PRIVACY POLICY
URBAN MAGPIE
Courtesy translation: This English version is provided for convenience only. In case of discrepancies, the Spanish version (ES) shall prevail and be legally binding.
ISABELLA SLAD is the legal representative and the data controller for the URBAN MAGPIE brand. Therefore, from now on we will refer to the controller as URBAN MAGPIE, with the address for notifications at C/ Hermosilla, 48 1º decha, CP 28001 Madrid, and email address info@urbanmagpie.net.
As the owner of the website urbanmagpie.net to which this Privacy Policy refers.
Last updated: 15/12/2025
Data protection responsibility
URBAN MAGPIE is responsible for the personal data collected through browsing and use of this website, in accordance with the requirements established by REGULATION (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data, as well as Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
By using this website we understand that you have read and understood the information provided regarding the processing of your personal data.
Data protection policy
The controller applies the principle of proactive accountability in the processing of personal data, maintaining constant updates and promoting continuous improvement of the data protection system in accordance with applicable legal requirements, guaranteeing in any case:
- respect for the fundamental rights and freedoms of natural persons,
- that data are processed lawfully, fairly, and transparently,
- that processed data are accurate, adequate, relevant, and limited in relation to the purposes for which they are collected,
- that the purposes for which data are collected are explicit and legitimate, and that they are not processed in a manner incompatible with those purposes.
The purpose of this document is to inform users about what we do with their personal data, how it is collected, what it is used for, the rights they have, as well as all legal information required by current regulations.
Data collected, purpose and lawfulness
The personal data processed are those provided by users through the forms available on this website and are the minimum required to be able to:
- send the requested information about our services,
- send news, offers and brand updates,
- handle enquiries,
- handle complaints,
- process orders, provide information about their status, prepare the corresponding invoice, and carry out any other management derived from the service provided through this website.
These purposes are based on the legal grounds for processing data established by applicable regulations, such as the performance of a contract or provision of a service, compliance with legal obligations, the legitimate interests of the controller, and the consent of users in each case.
Web forms
Personal data collected through the web contact form are used in order to handle any enquiry and/or request made by the user through it.
Data processing is legitimised by the consent expressly given by accepting the processing conditions informed through this Privacy Policy.
Recipients of the data
Personal data obtained through the web forms are recorded and stored on electronic media controlled and supervised by the controller.
URBAN MAGPIE works with different external providers to correctly provide the service related to production, shipping, web hosting, databases, email sending and payment processing. All these providers act as Data Processors in accordance with the GDPR and other applicable data protection frameworks. Your personal data will not be disclosed to companies other than those specified below, except where required by law:
1. Printful
- Company name: Printful, Inc.
- Headquarters: 635 W 42nd Street, Suite 200, Loveland, CO 80537, USA
- European office: Printful EU, SIA, Lielirbes iela 17, Rīga LV-1046, Latvia
- Tax ID: USA: EIN 27-2380186 / Latvia: LV40103798691
- Contact email: privacy@printful.com
- Main activity: Print-on-demand production and product printing, shipping management.
- Categories of data processed: Order data, shipping address, purchased items, order history.
- GDPR role: Data Processor
- DPA / adherence: A Data Processing Addendum (DPA) is available and is agreed by accepting the Terms of Service.
- Security measures: Encryption, access control, physical and technical security measures, SOC 2 audits.
- International transfers: EU/USA via Standard Contractual Clauses (SCC).
- Processing duration: For the duration of the contractual relationship and as required by legal obligations.
2. Netlify
- Company name: Netlify, Inc.
- Headquarters: 610 22nd Street, Suite 315, San Francisco, CA 94107, USA
- European office: Netlify Europe Limited, 1-3 Dorset Rise, London EC4Y 8EN, United Kingdom
- Tax ID: USA: EIN 46-3978984 / UK: 12176632
- Contact email: privacy@netlify.com
- Main activity: Hosting and delivery of web applications, code deployment and infrastructure services.
- Categories of data processed: Website content, access logs, metrics, IP address, browser and operating system.
- GDPR role: Data Processor
- DPA / adherence: Data Processing Addendum available at https://www.netlify.com/legal/dpa.
- Security measures: TLS encryption, backups, redundancy, access controls, ISO 27001 and SOC 2 audits.
- International transfers: EU/USA, UK via Standard Contractual Clauses (SCC).
- Processing duration: While the service is provided and as required by legal obligations.
3. Supabase
- Company name: Supabase, Inc.
- Headquarters: 200 Townsend St, San Francisco, CA 94107, USA
- Tax ID: USA: 85-3802366
- Contact email: privacy@supabase.io
- Main activity: Database platform and backend as a service (BaaS).
- Categories of data processed: Registration data, users and application content.
- GDPR role: Data Processor
- DPA / adherence: Data Processing Addendum available at https://supabase.com/legal/dpa.
- Security measures: Encryption in transit and at rest, access control, internal audits, backups.
- International transfers: EU/USA via Standard Contractual Clauses (SCC).
- Processing duration: For the duration of the contractual relationship and as required by legal obligations.
4. Resend
- Company name: PLUS FIVE FIVE, Inc.
- Headquarters: 2261 Market Street #5039, San Francisco, CA 94114, USA
- California state registration: 5428684
- Contact email: privacy@resend.com
- Main activity: Sending transactional and marketing emails.
- Categories of data processed: Email addresses, message metadata, email content, open and click analytics, IP address.
- GDPR role: Data Processor / Controller for certain data (Company Account Data and Usage Data).
- DPA / adherence: Data Processing Addendum available at https://resend.com/legal/dpa, which includes EU/UK Standard Contractual Clauses and the Data Privacy Framework.
- Security measures: TLS/HTTPS encryption, backups, access control, SOC 2 and ISO 27001 audits.
- International transfers: EU/USA, UK via SCC and Data Privacy Framework.
- Processing duration: For the duration of the contractual relationship and as required by legal obligations.
5. PayPal
- Company name: PayPal, Inc.
- Headquarters: 2211 N. First Street, San José, CA 95131, USA
- Tax ID: USA: EIN 77-0494390
- Contact email: privacy@paypal.com
- Main activity: Secure online payment processing.
- Categories of data processed: Payment details entered by the customer (card, PayPal account, billing information).
- GDPR role: Independent processor (payment data is processed directly by PayPal).
- Security measures: Encryption, access control, PCI DSS compliance.
- International transfers: According to PayPal’s policies and its DPA.
- Processing duration: For the duration of the payment operation and as required by legal obligations.
All providers mentioned act as data processors for URBAN MAGPIE. The Data Processing Addenda (DPA) and Standard Contractual Clauses (SCC) guarantee the lawfulness of international transfers and compliance with the GDPR. The user may request the content of such contracts (DPA) by sending an email to info@urbanmagpie.net.
PayPal processes payment data independently; such data is not managed or stored by this website. In cases where disclosure of data to third parties is not covered by the legal bases set out above, disclosure to other recipients will only take place if the user has given explicit consent.
Very strict criteria are applied in selecting data processors, and a contractual commitment is maintained with each of them to comply with and enforce the obligations established in data protection matters.
You may obtain more information about the processing of personal data by URBAN MAGPIE by requesting it at info@urbanmagpie.net.
Technical and organisational data protection measures
The media used have the necessary technical and organisational measures that guarantee the confidentiality and preservation of personal data obtained through the website.
Personal data collected through the website are processed using the HTML protocol, with a valid SSL certificate.
Personnel involved in personal data processing operations are trained and committed to this data protection policy.
Data retention
Personal data obtained through the contact form will be kept for the time necessary to handle the request and/or enquiry made, where applicable.
If you have expressly agreed to receive commercial information, we will keep your contact data until you inform us of your decision to cancel such communications.
Information on automated decisions and profiling
We do not normally make automated decisions, but when we do we will make it clear that this type of decision is being made. However, URBAN MAGPIE includes various sections dedicated to service personalisation in order to display personalised advertising when entering the website and also to send personalised communications.
URBAN MAGPIE acknowledges the possibility of profiling to improve its product offering, personalise the sending of commercial offers where applicable, or provide more personalised customer service.
Objection to the processing of data for advertising purposes
If you gave your consent for your data to be used for advertising purposes and you no longer wish to receive advertising, you may revoke your consent at any time by sending an email to the controller at: info@urbanmagpie.net.
The user can manage their cookie preferences and reject their use at any time through their browser settings or via the cookie management panel available on our website.
Changes to the Privacy Policy
We may modify the information contained in this Privacy Policy and Cookies Policy when we deem it appropriate. If we do so, we will notify you through different channels on the platform (for example, via a banner, pop-up, or push notification).