Clear information with no small print
Privacy policy
Everything you need to shop and use Lullaby Chuli Box with confidence.
The shop does not store cards or banking credentials
Lullaby Chuli Box does not request or store full card numbers, expiry dates, CVV/CVC codes, PINs, online-banking passwords or bank-account login credentials. These details are entered only on the secure page operated by Mollie or the selected payment provider and do not pass through this shop's forms.
The embedded card form, saved cards for one-click payments, Mollie customer profiles, subscriptions and detailed plugin debug logging are disabled. Checkout is guest-only: no reusable website account or password is created.
To manage the order and meet legal obligations, we do retain contact, billing and delivery details, the products purchased and administrative transaction data such as the identifier, payment method, amount and status. Mollie, the bank and the selected payment provider may process and retain payment data under their own policies and legal obligations. See Mollie's Privacy Statement.
Basic data protection information
- Controller
- Enrique García Martín, Spanish tax ID 78107650H, business address in Granada, Spain. Contact: [email protected].
- Purposes
- Answering enquiries and managing guest purchases, orders, payments, deliveries, returns and accounting duties. If selected, recording and publishing game and packing videos and tagging the username provided.
- Legal basis
- Performance of a contract or pre-contractual measures, legal duties and consent where applicable.
- Recipients
- Cloudflare; Mollie B.V. and relevant financial institutions; Correos or an equivalent carrier; and social platforms when video publication is selected.
- Rights
- Access, rectification, erasure, objection, restriction, portability and withdrawal of consent, plus the right to complain to the Spanish Data Protection Agency.
Data we may process
Identity and contact details, delivery and billing addresses, order history, incidents, messages, preferences and gift notes. If video is selected, recorded content and the username used for tagging. Full card details are handled by the payment provider and are not stored by this shop.
Infrastructure and payments
The origin server runs on directly managed infrastructure in Spain. Cloudflare provides security, networking and content delivery.
Payments are handled by Mollie B.V.. Read Mollie's privacy statement.
Packaging videos and social media
If selected, the game and packing are recorded and may be posted on official profiles with the supplied username tagged. Posts are public and may be viewed, shared or copied. Addresses, payment details and order numbers are not shown.
There is no automatic deletion schedule. You may request removal of a tag or post by email.
Retention and security
Order data is kept during the contractual relationship and then blocked for applicable legal periods. Proportionate technical and organisational safeguards are applied.
International transfers and children
Cloudflare and social platforms may process data outside the EEA under their safeguards and policies. Read Cloudflare's privacy policy. The shop is not intended for children who cannot contract independently under applicable law.
Exercising your rights
Email [email protected]. You may also contact the Spanish Data Protection Agency.