Who we are
Ludilo SL, Calle Corretger (PQ. Empresarial Destro), 127, 46980 Paterna, Spain, is the data controller for the personal data described in this policy.
You can reach us at [email protected], +34 961 37 31 99, or through the contact page at any time.
Data we collect
Account data: name, email address, password hash, phone number and avatar if you choose to upload one.
Order data: the products you buy, quantities, prices at the time of purchase, delivery and billing addresses, delivery method and payment status. Card details are never stored on our servers.
Shopping data: cart contents, wishlist items, saved filters and recently viewed products. For guests this is stored in your browser; for signed-in customers it is stored in your account so it follows you between devices.
Technical data: IP address, browser and device type, pages visited and referring page. This is used for security, fraud prevention and aggregate statistics.
Content you submit: product reviews, ratings and messages you send us.
Why we use your data
To perform the contract with you: processing orders, taking payment, arranging delivery, handling returns and refunds, and providing customer support.
To meet legal obligations: accounting, tax and consumer-protection record keeping, and product-safety notices.
For our legitimate interests: keeping the store secure, preventing fraud and abuse, improving the catalogue and measuring how the site performs in aggregate.
With your consent: optional analytics and marketing cookies. Consent can be withdrawn at any time in the cookie settings.
Children's data
Ludilo sells toys for children but our store is intended for adults. We do not knowingly create accounts for, or collect data directly from, children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
International transfers
Our infrastructure is hosted inside the European Economic Area wherever possible. Where a processor operates outside the EEA, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision.
How long we keep data
Order and invoice records are kept for ten years to satisfy Spanish commercial and tax law. Account data is kept while your account is open and for 12 months afterwards. Cart and wishlist data is removed 24 months after your last activity. Support messages are kept for three years.
Your rights
You may request access to your data, correction of inaccurate data, deletion, restriction of processing, portability in a machine-readable format, and you may object to processing based on legitimate interests.
Where processing relies on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.
You also have the right to lodge a complaint with your local data-protection supervisory authority.
Security
Data is encrypted in transit with TLS, access to production data is restricted to authorised staff, database access is governed by row-level security rules, and payment credentials never touch our servers.
Changes to this policy
If we change this policy materially we will publish the new version here and update the date above. Significant changes affecting registered customers are also announced by email.
Questions about this policy?
Write to [email protected] or call +34 961 37 31 99. Ludilo SL will answer within five working days.
Contact us