Privacy policy.
Last updated: 30 October 2026
1. Who is responsible for your data.
This website, vivoxpand.com, and its online shop are operated by the company responsible for your personal data (the "controller"):
- VivoArchitect Ibérica, S.L., trading as VivoXpand
- NIF B22939599
- C/ Leonardo da Vinci 18, 41092 Sevilla, Spain
- Email: info@vivoxpand.com
For any question about your data, write to us at that address.
2. Data we collect.
We collect only the data we need for each purpose below. Most of it you give us directly.
- Contact and enquiry data: name, email, phone, company and your message, when you write to us or use the partner form.
- Order data: name, delivery and billing address, email, phone, products bought, order history and correspondence about your order.
- Payment data: handled directly by our payment providers. We do not see or store your full card details.
- Technical data: IP address, browser and device type, pages visited and cookie data (see section 4).
Fields marked as required in our forms are needed to answer you or fulfil your order. Without them we cannot do so. All other fields are optional.
Please do not send us health information through our forms. We do not need it to answer your enquiry.
3. Purposes and legal bases.
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your enquiries and partnership requests | Steps taken at your request before a contract (Art. 6.1.b); otherwise our legitimate interest in replying (Art. 6.1.f) |
| Processing orders, payments, delivery, returns and after-sales service | Performance of a contract (Art. 6.1.b) |
| Keeping invoices and accounting records; handling consumer rights | Legal obligation (Art. 6.1.c) |
| Emails about similar products to existing customers | Legitimate interest, as allowed by Art. 21.2 of Spanish Law 34/2002 (LSSI); you can opt out in every email |
| Keeping the website secure and working; preventing fraud | Legitimate interest (Art. 6.1.f) |
| Analytics cookies (Google Analytics) and any marketing cookies | Your consent (Art. 6.1.a) |
Where we rely on legitimate interest, you can object at any time (see section 7). We do not make decisions about you based solely on automated processing, and we do not build profiles that have legal or similar effects on you.
4. Cookies.
We use cookies that are strictly necessary for the website and shop to work, such as keeping your basket and completing checkout. These do not need your consent.
We use analytics or marketing cookies only if you accept them in our cookie banner. You can change or withdraw your choice at any time through the cookie settings link at the bottom of each page, or by deleting cookies in your browser.
5. Recipients and international transfers.
We do not sell your data. We share it only with:
- Service providers acting on our behalf under data processing agreements: website hosting (Lovable), our e-commerce platform (Shopify), payment providers, couriers, our email tools, and Google for Google Analytics (only if you accept analytics cookies).
- VivoXpand Sàrl (Epalinges, Switzerland), our distributor in Switzerland, when your enquiry concerns the Swiss market.
- Public authorities, courts and our advisers (such as tax advisers), when the law requires it.
Some recipients are outside the European Economic Area, mainly in Switzerland, Canada and the United States. Transfers rely on European Commission adequacy decisions (Switzerland, Canada, and US companies certified under the EU-US Data Privacy Framework) or on the Commission's standard contractual clauses. You can ask us for a copy of these safeguards.
6. How long we keep your data.
We keep your data only as long as needed for its purpose, then block it for the periods the law requires before deleting it.
| Data | How long |
|---|---|
| Enquiries and partner requests | 12 months after our last exchange, unless a business relationship follows |
| Orders, invoices and accounting records | 6 years (Art. 30, Spanish Commercial Code); tax data at least 4 years |
| Data needed for warranty or consumer claims | Until the legal guarantee and limitation periods end |
| Cookies | As shown in the cookie banner; up to 2 years for Google Analytics cookies |
7. Your rights.
You can ask us at any time to:
- access the data we hold about you;
- correct inaccurate data or delete it;
- restrict or object to its processing, including for direct marketing;
- receive your data in a portable format;
- withdraw any consent you have given, without affecting earlier processing.
Write to info@vivoxpand.com. We may ask you to confirm your identity. We answer within one month.
If you think we have not handled your data correctly, you can complain to the Spanish Data Protection Agency (www.aepd.es). If you live in Switzerland, you can also contact the Federal Data Protection and Information Commissioner (www.edoeb.admin.ch).
8. Security, minors and changes.
Security. We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, such as encrypted connections and restricted access.
Minors. Our website and products are intended for adults. We do not knowingly collect data from anyone under 18.
Changes. We may update this policy when our services or the law change. The date at the top shows the latest version. We will tell you directly about any significant change.