Privacy policy

Last updated: August 25, 2026

SideBy Studio operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). SideBy Studio is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services or otherwise communicate with us. For the purposes of applicable data protection laws, including the EU General Data Protection Regulation (GDPR), SideBy Studio (Legal Entity: Jiameng Liu) is the data controller of your personal information.

Personal Information We Collect or Process

We collect personal information that identifies or can reasonably be linked to you. We may collect or process the following categories of personal information:

  • Contact details: Name, billing address, shipping address, phone number, and email address.
  • Financial information: Credit/debit card details, payment transaction details, payment confirmation, and billing details (processed securely via PCI-DSS compliant payment providers).
  • Account information: Username, password, security questions, preferences, and settings.
  • Transaction information: Items viewed, cart activity, wishlist items, past purchases, returns, or exchanges.
  • Communications: Information contained in customer support inquiries or direct messaging.
  • Device & Technical information: IP address, browser type, network connection, device attributes, and unique identifiers.
  • Usage information: Data regarding how and when you navigate or interact with our Services.

Legal Bases for Processing (GDPR Compliance)

If you reside in the European Economic Area (EEA) or the UK, we process your personal information under the following legal bases pursuant to Article 6 of the GDPR:

  • Performance of a Contract (Art. 6(1)(b)): To process payments, fulfill orders, arrange shipping, manage customer accounts, and facilitate returns/exchanges.
  • Legitimate Interests (Art. 6(1)(f)): To secure our website, prevent fraud, improve customer service, and analyze website traffic to optimize your shopping experience.
  • Compliance with Legal Obligations (Art. 6(1)(c)): To comply with tax, accounting, statutory record-keeping, and consumer protection laws under Spanish and EU regulation.
  • Consent (Art. 6(1)(a)): For non-essential tracking cookies, direct email marketing, and personalized advertising. You may withdraw your consent at any time.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to power our store, remember your preferences, and run analytics.

  • Essential Cookies: Necessary for order processing and site functionality (processed under contract performance/legitimate interest).
  • Analytics and Advertising Cookies: Placed only with your explicit prior consent via our Cookie Banner. You can modify or withdraw your cookie choices at any time through our cookie settings banner or browser settings.

How We Disclose Personal Information

We may disclose your personal information to third parties for legitimate business purposes:

  • Shopify and Technical Vendors: To host our store, process payments, support cloud storage, manage IT logistics, and fulfill orders.
  • Shipping Partners: To deliver your purchases to your shipping address.
  • Marketing and Analytics Partners: With your consent, to deliver targeted advertising and assess campaign performance.
  • Legal and Regulatory Authorities: To comply with court orders, tax audits, law enforcement requests, or to enforce our legal rights.

Relationship with Shopify

Our store is hosted by Shopify Inc. Shopify processes your personal information on our behalf to deliver the Services. In certain instances, Shopify acts as an independent data controller (e.g., for cross-merchant fraud prevention or targeted advertising tools).

To learn more about how Shopify processes personal data, please visit the Shopify Consumer Privacy Policy. If you wish to exercise data rights regarding Shopify's processing, you can visit the Shopify Privacy Portal.

International Data Transfers

As Shopify operates globally, your personal data may be transferred to and processed outside the European Economic Area (EEA), including in Canada and the United States.

Whenever we transfer your personal information outside the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • Transfers to countries deemed to provide an adequate level of protection by the European Commission.
  • Standard Contractual Clauses (SCCs) approved by the European Commission.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, tax, or reporting requirements. For example, commercial transaction data is retained for the statutory period required under Spanish tax and accounting law (typically 4 to 6 years).

Your Rights under EU/UK Law

Under the General Data Protection Regulation (GDPR), if you reside in the EEA or UK, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when it is no longer needed.
  • Right to Restrict Processing: Request that we limit how we process your data.
  • Right to Data Portability: Request transfer of your data to another controller in a structured format.
  • Right to Object: Object to our processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us at the details provided below. We will respond within 30 days.

Complaints

If you believe our processing of your personal information infringes upon data protection laws, you have the right to lodge a complaint with a supervisory authority. In Spain, the competent authority is the Agencia Española de Protección de Datos (AEPD):

If you reside elsewhere in the EEA, you can find your local authority list on the European Data Protection Board (EDPB) portal.

Contact & Data Controller Details

For any questions regarding this Privacy Policy or to exercise your rights, please contact our Data Controller:

  • Trade Name: SideBy Studio
  • Data Controller (Legal Business Name): Jiameng Liu
  • NIF/VAT Number: ESZ2285167F
  • Address: Carrer de Roc Boronat 48, 08005 Barcelona, Barcelona, Spain
  • Phone: +34 633 186 815
  • Email: hello@sidebystudio.com