Privacy Policy — Infanmelli

Last updated: 1 June 2026

This Privacy Policy explains how Infanmelli SL ("Infanmelli", "we", "us", or "our") collects, uses, stores, and protects your personal data when you visit infanmelli.life or use our floral interior styling services. We are committed to complying with Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).

1. Data Controller

Infanmelli SL
CIF: B67234589
Carrer de Provença 312, 08037 Barcelona, Spain
Email: [email protected]
Phone: +34 93 457 28 41

2. Personal Data We Collect

We may collect the following categories of personal data:

Identity data: name, title
Contact data: email address, phone number, postal address
Transaction data: details of services purchased, payment information (processed by third-party payment providers)
Technical data: IP address, browser type, device information, pages visited (via cookies — see our Cookie Policy)
Communication data: messages sent via our contact form or email correspondence
Preference data: styling preferences, service interests, consent records

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

Consent (Art. 6(1)(a)): contact form submissions, marketing communications, non-essential cookies
Contract performance (Art. 6(1)(b)): providing floral styling services you have requested
Legitimate interests (Art. 6(1)(f)): website security, fraud prevention, service improvement
Legal obligation (Art. 6(1)(c)): tax and accounting records as required by Spanish law

4. How We Use Your Data

We use your personal data to:

Respond to enquiries and provide quotations
Deliver floral styling services and manage subscriptions
Process payments and maintain financial records
Send service-related communications (appointment confirmations, delivery updates)
Improve our website and services through anonymised analytics (with consent)
Comply with legal and regulatory obligations

5. Data Retention

We retain personal data only for as long as necessary:

Enquiry data: 24 months from last contact
Client and transaction records: 6 years (Spanish tax law requirement)
Marketing consent records: until consent is withdrawn, plus 3 years
Cookie consent records: 12 months
Website analytics data: 14 months (anonymised)

6. Data Sharing

We do not sell your personal data. We may share data with:

Payment processors for transaction handling
Email service providers for communication delivery
Cloud hosting providers (EU-based data centres)
Professional advisers (accountants, lawyers) when required
Public authorities when legally obligated

All third-party processors are bound by data processing agreements compliant with GDPR Article 28.

7. International Transfers

Your data is primarily processed within the European Economic Area (EEA). If any transfer outside the EEA is necessary, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Your Rights

Under GDPR, you have the following rights:

Right of access — request a copy of your personal data
Right to rectification — correct inaccurate or incomplete data
Right to erasure — request deletion of your data ("right to be forgotten")
Right to restrict processing — limit how we use your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — withdraw consent at any time without affecting prior lawful processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), access controls, and regular security reviews.

11. Children's Privacy

Our services and website are not directed at individuals under 16 years of age. We do not knowingly collect data from children.

12. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Contact

For any questions about this Privacy Policy or your personal data, please contact:
Infanmelli SL
Carrer de Provença 312, 08037 Barcelona
Email: [email protected]
Phone: +34 93 457 28 41