blade.es · Blade Representaciones, S.L.
Last updated: 28/09/2026
Data Controller
Blade Representaciones, S.L. (“Blade”) is the controller of personal data processed through blade.es and of requests submitted through its customer support forms.
| Item | Details |
|---|---|
| Company name and Tax Identification Number (NIF) | Blade Representaciones, S.L. · B62551080 |
| Address | Calle Serra de la Salut 11, nave 5, 08210 Barberà del Vallès, Barcelona |
| Website | https://www.blade.es |
| Privacy contact | hello@blade.es |
Who This Policy Applies To
This policy applies to people who browse the website, shop as guests or through an account, register, contact Blade, request support or subscribe to marketing communications. The support form may also be used for enquiries about products purchased from other retailers. Purchases can be made with or without a customer account.
Personal Data We Process
Depending on how you interact with the store, we may process your name, email address, telephone number, billing and delivery addresses, account details, shopping cart and order information, products purchased, amounts paid, invoices, returns, warranties and customer support correspondence. To handle an issue, we may request proof of purchase, a product reference, product details, batch number, platform used and any files or images you choose to attach. If an order is not completed, WooCommerce may retain its status and the details already entered, in accordance with the store’s settings.
We also process technical data such as IP addresses, access logs, browser and device information, as well as your cookie preferences. You may pay using Stripe or PayPal. The chosen provider receives the data needed to process the transaction and collects your card details through its payment page or hosted fields, depending on the method selected. Blade receives the payment status and transaction identifiers needed to manage the order and any refunds. We do not retain the full card number or its security code.
We obtain personal data mainly from you, your use of the store and, where necessary, payment and delivery providers. The mandatory checkout fields are required to process your order. Subscribing to marketing emails and accepting non-essential cookies are optional.
Purposes and Legal Bases for Processing
| Processing activity | Purpose and legal basis |
|---|---|
| Customer accounts | To create an account, enable login and display addresses and order history. Performance of the requested service or steps taken at the individual’s request before entering into a contract. |
| Purchases and deliveries | To manage carts, orders, payments, invoicing, delivery, withdrawal rights, returns and warranties. Performance of a contract and compliance with legal obligations relating to invoicing and consumer protection. |
| Enquiries and support | To respond to and document enquiries, support tickets and complaints, including those concerning purchases from other retailers. Performance of a contract or steps taken before entering into a contract, where applicable; legitimate interests in responding to general enquiries and establishing, exercising or defending legal claims. |
| Security | To protect the website, accounts and payments, prevent abuse and handle incidents. Legitimate interests in service security and compliance with a legal obligation where applicable. |
| Marketing communications | To send news and offers to people who have consented to receive them. To send former customers offers for our own similar products or services only where the conditions of Article 21(2) of the Spanish Information Society Services and Electronic Commerce Act (LSSI) are met and an easy, free way to opt out is offered when collecting the email address and in every message. |
| Non-essential cookies | To measure use of the website or enable advertising, external content and optional preferences, only if these features are enabled and you consent through the cookie preferences panel. Consent; the Cookie Policy explains the active purposes. |
Emails concerning an order, delivery or issue form part of service communications. Providing an email address to make a purchase does not, in itself, subscribe you to the newsletter. If abandoned-cart reminders are enabled, we will provide information before collecting the email address and establish a valid legal basis for sending them before activating the automation.
Who We Share Personal Data With
We disclose only the personal data necessary to payment providers, shipping and logistics operators and, where handling a case requires it, technical service providers or manufacturers. Providers of hosting, WordPress and WooCommerce maintenance, transactional email, backups, support and email marketing may also access personal data on our instructions. We may disclose information to advisers and authorities where legally required or where there is a legitimate need to address a claim.
Depending on the service they provide, suppliers may act as processors or independent controllers. Where they act as independent controllers, their own privacy policies will also apply: Stripe, PayPal, DHL, WordPress, WooCommerce, Infoserveis and Mailchimp.
Transfers Outside the European Economic Area
Where a transfer takes place, we will rely on an adequacy decision, Standard Contractual Clauses or another valid safeguard. You can request information about the applicable safeguards at hello@blade.es.
How Long We Keep Your Personal Data
| Data | Retention period or criterion |
|---|---|
| Account | For as long as it remains active. We delete accounts after 24 months without a login or purchase. Order and invoice data that must be retained are kept separately. |
| Unpaid orders | We delete pending, failed or cancelled orders for which no payment was collected 90 days after they were created. If there was a payment, refund or complaint, the criteria for paid orders apply. |
| Paid orders and invoices | We keep the data necessary to manage purchases, returns and commercial obligations for six years, calculated in accordance with applicable law. If a sale is reported under the VAT One Stop Shop (OSS) scheme, the required tax records are retained for ten years from the end of the year in which the transaction took place. Other data are deleted or anonymised when no longer needed. |
| Enquiries and support | General enquiries: 12 months after closure. We keep information needed for incidents, warranties and complaints relating to purchases for six years after the case is closed, unless a different period applies or a claim remains open. |
| Marketing | Until you unsubscribe or object. We retain the minimum information needed to honour that choice and, where applicable, demonstrate it. |
| Security and cookies | We keep security logs for 90 days from their creation, except those needed to investigate an incident or handle a claim. The duration of each cookie appears in the inventory; consent choices are renewed no later than every 24 months. |
| Backups | Backups are overwritten on a 30-day cycle. Data deleted from active systems may remain in backups until the end of that cycle; backups will only be restored where necessary for service continuity or security. |
A request for erasure does not remove personal data that we must retain to comply with the law or to deal with potential liabilities. In such cases, its use will be restricted in accordance with applicable law. Erasure or anonymisation in WooCommerce must be coordinated with invoices, external services and backups.
Marketing Communications and Profiling
Signing up to the newsletter is a choice separate from making a purchase and accepting cookies. Every marketing message will include a simple and free way to unsubscribe or object. If browsing-based measurement or advertising technologies are used, they will only be enabled in accordance with the preferences selected in the cookie panel, and we will identify the actual providers and purposes.
Your Rights
You may request access to, rectification or erasure of your personal data, restriction of processing, object to processing, and data portability where applicable. You may withdraw consent without affecting the lawfulness of processing carried out before withdrawal. To exercise your rights, write to hello@blade.es or the postal address given above. We will request additional information to verify your identity only if we have reasonable doubts.
You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) at https://www.aepd.es/.
Children and Security
The store is not specifically directed at children under the age of 14. Purchases by minors require the legal capacity or authorisation required under applicable law. Where processing relies on the consent of a child under 14, consent must be given by the person who holds parental responsibility or guardianship. If we become aware that data have been provided without the required authorisation, we may request evidence of it or erase the data.
We apply access controls, updates, backups and supplier oversight measures appropriate to the risk. If a personal data breach occurs, we will comply with applicable documentation and notification obligations.
Changes and Contact
We will update this policy when the website’s features, providers or processing activities change. The date of revision will appear on this page, and we will seek fresh consent where required. For privacy enquiries, contact Blade at hello@blade.es.