Privacy and Data Protection Policy

Last updated: November 2025

1. Data Controller

The controller of the personal data collected through this website is:

UNIQUE NARRATIVE ATELIER, S.L.
Address: Carrer Gerard Piera 13-15, baixos B, 08028, Barcelona
Contact email: privacy@thefoyer.com

2. Purposes of the Processing

We collect and process your personal data for the following purposes:

a) Newsletter subscription

To send communications, editorial content, and updates related to The Foyer.
To manage your subscription and email preferences.

b) Purchase management

To process orders placed through our website.
To process payments and prevent fraud.
To issue invoices and carry out administrative and accounting tasks.

c) Product shipping

To manage the shipment and delivery of purchased products. (We will update this section once you select the shipping provider; this wording is generic but valid.)

d) Customer service

To handle enquiries, information requests, and after-sales support.

e) Website improvement

To analyse browsing behaviour in an aggregated and anonymous manner (technical and analytical cookies, always subject to prior consent).

3. Legal Basis for Processing

The legal grounds under the GDPR are:

User consent for newsletter subscription (Art. 6.1.a GDPR).
Performance of a contract for purchase and shipping management (Art. 6.1.b GDPR).
Legitimate interest of the controller to improve the website or provide basic customer service (Art. 6.1.f GDPR), provided this does not affect your rights.

4. Categories of Data Processed

We process only the data strictly necessary:

Identification data: name and surname.
Contact data: email address, postal address, telephone number (only for shipments).
Payment data: handled through secure external platforms (UNIQUE NARRATIVE ATELIER, S.L. does not store card details).
Browsing data: only if you accept cookies.

5. Recipients and Data Processors

In order to provide our services, we share data with suppliers acting as data processors, under agreements that ensure GDPR compliance:

Mailchimp (The Rocket Science Group LLC): newsletter management.
Stripe Payments Europe, Ltd.: payment processing.
Courier companies responsible for product delivery (to be specified once the provider is selected).

No international data transfers are carried out without appropriate guarantees in accordance with the GDPR.

6. Data Retention Periods

Newsletter: until you unsubscribe or withdraw your consent.
Purchases and shipments: for the time required to manage the order and, afterwards, the statutory period for tax obligations (five years).
Customer service: for as long as necessary to resolve your enquiry.
Cookies: according to the period established in the specific Cookie Policy (I can draft this as well if you need it).

7. User Rights

You may exercise the following rights regarding your personal data at any time:

Access
Rectification
Erasure
Objection
Restriction of processing
Data portability
Withdrawal of consent

To exercise any of these rights, email privacy@thefoyer.com indicating your name, the right you wish to exercise, and a means for us to contact you.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

8. Security Measures

UNIQUE NARRATIVE ATELIER, S.L. applies appropriate technical and organisational security measures to protect your personal data, ensuring its integrity, confidentiality, and availability.

9. Changes to This Policy

We may update this Privacy Policy whenever necessary, especially to adapt it to legislative changes or new data processing activities.