Privacy policy

Last updated: October 23, 2026

This Privacy Policy explains how MemoryLayers, operated by Jan Martí Paredes, a sole trader established in Spain ("we", "us" or "our"), collects, uses and shares personal information when you browse our Shopify-powered store, buy a family handprint kit, contact us or exercise your privacy rights.

Data controller: Jan Martí Paredes, trading as MemoryLayers.

Email: contact@memorylayers.store.

Business address: Torrent Fontsana, 08330 Premià de Mar, Barcelona, Spain.

Intended website: memorylayers.store.

1. What Information We Collect

Depending on your interaction with the store, we process:

  • Identity and contact information: name, email, delivery and billing addresses, and phone number if you provide one at checkout.

  • Order and transaction information: items purchased, order numbers, payments and refunds, delivery details, tracking status and customer service history.

  • Payment information: payment authorisation, transaction and limited payment-method details provided to us by Shopify or payment partners. Card transactions are processed by the payment providers; we do not ask customers to send full card numbers to our support email.

  • Technical and usage information: IP address, device/browser characteristics, cookie preferences and information about visits and basic site interactions, as collected by Shopify and any enabled store functionality.

  • Communications: information you voluntarily include in messages, return requests or product feedback.

We collect data directly from you, automatically through Shopify-powered store functionality, and from providers involved in your orders, payments and delivery. Please do not send sensitive personal information unnecessarily.

2. Why We Use Information and Our Legal Bases

For processing subject to the GDPR or UK GDPR, the principal purposes and legal bases are:

  • Fulfil purchases and provide support: process payments, accept and ship orders, send tracking and transaction notices, deal with refunds or product complaints. Legal basis: performance of a contract or taking steps you request before a contract.

  • Meet legal obligations: account for sales, maintain legally required transaction records, comply with tax rules and respond to valid authorities' requests. Legal basis: legal obligation.

  • Keep the store secure: detect misuse, resolve payment disputes, investigate suspected fraud and maintain technical reliability. Legal basis: legitimate interests, balanced against your rights, or a legal obligation where applicable.

  • Optional cookies and analytics: where enabled and where required by applicable law, use of non-essential cookies or similar technologies is based on your consent, which you can withdraw through the store's cookie preferences.

  • Respond to voluntary enquiries: answer questions and help you with requests. Legal basis: contractual necessity or legitimate interests as appropriate.

We do not currently operate paid advertising campaigns or send promotional marketing emails or SMS messages. Our social media activity is focused on organic posts on TikTok, Instagram and YouTube. We do not rely on our Privacy Policy as a substitute for any consent that applicable law requires.

3. Who Receives Information

We share only information reasonably needed for operating the store with service providers, including:

  • Shopify, our ecommerce, checkout and store-infrastructure provider, and the payment providers available at checkout;

  • AliExpress/Choice suppliers and order-fulfilment partners in China, as necessary to prepare and deliver orders, together with shipping carriers, delivery operators and customs agents;

  • providers needed for security, technical maintenance, accounting or handling lawful requests, where applicable.

For example, fulfillment and delivery partners require your recipient name, delivery address, contact details when necessary, and order contents. We do not claim that AliExpress is the legal seller of your purchase: MemoryLayers remains your seller.

Shopify may independently process some information as described in its own privacy documentation, including the Shopify Consumer Privacy Policy. You may also consult its privacy controls, where available. We do not sell customer contact lists.

4. Cookies and Shopify Privacy Preferences

Shopify uses technologies necessary for shopping-cart operation, checkout, security and site functionality. Additional measurement or optional technologies may depend on which Shopify features are enabled. Where consent is required, we present Shopify's cookie banner and honor choices made through its privacy settings. You can also manage cookies through your browser, although disabling strictly necessary cookies may disrupt checkout. The specific cookies used may change as Shopify services are updated.

5. International Processing and Transfers

We operate from Spain and sell only to the United States, Canada, Australia and the United Kingdom. Information may be processed or accessed outside your country, including in China by order-fulfilment partners and by Shopify or its service providers. Where the GDPR or UK GDPR applies to international transfers, we must rely on a legally valid transfer mechanism, such as an applicable adequacy decision or appropriate contractual safeguards when required. You may contact us for more information about the safeguards relevant to your information.

6. How Long We Keep Information

We keep personal information only as long as reasonably necessary for the purposes described, considering the status of orders, returns and support requests, tax and accounting obligations, fraud prevention, legal limitation periods and any applicable law. Where information is no longer needed, we will delete or anonymise it as appropriate, unless retention is legally required. You may ask about the retention applicable to your personal information.

7. Security

We use Shopify and other service providers to help protect personal information and apply reasonable administrative and technical safeguards. No system is completely secure. Please do not email full payment card numbers or unnecessary sensitive data to customer support.

8. Your Rights

Depending on applicable law and where you live, you may have rights to:

  • access and obtain a copy of your personal information;

  • correct inaccurate data;

  • request deletion, subject to legal exceptions;

  • restrict or object to certain uses, including direct marketing;

  • receive certain data in portable form;

  • withdraw consent at any time where processing relies on consent; and

  • complain to a competent data-protection authority.

For residents within the EEA, the Spanish Data Protection Agency (AEPD) is a relevant supervisory authority for our Spanish establishment. UK residents may also contact the Information Commissioner's Office (ICO) where appropriate. Other local privacy and consumer regulators may have jurisdiction according to applicable law.

To make a privacy request, email contact@memorylayers.store and describe the request. We may need to verify your identity before disclosing account details and will respond within the legally required period. We do not discriminate against people for exercising their legal privacy rights.

9. Children

Our store is intended for adults purchasing family keepsake kits. We do not knowingly solicit personal information directly from children. If you believe a child submitted personal information to us improperly, contact us so we can investigate and take appropriate action.

10. Updates and Contact

We may update this policy to reflect changes to our operations or legal obligations and will publish the revised version with an updated date. If additional notice is required by law, we will provide it.

Privacy enquiries: contact@memorylayers.store.

Controller: Jan Martí Paredes, trading as MemoryLayers, Torrent Fontsana, 08330 Premià de Mar, Barcelona, Spain.