Privacy policy

Privacy Policy

Last updated: 06/09/2026

Back Align operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, as a customer, with a carefully considered shopping experience (the "Services"). Back Align runs on the Shopify platform, which enables us to provide you with these Services. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through the Services, or otherwise communicate with us. In the event of a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will prevail with respect to the collection, processing, and disclosure of your personal information.

We recommend reading this policy carefully. By using or accessing the Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use, and disclose your information, as described here.

1. Data controller

  • Owner: Aleix Gómez Plans
  • Legal status: Sole trader (self-employed)
  • Tax ID (NIF): 48196159G
  • Registered address: Carrer de Gurrea 42, 08202 Sabadell, Barcelona, Spain
  • Trade name: Back Align
  • Contact email: backalign.shop@gmail.com

For the purposes of applicable data protection regulations, Aleix Gómez Plans (Back Align) is the data controller for your personal information.

2. Personal information we collect

We understand "personal information" to mean information that identifies you or can reasonably be linked to you. It does not include information collected anonymously or that has been anonymized so that it can no longer be linked to you. Depending on how you interact with the Services, we may collect or process the following categories of personal information:

  • Contact details: name, address, billing address, shipping address, phone number, and email.
  • Financial details: credit/debit card information, financial account details, transaction details, payment method, and payment confirmations (processed by Stripe, PayPal, and Shopify Payments; we do not store this data on our own servers).
  • Account details: username, password, preferences, and settings, if you create an account.
  • Transaction details: items you view, add to your cart or wishlist, purchases, returns, exchanges or cancellations, and purchase history.
  • Communications: the content of your messages when you contact us, for example through a customer service inquiry.
  • Device details: information about your device, browser, network connection, IP address, and other unique identifiers.
  • Usage details: information about how you interact with or browse the Services.

3. Sources of personal information

We may collect your personal information from the following sources:

  • Directly from you, when you create an account, use the Services, communicate with us, or otherwise provide us with your data.
  • Automatically, through your device when you use our Services or visit our site, through cookies and similar technologies.
  • From our service providers, when we engage them to enable certain technological features (Shopify, Stripe, PayPal, Shopify Payments, Shopify Email).
  • From our advertising partners, such as Meta (Facebook/Instagram Ads), when you interact with our advertising.

4. How we use your personal information

Depending on how you interact with us, we may use your personal information to:

  • Provide, personalize, and improve the Services: process payments, manage orders, shipping, returns and exchanges, create and manage your account, remember your preferences, and offer you a personalized shopping experience.
  • Marketing and advertising: send you promotional communications by email (via Shopify Email) and show you personalized ads on Meta (Facebook/Instagram) based on your activity in our store.
  • Security and fraud prevention: authenticate your account, ensure a secure checkout process, and detect or prevent fraudulent or illegal activity.
  • Customer support: respond to your inquiries and maintain our business relationship with you.
  • Legal compliance: comply with tax, accounting, and legal obligations, and respond to requests from competent authorities.

5. Legal basis for processing (GDPR)

We process your personal information based on:

  • The performance of a contract with you (processing and managing your order).
  • Your consent, for sending marketing communications and using advertising cookies.
  • Our legitimate interest, to prevent fraud and improve our Services.
  • Compliance with a legal obligation, such as tax and accounting regulations.

6. How we share your personal information

We may disclose your personal information to third parties in the following circumstances:

  • With Shopify and other providers who perform services on our behalf (IT management, payment processing, analytics, customer support, cloud storage, shipping, and logistics).
  • With Stripe, PayPal, and Shopify Payments, for payment processing.
  • With Meta (Facebook/Instagram), for personalized advertising. Shopify may facilitate personalized advertising based on your online activity with various merchants and websites. Depending on where you live, you may have the right to opt out of having your information shared for advertising purposes.
  • With shipping companies, to manage delivery of your order.
  • When you authorize or request it, or as part of a business transaction (merger, sale of the business), to comply with legal obligations, or to protect our rights and those of our users.

We do not sell your personal information to third parties.

7. Relationship with Shopify

The Services are hosted on Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit through the store will be transmitted to and shared with Shopify, as well as with third parties who may be located in countries other than your own. In addition, we use certain advanced Shopify features that incorporate data obtained from your interaction with our store, together with other merchants and with Shopify. For these features, Shopify acts as the data controller for your information, including handling requests you make regarding your rights in connection with these purposes. You can find more information in Shopify's Privacy Policy for Consumers and exercise certain rights through Shopify's Privacy Portal.

8. Cookies

We use our own and third-party cookies for the operation of the site and for advertising purposes (Meta Ads). You can manage your preferences from our store's cookie consent banner or from your browser settings.

9. Third-party websites and links

The Services may include links to websites or platforms operated by third parties. If you access sites that are not affiliated with or controlled by us, we recommend reviewing their own privacy and security policies. We do not guarantee and are not responsible for the privacy or security of such sites.

10. Children's data

The Services are not directed at minors, and we do not knowingly collect personal information from individuals under 18 years of age in Spain. If you are the parent or legal guardian of a minor who has provided us with their personal information, you may contact us to request its deletion.

11. Data security and retention

No security measure is perfect or infallible, and we cannot guarantee "absolute security." We recommend that you do not use insecure channels to send us sensitive or confidential information.

The retention period for your personal information depends on various factors: whether it is necessary to maintain your account, provide you with the Services, comply with legal obligations (for example, tax and accounting obligations), or resolve disputes.

12. Your rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

  • Right of access: request access to the personal information we hold about you.
  • Right to erasure: request that we delete your personal information.
  • Right to rectification: request that we correct inaccurate information.
  • Right to portability: receive a copy of your personal information and request that it be transferred to a third party.
  • Communication preference management: you can unsubscribe from our promotional communications at any time using the unsubscribe link in our emails. Even if you unsubscribe, we may still send you non-promotional communications related to your account or orders.

If you reside in the European Union, you additionally have the right to:

  • Object to and restrict processing: request that we stop processing your personal information for certain purposes, or that we restrict such processing.
  • Withdraw consent: where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing prior to its withdrawal.

You can exercise these rights by contacting us at backalign.shop@gmail.com. To learn how Shopify processes your personal information and the rights you can exercise directly with Shopify, visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising these rights. We may need to verify your identity before processing your request, in accordance with applicable regulations. You may also designate an authorized representative to exercise these rights on your behalf; in that case, we may require proof of such authorization.

13. Complaints

If you have any complaint about how we handle your personal information, please contact us first at backalign.shop@gmail.com. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD), through www.aepd.es, or with the data protection authority in your EU country of residence.

14. International data transfers

Your personal information may be transferred, stored, and processed outside the country in which you reside, including outside the European Economic Area (EEA), due to the use of providers such as Shopify (Canada/USA), Stripe, PayPal, and Meta.

When we transfer your personal information outside the EEA, we ensure that such transfer takes place in accordance with legally recognized mechanisms, such as the European Commission's Standard Contractual Clauses, or to countries that have an adequacy decision from the European Commission.

15. Changes to this policy

We may update this Privacy Policy periodically to reflect changes in our practices or for legal or operational reasons. We will post the revised version on this page, updating the "Last updated" date, and will notify you when applicable regulations require it.

16. Contact

If you have questions about our privacy practices or this policy, or wish to exercise your rights, contact us at:

📧 backalign.shop@gmail.com
📍 Carrer de Gurrea 42, 08202 Sabadell, Barcelona, Spain