Last updated: April 2026

1. Data Controller

Handshake SC CIF: J26880856 Barón de Patraix 7, bajo izq. 46018 Valencia, Spain Email: info@handshake.fun

2. What data we collect

We collect data that you provide directly to us when:

• Placing an order: name, surname, shipping and billing address, email, and phone number.

• Creating an account: email and password.

• Subscribing to our newsletter: email.

• Contacting us: the data you include in your message.

We also automatically collect browsing data (IP address, browser type, pages visited) through our store's cookies. See our [Cookie Policy] for more information.

3. How we use your data

PurposeLegal BasisManage and ship your orderContract performanceProcess paymentContract performanceSend you order confirmations and updatesContract performanceSend you our newsletterConsentImprove our store and user experienceLegitimate interestComply with legal and tax obligationsLegal obligation

4. Who we share your data with

Your data may be shared with the following third parties, only to the extent necessary to provide the service:

• Shopify Inc. — e-commerce platform and payment processing (Shopify Payments). Shopify Privacy Policy

• PayPal Holdings, Inc. — payment processing. PayPal Privacy Policy

• Carriers and couriers — for order delivery (name, address, and phone number).

• Shopify Email — for sending our newsletter.

We do not sell or transfer your data to third parties for commercial purposes.

5. International transfers

Shopify Inc. and PayPal are based in the United States. These transfers are made under appropriate safeguards in accordance with the GDPR (standard contractual clauses or other equivalent mechanisms).

6. How long we retain your data

• Order data: 5 years, due to tax and commercial obligations.

• Newsletter data: until you unsubscribe or withdraw your consent.

• Browsing data: according to cookie settings (see Cookie Policy).

7. Your rights

As a user, you have the right to:

• Access your personal data

• Rectify inaccurate or incomplete data

• Erase your data ("right to be forgotten")

• Object to processing or request its restriction

• Portability of your data

• Withdraw consent at any time (without retroactive effect)

To exercise any of these rights, please email us at info@handshake.fun indicating your request and a copy of your identification document.

If you believe that the processing of your data is not in compliance with the GDPR, you can file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es

8. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or alteration. Payments are processed securely through Shopify Payments and PayPal, and we never store credit card data.

9. Changes to this policy

We may update this policy occasionally. We will notify you of any relevant changes by email or through a notice in our store. The last updated date will always be visible at the beginning of this document.