Privacy
Privacy Policy
Last updated: 3 September 2026
At SwiftCut Tools we are committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have. It is drawn up in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
FLOFUM, S.L. (trading as SwiftCut Tools)
Calle Parcerisa 13, Local 1, 08014 Barcelona, Spain
Tax ID (CIF): B75621250 · VAT: ESB75621250
Email: privacy@swiftcut-tools.com
Phone: +34 931 60 42 87
2. What data we collect
- Identification and contact data: name, surname, delivery and billing address, email address, telephone number.
- Order and transaction data: products purchased, order history, payment confirmation (we do not store full card numbers — see section 4).
- Account data: if you create an account, your login credentials and preferences.
- Communications: messages you send us via email, contact forms, chat or social media.
- Technical and browsing data: IP address, device and browser type, pages visited and cookie data (see our Cookie Policy).
3. Why we use your data and legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Process and deliver your orders, manage payment and returns | Performance of a contract (Art. 6.1.b) |
| Provide customer support and respond to enquiries | Performance of a contract / legitimate interest (Art. 6.1.b/f) |
| Comply with tax, accounting and consumer-law obligations | Legal obligation (Art. 6.1.c) |
| Send marketing emails and newsletters | Consent (Art. 6.1.a) — you may withdraw at any time |
| Improve our website, prevent fraud and ensure security | Legitimate interest (Art. 6.1.f) |
| Use of non-essential cookies and analytics | Consent (Art. 6.1.a) |
4. Payment data
Card and online payments are processed securely by our third-party payment providers Stripe, PayPal and Redsys. Card details are entered directly with the payment provider and are not stored on our servers. These providers act as independent data controllers or processors and apply their own security standards (PCI-DSS). For cash-on-delivery (COD) orders, payment is made in cash to the courier on delivery, so no card or online payment data is collected by us; we process only the details needed to prepare and deliver the order.
5. Who we share your data with
We only share your data with third parties where necessary to provide our services, including:
- Shipping and logistics partners, such as Correos, SEUR and DHL, to deliver your orders.
- Payment service providers, to process transactions.
- IT, hosting and email service providers who process data on our behalf under a data-processing agreement.
- Public authorities, where required by law.
We do not sell your personal data to third parties.
6. International transfers
Where any provider is located outside the European Economic Area, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
7. How long we keep your data
We retain your personal data only for as long as necessary for the purposes described above. Order and invoicing records are kept for the period required by Spanish tax and commercial law (generally up to 6 years). Marketing data is retained until you withdraw consent. Account data is kept while your account remains active.
8. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Request rectification of inaccurate data.
- Request erasure (“right to be forgotten”).
- Request restriction of processing.
- Object to processing based on legitimate interest or for direct marketing.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise these rights, contact us at privacy@swiftcut-tools.com, indicating the right you wish to exercise. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
9. Security
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse, including SSL encryption of our website.
10. Changes to this policy
We may update this Privacy Policy from time to time. The version published on this page, with its “last updated” date, is the one in force.