Privacy policy

Data controller

TIME MACHINE LABS · Tax ID [PENDIENTE — NIF/CIF] · [PENDIENTE — domicilio completo en España] · hola@mycleveraging.com

Data we process

Orders: name, email, phone and shipping address (collected at checkout). Out-of-stock reservations: additionally, a tokenized reference to your payment method held exclusively by Stripe (we never see or store your card number; we only keep the type, last 4 digits and expiry) and the record of your express consent (date, IP, browser and version of the accepted text) as proof. Support: your conversations with our assistant and the emails you send us. Feedback: the text you submit and, if provided, your email. Technical: preferred language and portal session.

Purposes and legal bases

Managing your order, shipping and invoicing (contract performance and legal obligation). Assisting you via chat or email and handling returns and incidents (contract performance and legitimate interest). Improving the store based on voluntary feedback (consent). We do not send marketing communications without your consent.

Recipients (processors)

Stripe (secure payments), Sendcloud and the assigned carrier (shipping and tracking), Resend (transactional email), Neon and Vercel (database and web hosting) and Anthropic (processes support-assistant conversations to generate replies). Data processing agreements are in place with all of them; transfers outside the EEA rely on standard contractual clauses or other valid safeguards.

Retention

Order and invoicing data are kept for the statutory tax and commercial periods. A reservation's payment method reference is deleted when you cancel it or once the charge completes (data minimization); the consent record is kept as proof for the statutory periods. Support conversations and feedback are kept only while needed to assist you, and at most 2 years after the last contact.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hola@mycleveraging.com. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).