Privacy policy
Last updated: September 29, 2026
1. Who we are
The Last Tee is operated by Sebastián Fernández Alberdi, sole trader (autónomo), TIN/VAT number ES 09015671Q, registered address Calle Orense 61, Bajo A, 28020 Madrid, Spain.
Contact for privacy matters: info@thelasttee.com.
2. What data we collect, why, and on what legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Name, shipping/billing address, email, order contents | Process and fulfil your order, customer service | Contract (Art. 6.1.b GDPR) |
| Invoice and transaction records | Accounting, tax and legal compliance | Legal obligation (Art. 6.1.c) |
| Email address (newsletter / discount signup) | Send marketing about new drops, where you opted in | Consent (Art. 6.1.a) |
| Messages you send us (chat, contact form, email) | Answer your questions and handle your requests | Legitimate interest / pre-contractual steps |
| Technical, transaction and payment-related data | Prevent fraud, abuse and unauthorized transactions; keep the store secure | Legitimate interest / legal obligation |
| Analytics identifiers (cookies, device/browser data) | Measure engagement with individual designs (votes, views, wishlist interactions) and count unique interactions, to decide which designs stay in the catalogue | Consent, via our cookie banner |
| Advertising identifiers (cookies) | Run ad campaigns on Meta (Facebook/Instagram) and TikTok | Consent |
Providing your data: data needed to process an order (name, address, email) is required to fulfil the contract — without it we cannot ship your order. Providing data for marketing or analytics is always optional.
3. Who we share data with
- Shopify International Ltd. — our e-commerce platform and hosting provider. Shopify processes personal data on our behalf as a processor for running the store and checkout, and may also act as an independent controller for certain purposes of its own, as described in Shopify's own privacy policy.
- Payment service providers (Shopify Payments — including Apple Pay, Google Pay and Klarna — PayPal and MONEI) — we do not collect or store your card or payment details ourselves; payment is processed directly by these providers. Each provider handles the payment details needed to complete your transaction and, for its own regulatory obligations (e.g. anti-money-laundering, fraud prevention), acts as an independent controller for that processing.
- Printful, Inc. — our print-on-demand fulfilment partner. We share the name, shipping address, and order details necessary for them to manufacture and ship your order directly to you.
- Shopify Inbox — the chat on our store, provided by Shopify. Your messages are processed by Shopify, including an AI assistant that answers on our behalf; we can read the conversation.
- hCaptcha (Intuition Machines, Inc., USA) — protects our newsletter and contact forms against spam and bots. It processes your IP address and browser data only when you use those forms.
- Google Analytics — used, only with your consent, to measure engagement with individual designs (such as votes, views and wishlist interactions) and to count unique interactions. We use this to evaluate which designs perform best and decide which stay in the catalogue. We do not use Google Analytics to identify individual customers or build individual customer profiles.
- Meta Pixel / TikTok Pixel — used, only with your consent, to measure and run advertising campaigns on Facebook, Instagram and TikTok.
We do not sell your personal data.
4. International transfers
Where personal data is transferred outside the European Economic Area (e.g. by Shopify, Printful, hCaptcha, Meta or TikTok), the transfer is carried out under Chapter V GDPR — via an adequacy decision, Standard Contractual Clauses, Binding Corporate Rules, or another lawful mechanism, as applicable to that provider.
5. How long we keep data
- Invoices and accounting records: 6 years (Spanish Commercial Code, art. 30).
- Order data (name, address, order contents): 6 years from the order, to cover the legal guarantee and any claims.
- Customer service messages: 1 year after the request is closed, or as long as the related order data if they concern an order.
- Newsletter: until you unsubscribe.
- Analytics and advertising cookies: only if you accept them in the cookie banner, and for as long as each cookie lasts — up to 2 years (Google Analytics), less for the rest.
6. Your rights
Under GDPR you can request: access, rectification, erasure, restriction, objection, and data portability (where processing is based on consent or contract and carried out by automated means). Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you — and you have the right not to be subject to such decisions.
To exercise any of these rights, contact info@thelasttee.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es.
7. Cookies
We use cookies and similar technologies on our store. Essential cookies (cart, checkout, security) are required for the store to function. For analytics and advertising cookies (Section 3) we ask for your consent, and you can change or withdraw it at any time via our cookie preferences.
8. Security
We apply appropriate technical and organizational measures to protect your data, and rely on our providers' (Shopify, Printful, payment providers) own security safeguards for the data they process on our behalf.
9. Children
Our store is not directed at children. In line with Spanish law (LOPDGDD), we do not knowingly collect personal data based on a child's own consent below the age of 14. If you believe a child has provided us data without appropriate parental/guardian authorization, contact us and we will take appropriate steps.
10. Changes to this policy
We may update this policy as the business evolves (new markets, new tools, new advertising channels). Material changes will be reflected here with an updated date.