Privacy policy
Last updated: October 1, 2026
This policy explains what personal data we process when you visit or buy from getbloko.com, what we use it for and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
The controller of your data is the BLOKØ team. You can contact us about privacy through our contact page.
2. What we use your data for and on what legal basis
| Purpose | Legal basis |
|---|---|
| Managing your order: payment, shipping, returns and customer service | Performance of the contract (art. 6.1.b GDPR) |
| Complying with tax and accounting obligations (invoices) | Legal obligation (art. 6.1.c GDPR) |
| Answering your enquiries | Your consent and, if you are a customer, the contractual relationship |
| Sending you our newsletter and offers | Your consent (art. 6.1.a GDPR); you can unsubscribe at any time |
| Measuring website use and showing personalised ads (for example, the Meta pixel) | Your consent through the cookie banner |
| Preventing fraud and keeping the store secure | Legitimate interest (art. 6.1.f GDPR) |
3. How long we keep your data
- Order and billing data: for the duration of the relationship and then for the period required by law (6 years for commercial and accounting records; 4 years for tax purposes).
- Enquiries: until they are resolved and for a maximum of 1 year afterwards.
- Newsletter: until you unsubscribe.
- Cookies: for the duration stated in the Cookie Policy.
4. Who we share your data with
We do not sell your data. We only share it with providers that help us deliver the service, acting as processors or as independent controllers:
- Shopify (Shopify International Ltd., Ireland), the store platform.
- Payment gateways (Shopify Payments / Stripe, PayPal).
- Shipping and logistics companies, and our supplier to prepare and ship the order.
- Meta Platforms Ireland (Facebook and Instagram), if you accept advertising cookies.
- Public authorities, when required by law.
5. International transfers
Some providers (for example, Shopify or Meta) may process data outside the European Economic Area, such as in the United States. In those cases, transfers are covered by the EU–US Data Privacy Framework or by the standard contractual clauses approved by the European Commission.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given, by writing to us through our contact page with the subject “Data protection”.
If you believe we have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).