Privacy policy

PRIVACY POLICY

Last updated: May 27, 2026

This Privacy Policy describes how Cherrycom Worldwide SL ("we", "us", "our") collects, uses, stores and protects personal data of visitors and customers of katalystaction.com (the "Website"), in compliance with Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD).

1. DATA CONTROLLER

  Cherrycom Worldwide SL
  VAT Number: B01965813
  Registered Office: Magallanes, 28 - 45870 Lillo (Toledo), Spain
  Data Protection Contact: support@katalystaction.com

2. PERSONAL DATA WE COLLECT

We may collect the following categories of personal data when you interact with our Website:

  a) Identification & Contact Data: name, email address, phone number, billing and shipping address.
  b) Order & Payment Data: order history, products purchased, transaction amount, payment method (we do NOT store full credit card numbers - payment is processed by certified providers such as PayPal, Stripe and Wintopay/LianLian Pay).
  c) Technical Data: IP address, device type, browser type, operating system, pages visited, referring URL, timestamps.
  d) Marketing Preferences: subscription status to our newsletter, communication preferences.
  e) Customer Service Data: any information you voluntarily share when contacting our support team.

3. LEGAL BASES FOR PROCESSING (Art. 6 GDPR)

  - Performance of a contract (Art. 6.1.b): to process and deliver your orders;
  - Compliance with legal obligations (Art. 6.1.c): for tax, accounting and consumer-protection records;
  - Consent (Art. 6.1.a): for marketing communications and non-essential cookies;
  - Legitimate interests (Art. 6.1.f): to prevent fraud, improve our services and analyze website usage.

4. HOW WE USE YOUR DATA

  - To process orders, payments and deliveries;
  - To send order confirmations, shipping notifications and customer service responses;
  - To send promotional emails and newsletters (only with your prior consent);
  - To prevent fraudulent transactions and ensure website security;
  - To comply with applicable legal and tax obligations;
  - To improve our products, services and user experience.

5. DATA SHARING & INTERNATIONAL TRANSFERS

We may share your personal data with the following categories of trusted third parties, strictly for the purposes described above:

  - Payment processors (PayPal, Stripe, Wintopay / LianLian Pay);
  - Shipping and logistics partners (regional fulfillment centers worldwide);
  - E-commerce platform provider (Shopify Inc.);
  - Email and marketing service providers;
  - Analytics providers (Google Analytics, Meta Pixel).

Where personal data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards through Standard Contractual Clauses (SCC) approved by the European Commission, or transfer only to providers covered by an adequacy decision.

We do NOT sell your personal data to any third party.

6. DATA RETENTION

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

  - Order and transaction data: up to 6 years (Spanish commercial and tax law);
  - Customer account data: until you request deletion;
  - Marketing data: until you withdraw consent;
  - Technical/analytics data: up to 26 months.

7. YOUR RIGHTS UNDER GDPR

You have the right to:

  - Access the personal data we hold about you (Art. 15 GDPR);
  - Request rectification of inaccurate data (Art. 16);
  - Request erasure of your data ("right to be forgotten", Art. 17);
  - Restrict or object to processing (Art. 18 & 21);
  - Data portability (Art. 20);
  - Withdraw consent at any time, without affecting the lawfulness of prior processing;
  - Lodge a complaint with the Spanish Data Protection Agency (AEPD - www.aepd.es) or your local supervisory authority.

To exercise any of these rights, please contact us at support@katalystaction.com. We will respond within 30 days.

8. COOKIES

Our Website uses cookies and similar technologies to ensure proper functionality, analyze traffic and personalize content. Detailed information is available in our Cookie Policy. You may manage your cookie preferences at any time through the cookie banner displayed on first visit.

9. SECURITY

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction, including SSL encryption, secure payment processing and access controls.

10. CHANGES TO THIS POLICY

We reserve the right to update this Privacy Policy at any time. The most current version, with the "Last updated" date at the top, shall always apply. Substantial changes will be notified by email or via a prominent notice on the Website.

11. CONTACT

For any privacy-related question or to exercise your rights:

  Cherrycom Worldwide SL
  VAT: B01965813
  Magallanes, 28 - 45870 Lillo (Toledo), Spain
  Email: support@katalystaction.com