance with legal obligations: Andorran tax and accounting regulations.

4. Data retention
Data will be retained for as long as necessary for the purposes for which it was collected and, subsequently, for the applicable legal limitation periods (generally 5 years for commercial and tax obligations in Andorra).

5. Recipients
Data will not be shared with third parties unless required by law or when necessary for the provision of the service (e.g., logistics companies for order delivery, e-commerce platform Shopify Inc.). In cases where the recipient is located outside the European Economic Area, OLIVELY SLU ensures appropriate safeguards in accordance with the GDPR.

6. Data subject rights
Users may exercise the following rights at any time by contacting hello@olively.store
• Right of access to their personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time, without affecting the lawfulness of prior processing

Users also have the right to lodge a complaint with the Andorran Data Protection Authority (APDA) — www.apda.ad — or, if located in the EU, with the supervisory authority of their Member State.

7. Security
OLIVELY SLU implements appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, or destruction, in accordance with the LQPD and GDPR.