Privacy policy

Last updated: 13 September 2026.

This policy explains what personal data we collect when you use thewarminis.com, why, and what your rights are. We keep it short and we mean it: we collect what an order needs and nothing more.

Who is responsible

Warriors & Peppers SL (trading as TheWarMinis), CIF B19984665, Calle Bronce 24, 4B, 28045 Madrid, Spain, registered at the [Registro Mercantil]. For anything about your data, write to info@thewarminis.com.

What we collect, and why

• Your order. Name, shipping address, email, phone (optional, for the courier), what you bought and what you paid. We need it to deliver your order and to issue the invoice the law requires. Legal basis: the contract with you and our legal obligations.
• Your cart. One technical cookie (carrito, 30 days) that remembers your cart between visits. It contains a random identifier and nothing about you. No tracking, no advertising cookies, no analytics.
• Your account (optional). If you create an account we keep your email, your name, your password (only as a salted hash we cannot reverse) and the orders linked to the account, plus a second technical cookie (sesion, 30 days) that keeps you signed in. Emails we send you about the account (verification, password reset, sign-in links) are kept with it. You can delete the account yourself from its details page: orders already shipped or cancelled are anonymised at once, and the rest only when delivered, keeping the amounts as long as tax law requires.
• Server logs. IP address, page requested and time, kept for a short time to keep the site secure. Legal basis: our legitimate interest in running a safe shop.
• Emails you send us. To answer you. Legal basis: your request.

We do not build profiles, we do not sell or rent your data, and we do not send newsletters unless you ask for one.

Who receives it

• The courier (Correos, Sociedad Estatal Correos y Telégrafos SA, or another carrier your parcel ships with) receives your name, address and phone to deliver it. Some shipments are prepared with Sendcloud (Sendcloud B.V., the Netherlands), which receives your name and address to make the label; it does not receive your email or your phone. For destinations outside the European Union, and for the Canary Islands, Ceuta and Melilla, the address and a description of the goods also go on the customs form, as the law requires.
• The payment provider, when you pay by card or wallet, receives what it needs to process the payment. We never see your full card number.
• Our hosting provider, in the European Union, stores the shop and its database.
• Public authorities, when the law obliges us (tax, customs).

How long we keep it

• Order and invoice data: 6 years from the order, as required by Spanish commercial and tax law.
• Cart cookie: 30 days from your last visit.
• Server logs: up to 12 months.
• Emails: while the conversation is open and for one year after, unless they relate to an order.

Your rights

You can ask us to access, correct, delete or export your data, to restrict how we use it, or object to a use based on legitimate interest. Write to info@thewarminis.com and we will answer within one month. If you ask us to delete your data, we anonymise your orders: the invoice records stay for the years the law requires, but your name, address and contact details are removed from them.

If you think we are not handling your data correctly, you can complain to the Spanish Data Protection Authority (Agencia Española de Protección de Datos, www.aepd.es).

Changes

If we change this policy, the date at the top changes with it. We will not use your data for a new purpose without telling you first.