Last updated: 15 May 2026
At INKY Revolution, we take the protection of your personal data seriously. This Privacy and Cookies Policy clearly explains what information we process, for what purpose, on what legal basis, and what your rights are when you browse our website, subscribe to the newsletter or make a purchase via https://inkyrevolution.com (hereinafter, the “Website”).
This policy has been drawn up in compliance with Regulation (EU) 2016/679 of 27 April, the General Data Protection Regulation (hereinafter the ‘GDPR’), Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (“LOPDGDD”) and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (‘LSSI’).
1. Who is responsible for processing your data?
The data controller for personal data collected via the Website is:
- Data Controller: INKY REVOLUTION
- Address: France
- Contact email: info@inkyrevolution.com
Hereinafter, we will refer to this entity as “INKY Revolution”, “we” or “the brand”.
If you have any questions regarding the processing of your personal data, you can contact us at the email address provided.
Note: depending on the volume and nature of the processing carried out, INKY Revolution will assess the need to appoint a Data Protection Officer (DPO) in accordance with Article 37 of the GDPR. If one is appointed, their contact details will be included in this policy.
2. What personal data do we collect and process?
Depending on the services you use and your interactions with us, we may process the following categories of personal data:
- Identification and contact details: first name, surname, postal address for delivery and billing, email address, telephone number.
- Purchase-related data: products purchased, amount, date and method of payment, order history, returns and incidents.
- Financial and payment data: details relating to your bank card, PayPal account or other payment method are entered and processed directly within the secure environment of the relevant payment gateway, in compliance with the PCI-DSS standard. INKY Revolution does not store the full card number or CVV on its systems.
- Browsing and device data: IP address, device identifiers, browser type, operating system, pages visited, browsing time and data derived from the use of cookies and similar technologies, in accordance with the provisions of the cookies section of this policy.
- Data derived from customer service: the content of communications you have with us via email or social media (Instagram).
- Voluntarily provided data: information you provide when taking part in competitions, prize draws, surveys or promotions.
You warrant that the personal data provided is true and accurate, and undertake to notify us of any changes to it. Completing the fields marked as mandatory on the forms is necessary for the provision of the requested service; failure to do so may prevent your request from being processed.
3. For what purposes do we process your data and what is the legal basis?
Below, we set out the purposes for which INKY Revolution may process your personal data, together with the legal basis justifying each processing activity, in accordance with Article 6 of the GDPR.
A) Order processing and purchase management
We process your data to manage purchases made via the Website: to confirm the order, process payment, manage dispatch and delivery, issue the invoice, handle returns, refunds and complaints, as well as any other matters arising from the commercial relationship.
To this end, we will send you transactional communications (order confirmation, dispatch status, returns, etc.) by email.
- Legal basis: performance of the sales contract, in accordance with Article 6(1)(b) of the GDPR. The processing of this data is necessary to fulfil the obligations arising from the General Terms and Conditions of Sale accepted at the time of purchase.
B) Compliance with legal obligations
We process your data to comply with the legal obligations incumbent upon INKY Revolution, in particular those of a tax, accounting and commercial nature (issuing invoices, retaining accounting records, responding to requests from the relevant authorities, handling consumer complaints, etc.).
- Legal basis: compliance with legal obligations applicable to the data controller, in accordance with Article
6.1.c) of the GDPR, in particular Law 58/2003 (General Tax Law), the Commercial Code, Law 37/1992 on VAT and Royal Legislative Decree 1/2007, which approves the revised text of the General Law for the Protection of Consumers and Users.
C) Customer service
- Where the enquiry relates to an existing order: performance of the contract (Article 6(1)(b) of the GDPR).
- Where the enquiry is a general one, prior to or unrelated to a contract: INKY Revolution’s legitimate interest in properly addressing communications from those who contact the brand (Art. 6.1.f) GDPR), balanced against your rights and freedoms.
- Where the matter concerns a formal consumer complaint: compliance with a legal obligation (Art. 6.1.c) GDPR).
D) Fraud prevention and security
We process data relating to the purchase process (order details, IP address, browsing behaviour during checkout) to prevent, detect and investigate potential fraud, identity theft or misuse of the website and payment methods.
- Legal basis: INKY Revolution’s legitimate interest (Art. 6(1)(f) GDPR) in protecting the integrity of commercial transactions, preventing fraud and safeguarding both users and the brand itself. INKY Revolution has carried out the necessary balancing of this legitimate interest against the rights of data subjects, concluding that the processing is proportionate and necessary. You may request further information regarding this balancing test by contacting us at the contact address.
E) Improvement of products and services
We may process data derived from browsing and use of the Website in aggregated form and, as far as possible, in an anonymised manner, for the purpose of analysing trends, improving the user experience, optimising our product range and developing new products.
- Legal basis: INKY Revolution’s legitimate interest (Article 6(1)(f) of the GDPR) in analysing the functioning of the Website and continuously improving the range of products and services. Where this analysis is carried out using cookies or other similar technologies that are not strictly necessary, your consent will also be required, in accordance with the cookies section of this policy.
F) Prize draws, competitions and promotions
Should you take part in any prize draw, competition or promotional campaign organised by INKY Revolution (including those run on Instagram or other social media platforms), we will process your data to manage your participation, notify you of the result and, where applicable, deliver the prize.
- Legal basis: your consent by accepting the terms and conditions of the promotional campaign (Art. 6.1.a) GDPR) and/or the performance of the contract arising from those terms and conditions (Art. 6.1.b) GDPR).
G) Exercising data protection rights
We will process only the data strictly necessary to manage requests you send us to exercise your rights under the GDPR (access, rectification, erasure, objection, restriction, portability).
- Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR), in conjunction with Articles 12 to 22 GDPR.
4. Do we carry out automated decision-making or profiling?
INKY Revolution does not carry out automated decision-making that produces legal effects or similarly significantly affects you, within the meaning of Article 22 of the GDPR.
Where applicable, analytical or personalisation tools may be used to segment audiences for marketing purposes. Where this involves profiling, we will inform you in advance and, where appropriate, seek your consent.
5. How long do we keep your data?
INKY Revolution will retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected and, in any event, for the periods required by law.
As a guide:
|
Data category |
Retention period |
|
Customer and purchase data |
During the term of the contractual relationship and, once it has ended, for the applicable statutory periods (generally, 6 years pursuant to Article 30 of the Commercial Code for commercial documentation and 4 years pursuant to Article 66 of the General Tax Law for tax data). |
|
Contact and customer service data |
Until the query or complaint has been resolved and, subsequently, for the limitation period of any resulting claims (3 years for consumer claims, pursuant to Article 1964 of the Civil Code following the reform introduced by Law 42/2015). |
|
Browsing data (cookies) |
In accordance with the time limits indicated in the cookies section and in the settings panel. |
Once these periods have elapsed, the data will be blocked for as long as necessary to meet any potential legal obligations and, once these have expired, will be permanently deleted.
6. Who do we share your data with?
Your personal data may be disclosed to the following recipients, in accordance with the terms and safeguards set out below:
6.1. Data processors
INKY Revolution uses service providers who, in their capacity as data processors, access your data to carry out the tasks we have entrusted to them. These service providers are contractually bound in accordance with Article 28 of the GDPR and will only process your data in accordance with our instructions, without using it for their own purposes. The categories of data processors used by INKY Revolution are:
- Website hosting and maintenance provider.
- E-commerce platform (WooCommerce / WordPress) and modules associated with the management of the online shop.
- Payment gateways (Stripe) to process transactions.
- Transport and logistics companies, for the delivery of orders.
Note: if you wish to know the specific identity of the providers currently providing these services to INKY Revolution, you may request this by writing to info@inkyrevolution.com.
6.2. Disclosure to third parties
INKY Revolution does not sell or disclose your personal data to third parties for commercial purposes.
7. What are your rights?
As the data subject, you have the following rights, which you may exercise at any time free of charge:
| Right | Description |
|---|---|
| Access | To know whether we are processing your personal data and, if so, to obtain a copy of it. |
| Rectification | To request the correction of inaccurate or incomplete data. |
| Erasure (“right to be forgotten”) | To request the deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected, you withdraw consent, or you object to the processing. |
| Restriction of processing | To request that we limit the processing of your data in legally предусмотренных cases, in which case we will only retain it for the establishment, exercise, or defense of legal claims. |
| Objection | To object to the processing of your data when it is based on legitimate interest or used for direct marketing purposes, including profiling related to such marketing. |
| Data portability | To receive your data in a structured, commonly used, and machine-readable format, and to transmit it to another controller when processing is based on consent or the performance of a contract and is carried out by automated means. |
| Not to be subject to automated decision-making | Not to be subject to individual decisions based solely on automated processing that produce legal effects or significantly affect you. |
| Withdraw consent | When processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal. |
To exercise any of these rights, you may contact:
- Email: info@inkyrevolution.com
Please indicate in your request which right you wish to exercise and include a copy of your ID or equivalent document, only when necessary to verify your identity.
We will respond to your request within a maximum period of one month from its receipt, which may be extended by an additional two months depending on the complexity and number of requests, in accordance with Article 12.3 of the GDPR.
Right to lodge a complaint with a supervisory authority: if you consider that the processing of your data does not comply with applicable regulations, or that we have not properly addressed your request, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid; www.aepd.es), or with the competent regional supervisory authority, where applicable.
8. Data Security
INKY Revolution has adopted the necessary technical and organizational measures to ensure the security, integrity, availability, and confidentiality of the personal data processed, as well as to prevent its loss, alteration, or unauthorized access, in accordance with Articles 24, 25, and 32 of the GDPR.
Among other measures, the Website uses encryption protocols (HTTPS/TLS) for information transmissions and relies on certified payment gateways that comply with the PCI-DSS standard for processing banking data.
Notwithstanding the above, you should be aware that security measures on the internet are not infallible and security incidents may occur, in which case INKY Revolution will act in accordance with Articles 33 and 34 of the GDPR.
9. Minors
The products sold via the Website are intended for adults. To subscribe to the newsletter or any other service requiring consent, a minimum age of 14 is required, in accordance with Article 7 of the LOPDGDD.
INKY Revolution will not intentionally collect personal data from children under the age of 14. If a child under this age provides us with their data, their parents, guardians or legal representatives may request its deletion by writing to info@inkyrevolution.com.
10. Social Media
INKY Revolution is present on Instagram (@inkyrevolution). The processing we carry out on social media is limited to managing our corporate profile, publishing content, and interacting with users who voluntarily follow us, comment, or send us messages.
The processing of data by the platform that owns the social network (Meta Platforms Ireland Ltd., in the case of Instagram) is governed by its own policies, which we recommend consulting: Instagram / Meta Privacy Policy
11. Changes to this policy
INKY Revolution may amend this policy to bring it into line with changes in legislation, case law or the services it offers. The current version will be published on this page, with the date of the last update shown in the header.
Where amendments substantially affect the rights of data subjects, INKY Revolution will inform the affected users individually via the email address provided or through prominent notices on the website.
INKY Revolution — [Document reviewed as of 15/06/2026]