Privacy policy

Last updated: 7 September 2026

This policy explains what personal data Reef King Cartel collects when you visit www.reefkingcartel.com, create an account, place an order or contact us, and how we use it. It is written to comply with the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Who is responsible for your data

Erika Ruiz Valencia, sole trader, trading as Reef King Cartel. NIE Z2982736D. Paseo Reina Sofía 6D, 50196 La Muela (Zaragoza), Spain. Email: hello@reefkingcartel.com. WhatsApp: +34 745 08 40 67 (messages only).

2. What data we collect

  • Identity and contact details: name, shipping and billing address, email, phone number.
  • Order and payment details: products bought, amounts, invoices, payment method. Card numbers are handled by the payment provider and never stored by us.
  • Account details: if you create an account, your login details and order history.
  • Communications: emails, WhatsApp messages and any photos or videos you send us, for example for a Live Arrival Guarantee claim.
  • Reviews: the name and content you submit when reviewing a product.
  • Technical data: IP address, device and browser information, and the pages you visit, collected through cookies (see section 7).

3. Why we use it and on what legal basis

  • To process and deliver your order, including the Live Arrival Guarantee, returns and customer support. Basis: performance of the contract.
  • To issue invoices and meet tax and accounting obligations. Basis: legal obligation.
  • To send you our newsletter about new corals and offers, only if you subscribed. Basis: your consent, which you can withdraw at any time through the unsubscribe link in each email.
  • To publish your product review. Basis: your consent.
  • To keep the store secure and prevent fraud. Basis: legitimate interest.
  • To understand how the store is used and improve it, using Shopify's statistics. Basis: legitimate interest and, for non-essential cookies, your consent.

4. Who we share it with

We do not sell your data. We share it only with the providers we need to run the store, who process it on our behalf or as independent controllers under their own privacy policies:

  • Shopify (Shopify International Ltd., Ireland, and Shopify Inc., Canada): hosting of the store, checkout, customer accounts and store statistics.
  • Payment providers: Shopify Payments, PayPal and Klarna, depending on the payment method you choose.
  • Carriers (currently NACEX): name, address and phone number, to deliver your order.
  • Judge.me: the product review service.
  • Hostinger: our email provider.
  • WhatsApp (Meta Platforms Ireland Ltd.), if you contact us that way.
  • Our tax advisor and public authorities, when the law requires it.

Some of these providers process data outside the European Economic Area, mainly in the United States and Canada. Where they do, transfers rely on an adequacy decision of the European Commission or on its Standard Contractual Clauses.

5. How long we keep it

  • Order, invoice and claim data: for as long as tax and commercial law require, generally up to six years after the order.
  • Account data: until you delete your account or ask us to.
  • Newsletter data: until you unsubscribe.
  • Communications: as long as needed to handle your request and any later claim.

6. Your rights

You can ask us to access, correct or delete your data, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent you have given. Write to hello@reefkingcartel.com from the email address linked to your order; we may ask you to confirm your identity. We answer within one month.

If you believe we have not handled your data correctly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

7. Cookies

The store uses cookies that are necessary to keep your cart, log you in and complete checkout. Shopify's statistics and any marketing cookies are only set with your consent, which you give or refuse through the cookie banner and can change at any time using the "Cookie preferences" link in the footer.

8. Minors

The store is intended for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, contact us and we will delete it.

9. Changes

We may update this policy when our providers or the law change. The date at the top shows the current version.