Privacy policy
Last updated: April 2026
This Privacy Policy explains how Netmantos ("we", "us", "our") collects, uses, and protects your personal data when you visit netmantosfootball.com or contact us through any of our channels.
By using this website, you acknowledge that you have read and understood this policy.
1. Who we are (Data Controller)
For the purposes of the GDPR, Netmantos is the data controller of personal data collected through this website.
Contact: contact@netmantosfootball.com
2. What data we collect
Data you provide directly:
- Contact details: name, email address, phone number
- Shipping and billing address
- Order details: products purchased, personalisation details (name, number), delivery notes
- Messages you send us via email, WhatsApp, or contact forms
Data collected automatically:
- Device and usage data: IP address, browser type, operating system, pages visited, time and date of visit
- Location data: approximate geolocation derived from IP address
- Cookies and similar technologies (see Section 8 below)
We do not intentionally collect special category data such as health or biometric information.
3. Why we collect your data and the legal basis
| Purpose | Legal basis |
|---|---|
| Processing and fulfilling your order | comfortable of a contract |
| Sending order confirmations and shipping updates | comfortable of a contract |
| Handling returns, exchanges, and complaints | comfortable of a contract / Legal obligation |
| Responding to your questions and support requests | Legitimate interests |
| Fraud prevention and security | Legitimate interests / Legal obligation |
| Marketing communications (only with your consent) | Consent. You may opt out at any time. |
4. How we share your data
We share your data only with trusted service providers who help us operate our business, including:
- E-commerce and payment platforms (Shopify and integrated payment gateways like Stripe)
- Shipping carriers and fulfilment providers
- Customer communication tools
These providers act as data processors and are bound by appropriate data protection agreements. We do not sell your personal data to third parties.
We may also disclose data when required by law or to protect our legal rights.
5. Data Security
We take the security of your personal data seriously. We implement industry-standard technical and organizational measures to protect your information, including:
- Encryption: SSL/TLS encryption protects data during transmission between your browser and our site.
- Secure Payments: Payment processing is handled exclusively by Stripe, a PCI-DSS Level 1 certified provider. We do not store, see, or access your card details at any point.
- Access Control: Access to personal data is strictly limited to those who need it to perform their duties.
6. International data transfers
Your data may be processed in countries outside the EU/EEA, including Canada and the United States, where Shopify Inc. and its service providers operate. In such cases, we implement appropriate safeguards to ensure your data remains protected in accordance with GDPR requirements.
7. How long we keep your data
- Order and invoice records: retained for as long as required by applicable law (typically 5-10 years depending on jurisdiction)
- Customer support messages: kept for up to 3 years from the date of your last contact
- Marketing data: until you withdraw consent or opt out, and no longer than 2 years from your last interaction
8. Cookies
We use cookies and similar technologies to enable essential site functions, remember your preferences, and measure comfortable. You can manage your cookie preferences through our cookie banner or your browser settings. For more information on the cookies we use and how to control them, refer to our cookie management tool on this site.
9. Your rights under the GDPR
If you are based in the EU/EEA or UK, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete data.
- Erasure: Request deletion of your data where there is no legitimate reason for us to continue processing it.
- Data portability: Receive your data in a structured, commonly used, machine-readable format.
- Object or restrict: Object to or request restriction of certain processing activities.
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at contact@netmantosfootball.com. We will respond within 30 days.
You also have the right to lodge a complaint with the competent data protection supervisory authority. For the European Union, you may contact the Agencia Espanola de Proteccion de Datos (AEPD) at www.aepd.es. UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk.
10. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date at the top. We encourage you to review this page periodically.
11. Contact
Email: contact@netmantosfootball.com
WhatsApp: +34 742 01 96 58
