Privacy policy (EEA · GDPR)

cross-border-returns-cost (“we”, “us”) is the controller of the personal data described here.

Data we process

• Account data when you sign up (email, optional name).
• Usage data (aggregated, pseudonymous by default).
• Communications (messages you send us, with metadata).

Lawful bases

• Consent, for optional analytics and communications.
• Contract, when you use paid features.
• Legitimate interests, for security and fraud prevention.

Your rights

Access, rectification, erasure, portability, restriction, objection, and the right to lodge a complaint with your data protection authority.

Contact

Email [email protected].

Privacy policy

Last updated: 2026-06-09 — Compliant with GDPR EU 2016/679 + Spanish LOPDGDD 3/2018 + UK GDPR / Data Protection Act 2018 (if UK users).

1. Data controller

• Identity: José Manuel Volante González
• Tax ID (NIF): 49108819R
• Postal address: C/ Zafra 5, 21310 La Zarza (Huelva), España
• Email: [email protected]
• GDPR rights email: [email protected]

2. Purposes of processing

1. Site operation: serve pages and maintain availability.
2. Inquiry handling: respond to communications sent to the contact email.
3. Legal compliance: respond to lawful requests from authorities.

No automated decisions producing legal effects (GDPR Art 22). No commercial profiling.

3. Legal basis

• Site operation: legitimate interest (Art 6.1.f GDPR).
• Inquiries: consent (Art 6.1.a GDPR).
• Legal compliance: legal obligation (Art 6.1.c GDPR).

4. Categories of data

• Technical data: IP anonymised by Cloudflare, User-Agent, page visited, timestamp. Cloudflare Web Analytics is cookieless.
• Identification data if you contact us by email.
• No special categories processed.

5. Retention

• Cloudflare technical logs: 7 days.
• Aggregated Web Analytics: 6 months.
• Email correspondence: up to 2 years after last interaction.

6. Recipients

• Cloudflare, Inc. (hosting + analytics + CDN, USA, with Standard Contractual Clauses).
• Public authorities when legally required.

7. User rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. To exercise, email [email protected] with "GDPR Request" in the subject and ID copy attached.

8. Complaints

• Spain: Agencia Española de Protección de Datos — https://www.aepd.es/
• UK: Information Commissioner's Office — https://ico.org.uk/
• EU: your national supervisory authority.

9. Automated decisions

No automated decisions producing legal effects (GDPR Art 22).

10. Changes

This policy may be updated for legal or operational reasons. The version in force is always the one published at this URL with the date above.

Contact

For data-related questions: [email protected].

Privacy notice (United Kingdom · UK GDPR & DPA 2018)

cross-border-returns-cost ("we", "us") is the controller of the personal data described below. We process personal data in line with the UK GDPR and the Data Protection Act 2018.

Personal data we process

• Account data — name and email when you register.
• Usage data — aggregated, pseudonymous analytics of how the service is used.
• Communications — any messages you send us and related metadata.

Lawful bases

• Consent — for optional analytics and direct marketing.
• Contract — to provide the paid features you subscribe to.
• Legitimate interests — fraud prevention, service integrity, and product improvement, balanced against your rights.

Your rights

Access, rectification, erasure, restriction, objection, portability, and the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

International transfers

Where data leaves the UK we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum as appropriate.

Contact

Privacy contact: [email protected].

Privacy notice (US · California)

cross-border-returns-cost respects your privacy. This notice summarises the personal information categories we collect and the rights California residents have under the CCPA/CPRA.

Categories collected

• Identifiers — name, email, IP address when you sign up or contact us.
• Internet activity — pages visited, referral URLs, aggregated analytics.
• Commercial information — your purchases, if you buy from us.

Your rights

• Right to know — what we collect and how we use it.
• Right to delete — request erasure of your personal information.
• Right to correct — request corrections to inaccurate data.
• Right to opt out — of sale or sharing of your personal information.
• Right to limit — use of sensitive personal information.

Exercise your rights

Email [email protected] or use our Do Not Sell or Share form.