Your data, your control.
Padel Kiwi fully complies with the General Data Protection Regulation (EU) 2016/679 and LOPD-GDD. Here we explain what data we collect, why, and how to exercise your rights.
Data controller
Padel Kiwi is deeply committed to complying with Spanish and European data protection regulations. These are the controller's details:
Controller identity
Collection and processing of personal data
Personal data is any information relating to a person: name, email, address, phone, ID number, etc. Additionally, when a user visits our site, certain info is stored automatically for technical reasons, like the IP address assigned by the internet provider.
Padel Kiwi has the duty to inform users about the collection of personal data that takes place when sending email or filling in forms on the website.
We collect only the data needed to provide the contracted service or respond properly to the user's request. No specially protected data is collected at any time. The data will never be used for a different purpose than the one for which it was collected.
Forms and purposes
Different forms on the site have different purposes. We break them down here:
Contact forms / email
Purpose: Respond to your information request submitted via our contact forms.
Legal basis: The user's consent, which you can revoke at any time.
Data transfers: Personal data will be processed through Shopify-managed servers, which acts as Data Processor.
Newsletter signup
Purpose: Send communications, some commercial, relevant to users based on the site's topic. As LSSICE requires, Padel Kiwi commits to not sending commercial communications without identifying them as such.
Legal basis: The user's consent, which you can revoke at any time.
Data transfers: Data will be processed through servers managed by Mailchimp and Klaviyo.
Customer registration / signup / contracting
Purposes:
- Manage your user signup on our website.
- Manage purchases made.
- Provide information about processing and order status.
- Historical record of purchases on our website.
- Comment and content management.
- Sending communications by email and/or phone about possible incidents, errors or order status.
Legal basis: Performance of a contract.
Data transfers: Padel Kiwi will not transfer or share your data with any third party, except in legally provided cases or when strictly necessary to provide a service:
- Technology or IT service providers.
- Payment service providers.
- Couriers and parcel companies.
- Third parties or service intermediaries (accountant, advisor, etc.).
Comments form
Purpose: submit a comment or review for publication on the website.
Legal basis: The user's consent, which you can revoke at any time.
Data transfers: Data will be processed through Shopify-managed servers.
Minors
Minimum age: 14 for data, 18 to contract
Only people over 14 may provide personal data on this site. For minors under 14, parental or guardian consent is required. Only people over 18 may contract our services, except if emancipated.
User registration
When you register through the corresponding form, the information we collect includes:
- First and last name
- Email and/or phone
- Shipping addresses
- IP
- Username / password
You must provide a password that meets certain security requirements. Passwords don't expire, but you can change yours any time from your account. To recover it, go to the specific recovery form and enter your email. You are responsible for keeping your password confidential and for all uses of it.
Notifications you'll receive
- When you sign up on the platform (account validation email).
- When making purchases: receipts, incidents, completed shipments, etc.
- The store newsletter if you signed up. You can unsubscribe from your panel or via the links at the bottom of the newsletter.
- Comments made and their replies.
- Password recovery.
- Account closure or deletion.
Security measures
We have adopted technical and organisational security measures within our reach to prevent loss, misuse, alteration, unauthorised access and theft of data, ensuring confidentiality, integrity and quality of information per current regulations.
Personal data collected in forms is processed only by Padel Kiwi staff or designated Data Processors.
SSL encryption across the entire site
The site uses SSL encryption, allowing the user to securely send personal data via the contact and registration forms.
Data transfers and accuracy
Padel Kiwi will not share your data with any third party except in legally provided cases or when service provision requires a contractual relationship with a Data Processor (payment platforms, accountants, intermediaries, etc.). In such cases, a confidentiality contract is always signed.
Where necessary, customer data may be shared with certain bodies to comply with a legal obligation: Tax Agency, banks, Labour Inspection, etc.
Accuracy: the user declares that all data provided is true and commits to keeping it updated, being solely responsible for any conflicts resulting from false data.
Exercising your rights
LOPD-GDD and GDPR grant you the right to exercise several rights regarding the processing of your personal data. To do so, write to contacto@padelkiwi.com providing documentation proving your identity (ID or passport).
Maximum response time: 1 month
We commit to exercising all these rights within the maximum legal time. If you think there's an issue with how we handle your data, you can direct your complaint to the Spanish Data Protection Agency.
Data retention
User data submitted via the contact form or email will be processed for the time strictly necessary to handle the request, or until consent is revoked.
Customer personal data will be processed until the contractual relationship ends. The retention period will be the minimum necessary, possibly kept up to:
- 4 years: Law on Infractions and Sanctions in the Social Order; Arts. 66 et seq. General Tax Law.
- 5 years: Art. 1964 Civil Code (personal actions without special term).
- 6 years: Art. 30 Commercial Code (accounting books, invoices, etc.).
- 10 years: Art. 25 Law on Prevention of Money Laundering and Terrorism Financing.
- No term: disaggregated and anonymised data.
Newsletter subscriber data will be kept indefinitely until consent is revoked. For candidate CVs, we may keep them for up to two years for future calls.
Social networks
Padel Kiwi has a profile on some of the main social networks (Facebook, Instagram, TikTok), acting as Data Controller for the data of its followers, fans, subscribers and commenters.
The purpose is to inform followers about activities and offers and to provide personalised user support. The legal basis for this processing is the data subject's consent, which can be revoked at any time.
In no case will Padel Kiwi extract data from social networks unless the user's specific, express consent is obtained.
International data transfers
Mailchimp and Klaviyo · United States
Padel Kiwi uses Mailchimp and Klaviyo for electronic communications, both located in the US. Standard contractual clauses approved by the European Commission have been signed with these entities to ensure the appropriate level of protection under GDPR.
By accepting this privacy policy, you expressly consent to the international transfer of your data to these service providers.
Confidentiality and validity
The information provided by the user will be considered confidential in all cases and cannot be used for purposes other than those described here. Padel Kiwi commits not to disclose information about the user's intentions, the reasons for any advice requested or the duration of the relationship.
This privacy policy was drafted by ExpertosLOPD®, a firm specialising in data protection for online stores, on 15 May 2026, and may change based on regulatory and jurisprudential changes. It is the data subject's responsibility to read the updated document.