Privacy policy
ROKASTORE
Last updated: 11 October 2026
At ROKASTORE, your trust is our most valuable asset. Protecting your privacy is not just a legal duty — it is part of our commitment to excellence. This Privacy Policy explains how we collect, use, and safeguard your personal data when you interact with our website, products, and services.
Who Is Responsible
ROKASTORE is a brand project based in Spain, managed by Carlos Correia. Contact: info@rokastore.net. Postal address: Rua Estrada Pola Via 114 B, P01E, 36350 Nigrán, Pontevedra, Spain.
1. Information We Collect
We may collect the following types of information when you interact with us:
- Contact details (name, email, phone number, shipping and billing address).
- Order and payment information (transaction references, payment status and order details). Card details are handled by the payment provider; ROKASTORE does not request card details by email.
- Customer account and sign-in information. Our customer accounts use passwordless sign-in.
- Usage data (IP address, browser type, device information, pages visited, interactions with our services).
- Communications (emails, customer service inquiries, reviews, or feedback you provide).
2. How We Use Your Information
We use personal information for the following purposes:
- To process and deliver your orders.
- To personalize your shopping journey and recommend products you may love.
- To answer inquiries and send order or service messages. Waitlist and promotional emails are sent on the basis of your consent, which you can withdraw using the unsubscribe link or by contacting us.
- To protect our platform against fraud, misuse, or unauthorized access.
- To comply with legal obligations under EU, UK, and international law.
Legal Bases
We process order information to perform a contract or take steps you request before a purchase. Accounting and legally required records are processed to meet legal obligations. Waitlist subscriptions, promotional emails and non-essential tracking rely on consent where required. Our legitimate interests include responding to inquiries, protecting the store against fraud and maintaining its security, subject to your rights.
3. Sharing Your Data
We share relevant information with Shopify and providers supporting payments, delivery, email, customer support and other store services, and with authorities where legally required.
Our store is hosted by Shopify. Shopify processes information about visits and purchases, including through Shopify Network Intelligence, which is currently enabled. These services may combine information from interactions with ROKASTORE, other merchants and Shopify to support security, product improvement, personalisation and advertising, subject to applicable consent and opt-out requirements. Shopify and service providers may process information in other countries.
Some advertising uses may constitute sharing or targeted advertising under applicable US state laws. Where applicable, you can opt out using our data-sharing opt-out page. You can manage non-essential tracking through cookie preferences where available, and contact us to withdraw consent.
Read Shopify’s Consumer Privacy Policy and visit the Shopify privacy portal to exercise rights relating to Shopify’s processing.
4. Security and Retention
We use appropriate technical and organisational measures to protect personal information. No system can guarantee absolute security.
- Order, accounting and supporting business records are retained for the applicable statutory periods, including six years from the last accounting entry where Article 30 of the Spanish Commercial Code applies. Longer periods may apply to specific legal obligations or unresolved claims.
- Waitlist and promotional subscription information is retained while the subscription remains active. After withdrawal, we retain only information needed to record your choice, prevent further marketing and meet legal obligations.
- Inquiry and customer-support information is retained for the handling of the request and any applicable complaint or claim periods.
- Account information is retained while the account is used, subject to deletion requests and mandatory record-retention requirements.
Information is deleted, anonymised or restricted when its purpose and applicable retention requirements end. Ask us at info@rokastore.net for details about the retention criteria applying to your information.
5. Your Rights
Depending on the applicable law and the circumstances, your rights include:
- Access the data we hold about you,
- Request corrections to inaccurate details,
- Request deletion of your personal data,
- Restrict or object to processing,
- Request data portability,
- Withdraw consent for marketing communications at any time.
To exercise these rights, contact us at: info@rokastore.net
You may lodge a complaint with the Spanish Data Protection Agency (AEPD) or your competent supervisory authority. We normally respond to rights requests within one month; where legally permitted, a complex request may require an extension, which we will explain. Withdrawing consent does not affect earlier lawful processing.
6. International Transfers
Because our store is powered by Shopify, your data may be transferred outside your country of residence. In such cases, we ensure compliance through EU Standard Contractual Clauses (SCCs) or equivalent safeguards.
7. Children’s Privacy
ROKASTORE does not knowingly collect data from individuals under 16. If you believe a child has provided personal information, please contact us immediately and we will delete it.
8. Updates to This Policy
We may update this Privacy Policy from time to time to reflect business, legal, or regulatory changes. The date above will always show the latest version.
9. Contact Us
If you have questions, concerns, or wish to exercise your rights, you may contact us:info@rokastore.net
At ROKASTORE, your privacy is protected with the same care and attention as our limited-edition pieces — built to honor, crafted to last.