healthypillowPrivacy Policy
Last updated: November 3, 2026
This policy explains what personal data HealthyPillow collects when you visit gethealthypillow.com or buy from us, why we collect it, who we share it with and what rights you have. We collect only what we need to deliver your order and look after you as a customer. We do not sell your personal data.
1. Who we are
Data controller: Iván Tarajano Ramírez, trading as HealthyPillow
Tax ID: 46252701T
Address: Calle León y Castillo 64, 35003 Las Palmas de Gran Canaria, Spain
Email: [email protected]
Because HealthyPillow is operated from Spain, we process personal data in line with the EU General Data Protection Regulation (GDPR) and Spanish data protection law, wherever our customers live.
2. What we collect
| Data | When | Why |
|---|---|---|
| Name, shipping address, email and phone number | When you place an order | To ship your order, send order and tracking emails and handle any support request |
| Payment details | At checkout | Collected and processed directly by Stripe. We never see or store your full card number. |
| Order details (product, color, quantity, amount) | When you place an order | To fulfil the order and keep accounting records |
| Messages you send us | When you contact support | To answer you |
| Technical data (IP address, browser type) | When you visit the site | Processed by our hosting and font providers to deliver the website securely |
3. Legal basis
- Performance of a contract: to process and deliver your order.
- Legal obligation: to keep invoices and accounting records as required by tax law.
- Legitimate interest: to keep the website secure, prevent fraud and answer your questions.
- Consent: for marketing emails, only if you opt in. You can withdraw it at any time.
4. Who we share it with
We share personal data only with the service providers we need to run the store, each bound by its own privacy and security commitments:
- Stripe (payments). Stripe processes your payment details under its own privacy policy.
- CJdropshipping (order fulfilment). Receives your name, shipping address, phone and email so it can pack and ship your order from its US warehouse.
- FedEx, UPS or the carrier assigned (delivery). Receives your name, address and phone to deliver the parcel.
- Cloudflare (website hosting and order processing).
- Google Fonts and cdnjs (website fonts and code libraries). They may receive your IP address when the page loads.
- Email provider (order and shipping emails), if enabled.
Some of these providers are located in or transfer data to the United States and other countries outside the European Economic Area. Where that happens, transfers are covered by the EU-US Data Privacy Framework, the European Commission's Standard Contractual Clauses or another valid safeguard.
5. How long we keep it
- Order and invoice data: for as long as tax and accounting law requires (generally up to 6 years).
- Support messages: up to 2 years after the conversation ends.
- Marketing preferences: until you unsubscribe.
6. Cookies
Our website does not use advertising or tracking cookies. The checkout page is provided by Stripe, which uses cookies that are necessary to process payments securely and prevent fraud. If we add analytics or advertising tools in the future, we will update this policy and ask for your consent where required.
7. Your rights
You can ask us at any time to access, correct, delete or export your personal data, to restrict or object to how we use it, or to withdraw your consent. Write to [email protected] and we will reply within one month.
If you are not satisfied with our answer, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es) or the data protection authority where you live.
California residents: you have the right to know what personal information we collect and to ask us to delete it. We do not sell or share personal information for cross-context behavioral advertising.
8. Children
Our store is not directed at children under 16 and we do not knowingly collect their data.
9. Security
The site is served over HTTPS. Payments are handled by Stripe, a PCI DSS Level 1 certified provider. Access to order data is restricted to the people who need it to run the store.
10. Changes
If we change this policy, we will update the date at the top of this page. Significant changes will be highlighted on the website.