Privacy Policy

At Master Puff, we take the protection of your personal data seriously. This Privacy Policy explains what information we collect, the purposes for which we use it, how long we retain it, and what rights you may exercise.

This policy applies to personal data processed through the website masterpuff.com, as well as to communications, orders, and commercial relationships maintained with our customers and users.

1. Data Controller

The data controller responsible for processing your personal data is:

Global Web Markt, S.L.
Calle Cardenal Benlloch, 11 bajo
46920 Mislata (Valencia)
Spain

Tax ID: B54742531
VAT ID: ESB54742531
Email: [email protected]

2. Personal Data We Process

Depending on how you use our online store, we may process the following categories of data:

Identification data, such as your first and last name.
Contact details, such as your postal address, email address, and telephone number.
Billing information, such as tax identification number, VAT ID, company name, and billing address.
Information relating to orders, purchased products, returns, incidents, and communications.
Customer account data, when you choose to register.
Data required to process payments.
Technical and security information, such as IP address, browser, device, access logs, and information required to protect the website.
Communication preferences and consent to receive marketing communications.
Information you voluntarily provide when contacting us.

We do not request or need to process special categories of personal data, such as information relating to health, religion, sexual orientation, or political opinions. We recommend that you do not include this type of information in forms or communications sent to Master Puff.

3. How We Obtain Your Data

We may obtain your personal data when:

You place an order through our online store.
You create or use a customer account.
You contact us by email, forms, or other customer service channels.
You request a return, refund, warranty service, or support.
You subscribe to our newsletter.
You take part in promotions, surveys, or loyalty programmes.
You browse our website.
Your data is lawfully provided by a company, organisation, or individual on whose behalf you make a purchase.

When you provide us with another person’s data, you must ensure that you are authorised to do so and that the person has been informed of this Privacy Policy.

4. How We Use Your Data and the Legal Basis

4.1. Order Management and Contractual Relationship

We use your data to:

Process and deliver orders.
Manage payments.
Issue invoices.
Inform you about the status of your order.
Manage returns, refunds, warranties, and incidents.
Respond to enquiries relating to the products or services purchased.

The legal basis is the performance of the sales contract and the implementation of pre-contractual measures requested by the user.

If you do not provide the information marked as mandatory during the checkout process, we will not be able to process your order.

4.2. Creation and Management of Customer Accounts

When you create an account, we process your data to identify you, facilitate future purchases, display your order history, and allow you to manage your personal details and addresses.

The legal basis is the performance of the contractual relationship and the provision of the requested account features.

4.3. Customer Service

We process your data to respond to questions, requests, complaints, incidents, or communications.

The legal basis may be:

The performance of a contract or the implementation of pre-contractual measures.
Compliance with legal obligations.
Our legitimate interest in properly assisting customers and users.

4.4. Invoicing, Accounting, and Legal Obligations

We process and retain the data required to comply with tax, accounting, commercial, consumer protection, and other applicable legal obligations.

The legal basis is compliance with a legal obligation.

4.5. Fraud Prevention and Security

We may process technical information, order data, and activity patterns in order to:

Detect fraudulent transactions.
Prevent unauthorised access.
Prevent abuse, cyberattacks, and unlawful use.
Protect our systems, customers, and legal rights.
Verify orders where there are reasonable indications of fraud.

The legal basis is our legitimate interest in ensuring the security of the online store and preventing fraudulent activity, without prejudice to compliance with any applicable legal obligations.

4.6. Marketing Communications and Newsletter

When you voluntarily subscribe to our newsletter, we use your email address to send you information about Master Puff products, news, offers, and content.

The legal basis is your consent.

You may withdraw your consent at any time by using the unsubscribe link included in each communication or by contacting us at [email protected].

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Where there is an existing contractual relationship, we may also send you information about products similar to those previously purchased, where permitted by applicable law. You may object at any time and free of charge.

4.7. Website Analytics

We use Plausible Analytics to obtain general statistics about the use of the store, such as the number of visits, pages viewed, approximate country of access, device type, or general traffic source.

Plausible Analytics is used without tracking cookies, without creating individual profiles, and without tracking users across different websites.

These statistics help us understand the general performance of the website, identify errors, and improve the user experience.

The legal basis is our legitimate interest in measuring and improving the operation of the online store through a privacy-friendly analytics tool.

Master Puff does not use Google Analytics.

4.8. Legal Claims and Dispute Management

We may retain and use certain data where necessary to establish, exercise, or defend legal or out-of-court claims.

The legal basis is our legitimate interest in protecting our rights and complying with applicable legal obligations.

5. Cookies and Similar Technologies

Master Puff does not use advertising cookies or cookies intended to track users for commercial purposes across different websites.

We also do not use Google Analytics.

The store may use technical or strictly necessary cookies for purposes such as:

Keeping the user session active.
Keeping products in the shopping cart.
Remembering certain preferences.
Managing the checkout process.
Protecting forms and sessions.
Preventing fraud and cyberattacks.
Properly distributing website traffic.

These cookies are required for the operation and security of the website and are not used to create advertising profiles.

You can find more detailed information in our Cookie Policy.

6. Who We Share Your Data With

We do not sell, rent, or trade your personal data.

We may disclose data or allow access to it only where necessary to provide our services, manage orders, process payments, or comply with legal obligations.

6.1. Payment Service Providers

To process credit and debit card payments, we use the services of Cost+ and Fibonatix.

When you choose to pay by card, these providers may process the data required to:

Authorise and process the transaction.
Confirm the outcome of the payment.
Prevent fraudulent transactions.
Manage refunds, cancellations, and chargebacks.
Comply with their legal obligations relating to finance, accounting, security, and fraud prevention.

The data processed may include:

The cardholder’s first and last name.
Contact and billing details.
Order amount, currency, and reference.
Technical information relating to the transaction.
IP address, device, and security data.
Payment method data required to complete the transaction.

Full card details are entered and processed through the secure infrastructure of the relevant payment provider. Master Puff does not use this information for any purpose other than processing the requested transaction.

The legal basis is the performance of the sales contract, compliance with applicable legal obligations, and the legitimate interest in preventing fraud and protecting transaction security.

6.2. Shipping Companies

To prepare, manage, and deliver orders, we may provide the required information to the shipping companies used by Master Puff, including:

NACEX
Correos
UPS

Depending on the carrier and the selected service, the following information may be disclosed:

First and last name.
Delivery address.
Billing address, where necessary.
Telephone number.
Email address.
Order number or reference.
Tracking number.
Number, weight, and logistical characteristics of the parcels.
Delivery instructions.
Information required for customs procedures, where applicable.

These companies process the data in order to collect, transport, and deliver the order, report incidents, provide shipment status information, and comply with their legal obligations.

The legal basis for this disclosure is the performance of the sales contract and compliance with the legal obligations applicable to the transport and delivery of goods.

For certain international shipments, particularly those involving customs procedures, it may be necessary to provide additional information to carriers, postal operators, customs agents, or competent authorities.

6.3. Sendcloud

We use Sendcloud as an external platform to manage and document shipments.

Through Sendcloud, we may:

Generate shipping labels.
Select and book courier services.
Send the required information to the relevant carrier.
Manage shipping documentation.
Manage returns.
Check the logistical status of orders.
Send communications relating to delivery.

Sendcloud may process data such as:

First and last name.
Postal address.
Email address.
Telephone number.
Order information and reference.
Information about the products where required for shipping.
Selected carrier.
Tracking number.
Shipment status and tracking events.

Sendcloud processes this information as a logistics technology provider and, as a general rule, in accordance with the instructions of Global Web Markt, S.L.

The legal basis is the performance of the sales contract and our legitimate interest in efficiently managing shipments, returns, and logistical incidents.

6.4. TrackShip

We use TrackShip to check and manage the tracking of shipments sent to our customers.

Through this service, we may:

Check the current status of a shipment.
Display tracking information in the store.
Detect delays or incidents.
Automatically update the order status.
Inform the customer about delivery updates.
Obtain general statistics on shipping performance.

To provide these functions, TrackShip may process:

Order number.
Tracking number.
Shipping company.
Shipment status and tracking events.
Estimated or actual delivery dates.
Basic recipient information.
Email address and other data required to send tracking notifications, where this feature is enabled.

The legal basis is the performance of the sales contract and our legitimate interest in informing customers, identifying incidents, and improving delivery management.

6.5. Holded

We use Holded for administrative, accounting, and invoicing management.

Customer, order, and invoice data required for these functions may be processed through this platform.

The legal basis is compliance with our tax, accounting, and commercial obligations, as well as the performance of the contractual relationship.

6.6. Google Workspace

We use Google Workspace to manage emails, documents, and internal communications.

Communications sent to our email addresses may be processed through Google Workspace services.

6.7. MailerLite

We use MailerLite to manage subscriptions and send newsletters and marketing communications.

MailerLite may process information such as email address, name, subscription status, subscription date, interaction with communications, and technical information required to provide the service.

We will only include your data in these communications where there is a valid legal basis for doing so.

6.8. Plausible Analytics

We use Plausible Analytics to obtain aggregated statistics about the use of the website without using tracking cookies or creating individual advertising profiles.

6.9. Cloudflare

We use Cloudflare to improve the security, availability, performance, and content delivery of the online store.

Cloudflare may process technical information, such as IP addresses, web requests, browser information, and security logs, for the purpose of detecting attacks, blocking malicious traffic, and ensuring the proper operation of the website.

6.10. Other Technology Providers

We may also use web hosting, maintenance, technical support, backup, cybersecurity, business management, customer service, and other internal software providers required to operate our business.

These providers may only access personal data where necessary to provide the contracted service and must process it in accordance with our instructions while applying appropriate security and confidentiality measures.

6.11. Public Authorities

We may disclose personal data to public authorities, courts, law enforcement agencies, tax authorities, customs authorities, consumer protection authorities, or other bodies where required by law or pursuant to a valid request.

7. Communications Relating to Orders and Shipments

Communications regarding order confirmation, payment, preparation, dispatch, tracking, delays, incidents, or delivery form part of the contractual relationship.

For this reason, they may be sent even where the customer has not subscribed to the newsletter or has opted out of marketing communications.

These communications are not promotional and are required to properly manage the purchase and delivery of the order.

8. International Data Transfers

Some of our technology providers may be located outside the European Economic Area or may use group companies and subprocessors located in third countries.

Where an international data transfer takes place, we will implement the safeguards required under applicable data protection law, which may include:

An adequacy decision issued by the European Commission.
Participation in a data protection framework recognised by the European Union.
Standard contractual clauses approved by the European Commission.
Binding corporate rules.
Other valid safeguards under the General Data Protection Regulation.

You may request further information about the applicable safeguards by contacting us at [email protected].

9. How Long We Retain Your Data

We retain personal data for as long as necessary to fulfil the purpose for which it was collected.

As a general rule:

Order and invoicing data will be retained for the periods required under tax, accounting, and commercial legislation.
Customer account data will be retained while the account remains active or until you request its deletion, unless we are required to retain part of the information by law.
Enquiries and communications will be retained for the time required to respond and manage potential liabilities.
Data relating to claims, returns, or warranties will be retained for as long as legal liabilities may arise.
Data used for marketing communications will be retained until you withdraw your consent or object to the processing.
Technical and security logs will be retained for a limited period proportionate to their purpose.
Data required for fraud prevention may be retained for the time necessary to manage risks and potential claims.

Once these periods have expired, the data may remain blocked for the applicable statutory limitation periods. It will then be securely deleted or anonymised.

10. Automated Decision-Making and Profiling

We do not make decisions that produce legal or similarly significant effects on users based solely on automated processing.

Security and fraud prevention tools may generate alerts or risk classifications. Where a transaction requires a significant decision, we may carry out an additional review before cancelling, withholding, or requesting verification of an order.

We do not use browsing data to create individual advertising profiles.

11. Your Data Protection Rights

You may exercise the following rights:

Access: to find out what personal data we process about you.
Rectification: to request the correction of inaccurate or incomplete data.
Erasure: to request the deletion of your data where it is no longer required or where another legal ground applies.
Objection: to object to certain processing based on our legitimate interests or relating to marketing communications.
Restriction: to request that we temporarily restrict the processing of your data in certain circumstances.
Data portability: to receive the data you have provided in a structured format and transmit it to another controller where technically feasible.
Withdrawal of consent: to withdraw previously given consent at any time.
Not to be subject to solely automated decisions: where such decisions produce legal effects or similarly significantly affect you.

To exercise your rights, you may contact:

Global Web Markt, S.L.
Calle Cardenal Benlloch, 11 bajo
46920 Mislata (Valencia)
Spain

Email: [email protected]

Please state which right you wish to exercise and provide the information required to identify you and process your request.

Where we have reasonable doubts about your identity, we may request additional information to verify that the request has been made by the data subject.

The exercise of these rights is free of charge, except where requests are manifestly unfounded or excessive, particularly because of their repetitive nature.

12. Complaints to the Supervisory Authority

If you believe that the processing of your personal data does not comply with applicable data protection law, you may lodge a complaint with the relevant supervisory authority.

In Spain, the competent authority is:

Spanish Data Protection Agency (AEPD)
Calle Jorge Juan, 6
28001 Madrid
Spain

Before submitting a complaint, we would appreciate the opportunity to resolve the matter directly. You may contact us at [email protected].

13. Personal Data of Minors

Master Puff does not target its products or services at minors.

We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data without the legally required authorisation, we may delete the data and cancel any related account or request.

The person placing an order declares that they have the legal capacity required to enter into a contract and that they meet any applicable age requirements for the products purchased.

14. Information Security

We apply technical and organisational measures designed to protect personal data against:

Unauthorised access.
Accidental loss or destruction.
Improper alteration.
Unauthorised disclosure.
Fraudulent use.
Cyberattacks.

Among other measures, we may use encrypted connections, access controls, authentication systems, security logs, backups, and infrastructure protection services.

However, no system connected to the Internet can guarantee absolute security. Users must also protect their login credentials, use strong passwords, and avoid sharing access details with others.

15. Links to Third-Party Websites

Our website may include links to external websites, manufacturers, social networks, or third-party services.

Global Web Markt, S.L. does not control the privacy policies of these websites and is not responsible for data processing carried out by third parties outside masterpuff.com.

We recommend reviewing the privacy policy of each external service before providing personal data.

16. Changes to This Privacy Policy

We may amend this Privacy Policy where necessary to reflect:

Legal or regulatory changes.
Changes to our services.
The addition or replacement of service providers.
New store features.
Changes to the way we process personal data.

The current version will be available on masterpuff.com and will indicate the date of the latest update.

Where a change is particularly significant, we may communicate it through a prominent notice on the website or by other appropriate means.

17. Contact

For any questions relating to this Privacy Policy or the processing of your personal data, you may contact us at:

Global Web Markt, S.L.
Calle Cardenal Benlloch, 11 bajo
46920 Mislata (Valencia)
Spain

Tax ID: B54742531
VAT ID: ESB54742531
Email: [email protected]

Last updated: August 3, 2026