Privacy Policy

Mur Mur Creations

Last updated: March 2026

1. Who We Are

The data controller responsible for your personal data is:

Mur Mur Creations
Owner: Aleksandra Grechuta
Tax ID (NIF): ESY3254348T
Address: Montseny 32 2/2, 08012 Barcelona, Spain
Email: hello@murmurcreations.es
Website: https://www.murmurcreations.es

2. What Data We Collect

We collect the following personal data when you place an order or contact us:

Full name
Delivery address
Email address
Phone number
Payment information (processed securely by our payment providers — we do not store card details)

We may also collect technical data automatically when you visit our website, such as IP address, browser type, and pages visited, through cookies and analytics tools. Please refer to our Cookie Policy for details.

3. How We Use Your Data

We use your personal data for the following purposes:

To process and fulfil your order
To communicate with you about your order or enquiries
To comply with our legal obligations (e.g. tax and accounting records)
To improve our website and understand how visitors use it (via analytics, only with your consent)
To show you relevant advertising on platforms such as Instagram or Facebook (only with your consent)

4. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR:

Contract performance — to process and deliver your order
Legal obligation — to comply with tax and regulatory requirements
Consent — for analytics and marketing cookies, which you can withdraw at any time
Legitimate interests — for basic website security and fraud prevention

5. Who We Share Your Data With

We share your data only where necessary with the following third parties:

Shipping providers (e.g. DHL) — to deliver your order
Payment processors (Stripe, Apple Pay, Google Pay, Klarna) — to process your payment securely
Google LLC — for website analytics via Google Analytics (only with your consent)
Meta Platforms Ireland Ltd — for advertising and retargeting via Meta Pixel (only with your consent)

We do not sell your personal data to any third party.

6. International Data Transfers

Some of our third-party providers (such as Google and Meta) may transfer and process your data outside the European Economic Area (EEA). Where this occurs, appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

7. How Long We Keep Your Data

We retain your personal data for the following periods:

Order and transaction data: 5 years, as required by Spanish tax law
Customer communications: up to 2 years after last contact
Analytics and cookie data: in accordance with the retention periods of the respective tools (see Cookie Policy)

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right of access — to request a copy of the data we hold about you
Right to rectification — to correct inaccurate or incomplete data
Right to erasure — to request deletion of your data, where no legal obligation requires us to retain it
Right to restriction — to limit how we use your data in certain circumstances
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — at any time, for processing based on consent (e.g. cookies)

To exercise any of these rights, please contact us at hello@murmurcreations.es. We will respond within 30 days.

You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Espanola de Proteccion de Datos (AEPD), at www.aepd.es.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment data is handled exclusively by PCI-DSS compliant payment processors and is never stored on our systems.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

11. Contact

For any questions or requests relating to this Privacy Policy, please contact us at:

hello@murmurcreations.es