Privacy policy

1. Data controller

The controller responsible for processing personal data is:

FLODEN COMPANY, S.L.
Spanish Tax Identification Number (NIF): B21940291
Registered office: Calle Les Fogueres de Sant Joan, 4, Block 2, Entrance 1, 3rd Floor, Door B, 03005 Alicante, Spain
Email: info@flodenbrand.com

2. Personal data we process

Depending on how you use our website and services, we may process the following categories of data:

• Your full name.
• Your postal address, billing address and email address.
• Information required to manage orders and issue invoices.
• Information about purchases, pre-orders, cancellations, returns and incidents.
• Payment information provided to payment service providers.
• Customer account access and usage data, where an account is created.
• Communication preferences and subscriptions to marketing communications.
• Photographs or other information submitted to manage an incident.
• Technical data, identifiers and browsing data obtained through cookies or similar technologies.
• Information used to detect and prevent fraudulent transactions.

FLODEN COMPANY, S.L. does not store the complete card details used to make payments. These details are processed directly by the payment service providers.

3. Sources of personal data

Personal data may be obtained:

• Directly from the user when they make a purchase, create an account, subscribe, request a product availability notification or contact us.
• From Shopify and the technology providers used to operate the store.
• From payment and fraud-prevention service providers.
• From delivery companies when they provide information about a delivery.
• Through cookies and similar technologies when they have been authorised or are technically necessary.

4. Purposes and legal bases

Managing orders and purchases

We use personal data to:

• Process orders and payments.
• Prepare and deliver purchases.
• Send communications relating to orders.
• Manage pre-orders, cancellations, returns and refunds.
• Issue invoices where applicable.
• Provide customer service.

The legal basis is the performance of the sales contract and taking steps requested before entering into the contract.

Responding to enquiries, complaints and incidents

When you contact us at info@flodenbrand.com, we will use the information provided to respond to, follow up on and resolve your request.

If you send us photographs of an incorrect, damaged or defective garment, we will use them to assess and manage the incident.

The legal basis will be the performance of the contract where the enquiry relates to an order and, in all other cases, our legitimate interest in responding to the requests we receive.

Managing customer accounts

If you choose to create an account, we will process your data to identify you, facilitate future purchases and provide the features available in the store.

The legal basis is the performance of the relationship requested by the user. Creating an account is optional, and customers may also purchase as guests where this option is available.

Sending marketing communications

If you voluntarily select the relevant checkbox, we will use your email address to send you information about FLÖDEN, pre-orders, new releases and other marketing updates.

The legal basis is your consent. The checkbox will not be pre-selected, and you may unsubscribe using the link included in each communication or by contacting us at info@flodenbrand.com.

We will not send marketing communications to anyone who has not expressly subscribed, except where permitted by applicable law.

Product availability notifications

If you ask us to notify you when a garment becomes available again, we will use your email address solely to manage that notification.

Requesting an availability notification does not constitute a subscription to the newsletter. The legal basis is your consent.

Website analytics and advertising

If you accept the relevant cookies, we may use analytics, advertising measurement, audience segmentation and retargeting tools to understand how the website is used, measure campaigns and display advertising relating to FLÖDEN.

The legal basis is your consent, which you may give, refuse or modify through the cookie preferences panel.

The categories and tools used are described in our Cookie Policy.

Compliance with legal obligations

We will also process and retain the data required to comply with our tax, accounting, commercial, consumer protection, product safety and fraud-prevention obligations.

The legal basis is compliance with the legal obligations applicable to FLODEN COMPANY, S.L.

5. Required and optional data

Information identified as mandatory during checkout is required to process the order, manage payment and complete the delivery.

If the user does not provide this information or provides incomplete or incorrect information, we may be unable to enter into or perform the purchase contract.

Creating an account, subscribing to marketing communications, requesting availability notifications and accepting non-essential cookies are voluntary.

6. Data retention

Personal data will be retained for the following periods:

• Orders, invoices and payments: for the duration of the contractual relationship and the periods required under applicable tax, accounting, commercial and consumer protection regulations.
• Enquiries, incidents and complaints: for the time required to resolve them and address any potential liabilities.
• Photographs relating to incidents: for the time required to manage the incident and, subsequently, for the periods applicable to potential claims.
• Customer accounts: while they remain active or until their deletion is requested, except for information that we are legally required to retain.
• Newsletter and marketing communications: until consent is withdrawn or the user unsubscribes.
• Availability notifications: until the notification is sent, consent is withdrawn or it is no longer reasonable to retain the request.
• Data obtained through cookies: for the periods stated in the Cookie Policy or until consent is withdrawn, where applicable.

When personal data is no longer required, it will remain restricted for the applicable statutory periods and will subsequently be deleted.

7. Recipients and service providers

We may provide strictly necessary personal data to service providers that help us deliver our services, including:

• E-commerce and web-hosting platforms.
• Payment and fraud-prevention service providers.
• Transport and logistics companies.
• Email and marketing communication providers.
• Invoicing, accounting and professional advisory providers.
• Development, maintenance and technical support providers.
• Analytics and advertising providers authorised through cookies.
• Public authorities, courts and other competent bodies where a legal obligation exists.

These providers will process personal data in accordance with their functions, contracts and applicable confidentiality and data protection obligations.

The factory that manufactures the garments will not receive customer data or dispatch orders directly to consumers.

Shopify

The store is hosted on Shopify, which processes information relating to the use of the store to provide, protect and improve its services, manage checkout, prevent fraud and comply with its own legal obligations.

Shopify may act as a processor on behalf of FLODEN COMPANY, S.L. and, for certain processing activities carried out for its own purposes, in accordance with its privacy documentation.

Further information is available in the Shopify Consumer Privacy Policy. You can also manage certain uses of your data through Shopify’s Privacy Portal.

8. International data transfers

Some technology providers may process personal data outside the European Economic Area.

Where international transfers take place, the mechanisms permitted under applicable regulations will be used, including European Commission adequacy decisions, standard contractual clauses or other appropriate safeguards.

9. Fraud prevention and automated decisions

Shopify, payment providers and other authorised providers may carry out automated checks to detect and prevent fraudulent transactions.

These checks may result in a transaction being reviewed or suspended, or in a payment not being authorised.

If you believe that a transaction has been rejected in error or wish to request a review of a decision, please contact us at info@flodenbrand.com.

10. User rights

You may exercise the following rights:

• Access your personal data.
• Request the correction of inaccurate data.
• Request its deletion when it is no longer required.
• Request the restriction of its processing.
• Object to its processing in certain circumstances.
• Request the portability of your data.
• Withdraw consent previously given.
• Where applicable, not be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

To exercise these rights, please contact us at info@flodenbrand.com, stating the right you wish to exercise.

We may request additional information where necessary to verify the identity of the person making the request.

Withdrawal of consent will not affect the lawfulness of any processing carried out before consent was withdrawn.

If you believe that your personal data has not been processed correctly, you may lodge a complaint with the Spanish Data Protection Agency.

11. Minors

The store, customer accounts and subscriptions to marketing communications are intended for persons over the age of 18.

We do not intentionally collect personal data from minors. If we become aware that a minor has provided personal data without the appropriate authorisation, we will delete it.

12. Security

We implement reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

However, no system connected to the Internet can guarantee absolute security.

Users must keep their login credentials confidential and notify us of any unauthorised use of their account.

13. Third-party links

The website may contain links to websites or services operated by third parties. FLODEN COMPANY, S.L. does not control the privacy practices of those third parties.

We recommend reviewing their privacy policies before providing them with personal data.

14. Amendments

We may update this policy to reflect legal or technical changes or changes to the services used.

The current version will always be available on this page and will state the date on which it was last updated.

Last updated: September 2026.