Privacy policy

Last updated: 11 November 2026

This policy explains what personal data we process when you visit humixpaint.com, make a purchase, contact us or ask us for a photo diagnosis, what we use it for and what rights you have. It is governed by Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

1. Data controller

  • Controller: Aqua Site S.L. (trade name Humix Paint)
  • Tax ID (NIF): B44728947
  • Registered address: Avenida Trinidad, 10, bajo, 38200 San Cristóbal de La Laguna (Santa Cruz de Tenerife), Spain
  • Privacy contact email: hola@humixpaint.com

2. What data we process

  • Contact and identification details: first name, surname, email address, phone number and delivery and billing addresses.
  • Order details: products purchased, amounts, returns and incidents. Your full card details are processed directly by the payment provider; we do not store them.
  • Communications: the messages you send us by email or WhatsApp and, if you ask for a diagnosis, the photos and information about your home that you send us.
  • Browsing data: IP address, type of device and browser, pages visited and similar data, as described in the cookies section.

Please make sure your diagnosis photos do not show people, documents or any other information that is not needed to assess the wall.

3. What we use your data for and on what legal basis

  • Managing your orders (payment, shipping, invoicing, returns, guarantee and after-sales service). Legal basis: performance of the sales contract and compliance with legal obligations, such as tax and accounting obligations.
  • Answering your enquiries by email or WhatsApp. Legal basis: your request and, where applicable, steps taken prior to entering into a contract or performance of the contract.
  • Photo diagnosis: a member of our team reviews the photos and information you send us to advise you on the type of damp and suitable products. Legal basis: your request for information before a possible purchase. We do not make automated decisions that produce legal effects for you.
  • Sending you news and offers by email or, where applicable, by WhatsApp, only if you have given us your consent (for example, by subscribing on the website). You can withdraw it at any time using the unsubscribe link in each email or by contacting us.
  • Analytics and advertising: if you accept analytics or advertising cookies, we will use browsing data to measure how the website is used and, where applicable, how effective our ads are. Legal basis: your consent.
  • Security and fraud prevention in the shop and in payments. Legal basis: our legitimate interest in protecting the shop and our customers.

4. How long we keep your data

  • Orders and invoicing: for the duration of the business relationship and, afterwards, for the periods required by commercial and tax rules (generally up to six years) and the limitation periods for possible claims, including the legal guarantee.
  • Enquiries and photo diagnoses: for as long as needed to help you and follow up on your case. If you do not go on to buy, we will delete them once they are no longer needed for that purpose, or sooner if you ask us to.
  • Marketing communications: until you withdraw your consent.
  • Cookies: for the duration stated in the website's cookie notice or panel.

After these periods, the data is deleted or blocked for as long as it may be needed to deal with legal liabilities.

5. Who we share your data with

We do not sell your data. We only share it with the providers we need in order to serve you, who process it on our behalf or under their own terms, as the case may be:

  • Shopify, the platform the shop runs on (hosting, checkout and order management). Shopify also processes some data as a controller for its own purposes; you can find out more in its consumer privacy policy.
  • Payment providers that process payment for your order.
  • Carriers, to deliver your order or collect returns.
  • WhatsApp, a service of Meta Platforms Ireland Ltd., when you contact us through that channel.
  • Analytics and advertising providers, only if you have accepted the relevant cookies.
  • Public authorities, courts and advisers, where necessary to comply with legal obligations.

6. International transfers

Some of these providers, such as Shopify or Meta, may process data outside the European Economic Area, for example in the United States or Canada. In those cases, transfers are based on adequacy decisions of the European Commission (such as the EU-US Data Privacy Framework for participating companies) or on the standard contractual clauses approved by the European Commission.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and withdraw any consent you have given us, without affecting the lawfulness of processing carried out before its withdrawal. To do so, email us at hola@humixpaint.com stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you for additional information to confirm it. We will reply within one month, which may be extended in the cases provided for by law.

If you believe that we have not handled your request properly or that the processing of your data does not comply with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Cookies

The website uses technical cookies that are necessary for it to work (for example, to keep your cart and complete payment), which do not require your consent. Analytics and advertising cookies are only activated if you accept them in the cookie notice, and you can change or withdraw your choice at any time from that notice or from your browser settings.

9. Children

The shop is aimed at adults. We do not knowingly collect data from children under 14. If you believe a child has given us their data, contact us and we will delete it.

10. Security

We apply reasonable technical and organisational measures to protect your data against loss, unauthorised access or misuse. We recommend that you do not send us sensitive information by WhatsApp or email unless it is necessary.

11. Changes to this policy

We may update this policy to reflect legal changes or changes in the way we work. We will always publish the current version on this page with its update date.