Privacy policy

1. About This Policy

This e-commerce website and the services attached to it (together, the "Platform") are run by Labchaparro ("we", "us", "our"), a store operated by Gomerchantsolutions Limited, registered in England and Wales under company number 17322088. Handling your personal data responsibly, and protecting your privacy while we do it, matters to us.

Using or accessing the Platform means you accept the terms described below.

2. The Data We Hold

Personal information reaches us in three ways — you give it to us, it is captured automatically, or a third party passes it on. It includes, but is not limited to:

Identification and contact details: your name, email address, telephone number, and your delivery and billing addresses.
Purchase and payment records: what you bought or sent back, the amounts involved, and payment references. Full payment data is processed securely by our payment providers.
Account details: your sign-in credentials and saved preferences, where you have registered with us.
Support correspondence: the messages and attachments you exchange with our team.
Technical information: IP address, device and browser details, operating system, the pages you view, and cookies and tracking identifiers.

3. Where the Data Comes From

From you directly — when an order is placed, an account registered, a newsletter subscribed to, or support contacted.
Automatically — through cookies, pixels, and comparable technologies as you move around the Platform.
From our service providers — payment processors, delivery companies, marketing platforms, and analytics providers.

4. Why We Process It

Your data is used for these purposes:

Fulfilling orders and supporting customers: processing purchases, delivering goods, dealing with returns, and answering enquiries.
Taking payment and preventing fraud: collecting payment securely and protecting against unauthorised transactions.
Analytics and improvement: understanding how the Platform is used so that our service gets better.
Marketing: sending newsletters and offers, subject to your consent where consent is required. You can opt out whenever you wish.
Meeting legal obligations: satisfying our legal and tax duties and responding to lawful requests.

5. Cookies and Similar Technologies

Cookies and comparable technologies are used on the Platform in order to:

make core site functions work;
remember the preferences you have set;
measure how the site performs; and
deliver marketing messages that are relevant to you.

Cookies can be managed or switched off in your browser settings, though some features of the Platform may not work properly if you do so.

6. Who We Share It With

Personal data is shared only where sharing is necessary, and then with:

Our platform provider: Shopify, which hosts the store and manages orders.
Payment processors, for secure payment transactions.
Delivery and fulfilment partners, so that your order reaches you.
Analytics and marketing services, to improve our service and our communications.
Legal and professional advisers, where required.
An acquiring party, in the event of a merger or a sale of the business.

Your personal data is never sold to third parties.

7. Transfers Outside the United States

Where it is relevant, service providers located outside the United States — including in the United Kingdom and the European Economic Area — may process your data. Appropriate safeguards are put in place so that your information stays protected in line with applicable law.

8. How Long We Keep It

Data is retained only for as long as the purposes above require and for as long as the law obliges us to hold it:

Transaction records: up to 10 years.
Account data: for as long as the account stays active.
Support correspondence: up to 3 years after the matter is closed.
Marketing preferences: until you opt out.

9. The Rights You Have

Subject to where you live and which laws apply, you may be entitled to:

obtain access to your personal data and a copy of it;
ask for it to be corrected or erased;
restrict how it is processed, or object to processing;
withdraw your consent where consent is the basis for processing.

Write to contact@labchaparro.com to exercise any of these rights. We may first need to verify who you are, and we will reply within a reasonable period.

10. Children

The Platform is not aimed at anyone under 13 years of age, and data is not knowingly collected from children. Please contact us if you believe we hold data belonging to a child, and we will delete it.

11. Automated Decisions

We do not carry out automated decision-making that has legal effects concerning you, or effects of comparable significance.

12. Our Shopify Storefront

The store operates on Shopify, which acts as our data processor. Shopify's own Privacy Policy sets out how it handles data.

13. Revisions

This Privacy Policy may be updated from time to time. Changes are published on this page together with the date of the latest revision, and continued use of the Platform indicates that you accept the updated policy.