Privacy Policy

1. Data Controller

The controller responsible for the processing of personal data collected through Meme Material is:

• Trading name: Meme Material
• Email: staff@memematerial.shop
• Website: https://memematerial.shop

Hereinafter, “Meme Material”, “we”, “us” or “the Store”.

The owner operates as a sole trader.

2. Personal Data We Process

Depending on how you use Meme Material, we may process the following categories of personal data:

• Account data: email address, authentication credentials, email verification status, and information related to account security.

• Purchase data: products purchased, quantities, prices, discounts, taxes, order history, returns, cancellations, and refunds.

• Shipping and billing data: name, postal address, country, postal code, city, province or region, telephone number where required for delivery, and billing information where applicable.

• Payment data: payment references, transaction status, amount, currency, identifiers provided by our payment service provider, and refund-related information.

  Meme Material does not store your full payment card details. Payments are processed through specialised payment service providers such as Stripe.

• Communication data: messages sent to our customer support service and communications relating to your orders.

• Technical and security data: IP address, session identifiers, browser, device, access logs, and other technical information required for the security and operation of the service.

• Browsing and marketing data, where applicable and where you have provided the necessary consent: campaign information, UTM parameters, analytics or advertising cookies, and similar technologies.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

Account Creation and Management

We process your email address and the information required to create your account, verify that the email address belongs to you, authenticate you, and maintain the security of your account.

Legal basis: taking steps at your request prior to entering into a contract and performance of the contractual relationship.

Purchases and Order Management

We use your data to manage the shopping cart and checkout process, process orders, calculate prices and taxes, manage payments, manufacture products, arrange delivery, provide tracking information, and handle cancellations, returns, and refunds.

Legal basis: performance of the sales contract.

Product Manufacturing and Shipping

Meme Material uses external Print-on-Demand and logistics providers. We will share with them only the information necessary to manufacture and deliver the order, such as the products ordered and the information required for shipping.

Legal basis: performance of the contract.

Transactional Communications

We may send you messages necessary for the management of your account or orders, including:

• email verification;
• purchase confirmation;
• payment information;
• production status;
• shipping information;
• tracking;
• cancellations;
• returns and refunds;
• important communications concerning your account.

These communications form part of the service and are not marketing communications.

Legal basis: performance of the contract and, where applicable, compliance with legal obligations.

Customer Support

We process the information you provide to us in order to respond to enquiries, resolve issues, and handle complaints.

Legal basis: performance of the contractual relationship, pre-contractual measures and, where applicable, our legitimate interest in properly handling customer requests.

Compliance with Legal Obligations

We may retain and use certain information in order to comply with our tax, accounting, consumer protection, fraud prevention, and other obligations imposed by applicable law.

Legal basis: compliance with a legal obligation.

Security and Fraud Prevention

We may process certain technical data, access logs, and transaction information in order to protect Meme Material, its users, and its systems against unauthorised access, fraud, abuse, or other unlawful activities.

Legal basis: our legitimate interest in ensuring the security of the service and, where applicable, compliance with legal obligations.

Marketing Communications

We will only use your data to send you promotions, news, new product announcements, or other marketing communications where there is an appropriate legal basis and, where required, you have provided your consent.

You may unsubscribe at any time.

Creating an account or making a purchase does not automatically subscribe you to marketing communications.

4. Information Required to Make a Purchase

To complete a purchase, you must have an account with a verified email address and provide certain information required for payment and delivery.

If you do not provide the information that is necessary, we will not be able to process your order.

Email verification takes place when you create your account or when you change the email address associated with it. Once verified, and while the verification remains valid, you will not need to verify it again for each purchase.

5. Recipients and Service Providers

In order to provide our services, we may allow certain service providers acting on behalf of Meme Material, or requiring certain information in order to perform the service, to access personal data.

These may include:

• Payment service providers, such as Stripe.

• Print-on-Demand and manufacturing providers, such as Printful, Printify, Gelato, or other providers that may be added in the future.

• Shipping and logistics companies required to deliver orders.

• Hosting and technology infrastructure providers.

• Email service providers, used for account, transactional, and customer support communications.

• Analytics and advertising providers, only where applicable and in accordance with the user's consent preferences.

• Accountants, tax advisers, and other professional advisers where necessary to comply with our accounting, tax, or legal obligations.

We may also disclose information to public authorities, courts, tribunals, and other competent authorities where required by law.

Service providers processing personal data on behalf of Meme Material will be subject to the applicable data protection obligations.

If you choose to sign in with Google, Microsoft or Facebook, we receive your account identifier and the profile and email information needed to authenticate and link it. We do not receive that provider's password.

Services used include OVH hosting, Stripe payments, Printful manufacturing and fulfilment, Purelymail email and Sentry error diagnostics. Each service receives information needed for its function under the legal bases and safeguards described in this policy.

6. International Data Transfers

Some of our technology, payment, manufacturing, or logistics providers may process personal data outside the European Economic Area.

Where this involves an international transfer of personal data, we will use the mechanisms provided for under the General Data Protection Regulation (GDPR), such as:

• adequacy decisions adopted by the European Commission;
• Standard Contractual Clauses approved by the European Commission;
• or other legally recognised safeguards.

The GDPR permits transfers to third countries on the basis of adequacy decisions or, in their absence, through appropriate safeguards such as Standard Contractual Clauses.

You may request further information about the applicable safeguards by writing to staff@memematerial.shop.

7. How Long We Retain Personal Data

We will retain personal data only for as long as necessary for the purposes for which it was collected and for any additional periods required by applicable law.

As a general rule:

• Account data: for as long as your account remains active and afterwards for the period necessary to address potential legal liabilities.

• Verification codes and temporary verification data: for a short and limited period necessary to complete the verification process and ensure its security.

• Orders, invoices, and transaction information: for the periods required under applicable tax, accounting, commercial, and consumer protection legislation.

• Enquiries and complaints: for as long as necessary to resolve them and afterwards for as long as legal liabilities may arise.

• Data used for marketing communications: until you withdraw your consent, unsubscribe, or exercise your right to object.

• Technical and security logs: for the period reasonably necessary to maintain security, investigate incidents, and prevent abuse.

When personal data is no longer required, it will be deleted or, where appropriate, anonymised.

8. Your Rights

You may exercise the rights granted to you under applicable data protection law, including:

• Access: to find out what personal data we process about you.
• Rectification: to correct inaccurate or incomplete information.
• Erasure: to request deletion of your personal data where applicable.
• Objection: to object to certain processing activities.
• Restriction: to request restriction of processing in certain circumstances.
• Data portability: to receive certain personal data in a structured format or request its transmission to another controller where applicable.
• Withdrawal of consent: to withdraw any consent you have previously provided at any time, without affecting the lawfulness of processing carried out before the withdrawal.

You may exercise these rights by contacting:

staff@memematerial.shop

We may request information reasonably necessary to verify your identity before processing certain requests.

The Spanish Data Protection Agency (AEPD) expressly recognises these rights and your right to lodge a complaint with the supervisory authority.

9. Complaints to the Data Protection Authority

If you believe that we have processed your personal data in breach of applicable data protection law, you may lodge a complaint with:

Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD)
https://www.aepd.es

10. Security

Meme Material implements technical and organisational measures designed to protect personal data against:

• unauthorised access;
• loss;
• alteration;
• disclosure;
• accidental or unlawful destruction.

These measures may include encrypted connections, access controls, credential protection, email verification, security event logging, and restrictions on access to personal data.

No system connected to the Internet can guarantee absolute security.

11. Cookies and Similar Technologies

Meme Material uses cookies and similar technologies necessary for features such as:

• authentication;
• session management;
• security;
• shopping cart functionality;
• basic preferences.

We may also use optional analytics or advertising technologies where applicable and where the required consent has been obtained.

You can find further information in our Cookie Policy.

Non-essential cookies must be properly disclosed and, where consent is required, users must be given an appropriate opportunity to accept or reject them.

12. Changes to this Privacy Policy

We may update this Privacy Policy when our services, service providers, or legal requirements change.

The current version will always be available on this page and will indicate the date on which it was last updated.

Where changes are particularly significant, we may notify users through the website, their account, or by email.