Privacy policy

Data controller

Padel Kiwi is deeply committed to complying with Spanish and European data protection regulations. These are the controller's details:

Controller identity

Company name Padelkiwi, S.L. NIF ESB09705252 Registered address C/ Moreras, 29 · 28221 Majadahonda, Madrid, España Email contacto@padelkiwi.com Applicable regulation RGPD (UE) 2016/679 · LOPD-GDD 3/2018

Collection and processing of personal data

Personal data is any information relating to a person: name, email, address, phone, ID number, etc. Additionally, when a user visits our site, certain info is stored automatically for technical reasons, like the IP address assigned by the internet provider.

Padel Kiwi has the duty to inform users about the collection of personal data that takes place when sending email or filling in forms on the website.

We collect only the data needed to provide the contracted service or respond properly to the user's request. No specially protected data is collected at any time. The data will never be used for a different purpose than the one for which it was collected.

Forms and purposes

Different forms on the site have different purposes. We break them down here:

Contact forms / email

Purpose: Respond to your information request submitted via our contact forms.

Legal basis: The user's consent, which you can revoke at any time.

Data transfers: Personal data will be processed through Shopify-managed servers, which acts as Data Processor.

Newsletter signup

Purpose: Send communications, some commercial, relevant to users based on the site's topic. As LSSICE requires, Padel Kiwi commits to not sending commercial communications without identifying them as such.

Legal basis: The user's consent, which you can revoke at any time.

Data transfers: Data will be processed through servers managed by Mailchimp and Klaviyo.

Customer registration / signup / contracting

Purposes:

• Manage your user signup on our website.
• Manage purchases made.
• Provide information about processing and order status.
• Historical record of purchases on our website.
• Comment and content management.
• Sending communications by email and/or phone about possible incidents, errors or order status.

Legal basis: Performance of a contract.

Data transfers: Padel Kiwi will not transfer or share your data with any third party, except in legally provided cases or when strictly necessary to provide a service:

• Technology or IT service providers.
• Payment service providers.
• Couriers and parcel companies.
• Third parties or service intermediaries (accountant, advisor, etc.).

Comments form

Purpose: submit a comment or review for publication on the website.

Legal basis: The user's consent, which you can revoke at any time.

Data transfers: Data will be processed through Shopify-managed servers.

Minors

Minimum age: 14 for data, 18 to contract

Only people over 14 may provide personal data on this site. For minors under 14, parental or guardian consent is required. Only people over 18 may contract our services, except if emancipated.

User registration

When you register through the corresponding form, the information we collect includes:

• First and last name
• Email and/or phone
• Shipping addresses
• IP
• Username / password

You must provide a password that meets certain security requirements. Passwords don't expire, but you can change yours any time from your account. To recover it, go to the specific recovery form and enter your email. You are responsible for keeping your password confidential and for all uses of it.

Notifications you'll receive

• When you sign up on the platform (account validation email).
• When making purchases: receipts, incidents, completed shipments, etc.
• The store newsletter if you signed up. You can unsubscribe from your panel or via the links at the bottom of the newsletter.
• Comments made and their replies.
• Password recovery.
• Account closure or deletion.

Security measures

We have adopted technical and organisational security measures within our reach to prevent loss, misuse, alteration, unauthorised access and theft of data, ensuring confidentiality, integrity and quality of information per current regulations.

Personal data collected in forms is processed only by Padel Kiwi staff or designated Data Processors.

SSL encryption across the entire site

The site uses SSL encryption, allowing the user to securely send personal data via the contact and registration forms.

Data transfers and accuracy

Padel Kiwi will not share your data with any third party except in legally provided cases or when service provision requires a contractual relationship with a Data Processor (payment platforms, accountants, intermediaries, etc.). In such cases, a confidentiality contract is always signed.

Where necessary, customer data may be shared with certain bodies to comply with a legal obligation: Tax Agency, banks, Labour Inspection, etc.

Accuracy: the user declares that all data provided is true and commits to keeping it updated, being solely responsible for any conflicts resulting from false data.

Exercising your rights

LOPD-GDD and GDPR grant you the right to exercise several rights regarding the processing of your personal data. To do so, write to contacto@padelkiwi.com providing documentation proving your identity (ID or passport).

Access Know if we process your data, for what purpose and where it comes from. Rectification and erasure Correct inaccurate data or delete inappropriate data. Restriction of processing We'll keep only what's needed for the exercise or defence of claims. Objection Object to the processing of your data in cases where your consent is not required. Portability We give you your data in exportable format if you want to take it to another company.

Withdrawal of consent You may withdraw your consent at any time, without retroactive effect.

Maximum response time: 1 month

We commit to exercising all these rights within the maximum legal time. If you think there's an issue with how we handle your data, you can direct your complaint to the Spanish Data Protection Agency.

Data retention

User data submitted via the contact form or email will be processed for the time strictly necessary to handle the request, or until consent is revoked.

Customer personal data will be processed until the contractual relationship ends. The retention period will be the minimum necessary, possibly kept up to:

• 4 years: Law on Infractions and Sanctions in the Social Order; Arts. 66 et seq. General Tax Law.
• 5 years: Art. 1964 Civil Code (personal actions without special term).
• 6 years: Art. 30 Commercial Code (accounting books, invoices, etc.).
• 10 years: Art. 25 Law on Prevention of Money Laundering and Terrorism Financing.
• No term: disaggregated and anonymised data.

Newsletter subscriber data will be kept indefinitely until consent is revoked. For candidate CVs, we may keep them for up to two years for future calls.

Social networks

Padel Kiwi has a profile on some of the main social networks (Facebook, Instagram, TikTok), acting as Data Controller for the data of its followers, fans, subscribers and commenters.

The purpose is to inform followers about activities and offers and to provide personalised user support. The legal basis for this processing is the data subject's consent, which can be revoked at any time.

In no case will Padel Kiwi extract data from social networks unless the user's specific, express consent is obtained.

International data transfers

Mailchimp and Klaviyo · United States

Padel Kiwi uses Mailchimp and Klaviyo for electronic communications, both located in the US. Standard contractual clauses approved by the European Commission have been signed with these entities to ensure the appropriate level of protection under GDPR.

By accepting this privacy policy, you expressly consent to the international transfer of your data to these service providers.

Confidentiality and validity

The information provided by the user will be considered confidential in all cases and cannot be used for purposes other than those described here. Padel Kiwi commits not to disclose information about the user's intentions, the reasons for any advice requested or the duration of the relationship.

This privacy policy was drafted by ExpertosLOPD®, a firm specialising in data protection for online stores, on 15 May 2026, and may change based on regulatory and jurisprudential changes. It is the data subject's responsibility to read the updated document.