Privacy Policy

1. Data controller

meeco Servicios Globales S.L., NIF B42774703, registered at Avda Cataluña 16, Edificio Baobab, 03540 Alicante, Spain. Contact: hello@injectkit.com

2. Data we collect

When you place an order, we collect: your name, email address, shipping address, and phone number (if provided). We do not collect or store payment card details — these are processed directly by our payment provider (Stripe/Mollie) and never touch our servers.

When you browse our site, we may collect anonymized usage data (pages visited, time on site) if you have accepted analytics cookies.

3. Legal basis for processing

We process your personal data on the following legal bases under GDPR Article 6(1):

(b) Contract performance: Processing your name, email, and shipping address is necessary to fulfill your order.

(c) Legal obligation: We retain order records as required by Spanish tax and commercial law.

(a) Consent: Analytics and marketing cookies are only activated with your explicit consent.

4. Data sharing

We share your data only with:

— Payment processors (Stripe/Mollie) to process your payment
— Shipping carriers (DHL, GLS, Correos) to deliver your order
— Email provider to send order confirmations

We do not sell, rent, or trade your personal data to any third parties.

5. Data retention

Order data is retained for 5 years as required by Spanish commercial law (Código de Comercio). Email marketing data is retained until you unsubscribe. Analytics data is anonymized and retained for 26 months.

6. Your rights

Under GDPR and Spanish LOPD-GDD, you have the right to access, rectify, erase, restrict processing, port, and object to the processing of your personal data. To exercise any of these rights, contact us at hello@injectkit.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

7. International transfers

Your data may be processed by service providers outside the EEA. Where this occurs, we ensure appropriate safeguards are in place (EU Standard Contractual Clauses or adequacy decisions).

8. Security

We use SSL/TLS encryption for all data transmission. Payment information is processed by PCI-DSS Level 1 certified payment providers and never stored on our servers.

9. Related policies

InjectKit is operated by meeco Servicios Globales S.L. For additional data protection documentation and our broader privacy practices, please refer to licendi.com data protection declaration.