Privacy policy

Last updated: 24 July 2026

OLA Paddle & Surf operates this store and this website, including the data, content, features, tools, products and services, to offer you, the customer, a curated shopping experience (the “Services”). OLA Paddle & Surf is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction through the Services, or when you communicate with us by any other means. In the event of a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your personal information is collected, used and disclosed, as set out in this Privacy Policy.

Personal information we collect or process

When we use the term “personal information”, we mean any data that identifies you or that can reasonably be linked to you or another person. We may collect or process the following categories of personal information, depending on how you interact with the Services:

  • Contact details including your name, address, billing address, shipping address, phone number and email address.
  • Financial information including credit or debit card numbers, financial account details, transaction details, payment method and other payment-related information.
  • Account information including your username, password, preferences and settings.
  • Transaction information including the items you view, add to your cart, save to your wishlist or purchase, return, exchange or cancel, as well as your previous transactions.
  • Communications with us including the information you provide when contacting us, for example when submitting a customer service enquiry.
  • Device information including information about your device, browser or network connection, your IP address and other unique identifiers.
  • Usage information including information about your interaction with the Services, such as how and when you use or browse them.

Sources of personal information

We may collect personal information directly from you (when you create an account, make a purchase or contact us), automatically through the Services (via cookies and similar technologies), from our service providers, and from our partners or other third parties.

How we use your personal information

  • Providing, personalising and improving the Services. To process your payments, manage your orders, handle returns and exchanges, manage your account, arrange shipping and offer you a personalised shopping experience.
  • Marketing and advertising. To send you commercial and promotional communications and show you advertising about products or services.
  • Security and fraud prevention. To authenticate your account, provide a secure shopping and payment experience, and detect or prevent fraudulent activity.
  • Communicating with you. To provide customer service and respond to your requests.
  • Legal reasons. To comply with applicable law or respond to valid legal process.

How we disclose personal information

We may disclose your personal information to third parties for legitimate purposes, including:

  • With Shopify and other providers that perform services on our behalf (IT management, payment processing, data analytics, customer service, cloud storage, order management and shipping).
  • With business and marketing partners to provide marketing and advertising services, in accordance with their own privacy notices.
  • When you instruct us, request it or consent to the disclosure of certain information to third parties.
  • In connection with a business transaction, to comply with legal obligations, or to protect or defend the Services and our rights.

Relationship with Shopify

The Services are hosted on Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. For more information about how Shopify uses your personal information and any rights you may have, please see the Shopify Consumer Privacy Policy.

Third-party websites and links

The Services may include links to websites or other platforms operated by third parties. We do not guarantee and are not responsible for the privacy or security of such sites.

Children’s data

The Services are not intended for use by minors, and we do not knowingly collect personal information from minors. If you are the parent or legal guardian of a minor who has provided us with their personal information, you may contact us to request its deletion.

Security and retention of your information

No security measure is perfect or infallible. How long we keep your personal information depends on the need to maintain your account, provide you with the Services, comply with legal obligations and resolve disputes.

Your rights and choices

Depending on where you live, you may have some of the following rights in relation to your personal information:

  • Right of access. Request access to the personal information we hold about you.
  • Right to erasure. Request that we delete your personal information.
  • Right to rectification. Request that we correct inaccurate information.
  • Right to data portability. Receive a copy of your information and request that we transfer it to a third party.
  • Objection and restriction of processing. Ask us to stop or restrict the processing of your information for certain purposes.
  • Withdrawal of consent. Where processing is based on your consent, you may withdraw it at any time.
  • Managing communication preferences. You can unsubscribe from our promotional emails at any time via the link included in them.

You can exercise any of these rights by contacting us using the details below. We will not discriminate against you for exercising any of these rights. We may need to verify your identity before processing your request.

Complaints

If you have a complaint about how we handle your personal information, please contact us using the details below, or lodge a complaint with your local data protection authority (in Spain, the Spanish Data Protection Agency).

International transfers

We may transfer, store and process your personal information outside the country in which you reside, using recognised transfer mechanisms such as the European Commission’s standard contractual clauses, unless the transfer is to a country recognised as providing an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this website and update the “Last updated” date.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your rights, please write to us at contact@somniol.com. For the purposes of applicable data protection law, we are the controller of your personal information.