Privacy policy
Data controller and contact details
The data controller is Carmen Martha Stich Guerra, NIF 52787114K, trading as Just About James (JAJ).
Address: Carrer d’Anselm Clavé 60, 08186 Lliçà d’Amunt, Barcelona, Spain. Email: tienda@justaboutjames.com. Telephone: +34 933 50 13 85. WhatsApp: +34 621 31 44 55.
This information concerns our new Odoo website and inquiries and purchases handled in our shop, by email, telephone, WhatsApp, or Wallapop.
What data we process and where it comes from
We process the data you provide: name, telephone number, email, addresses, billing details, selected items and variants, orders, and communications. If you create an account, we also manage the data needed to identify you and show your documents.
When you buy through Wallapop, we receive the data needed to handle that transaction, according to how the platform operates. Payment services provide confirmation and references needed to reconcile payment. Do not send us banking passwords or authorization codes by email or WhatsApp.
Website hosting generates technical access and security logs, such as IP address, date, requested resource, and browser characteristics. The Plausible integration provides website usage statistics. Technical services are explained below.
Why we use data and the legal basis
- Inquiries and quotations: to handle your requests, on the basis of pre-contractual measures; for other inquiries, our legitimate interest in responding to you.
- Purchases and after-sales service: to confirm the item, process payment, deliver orders, and manage returns, warranty, and issues; the basis is performance of the contract.
- Billing and legal obligations: to meet tax, accounting, and consumer protection obligations and respond to requests from authorities; the basis is a legal obligation.
- Security and claims: to protect the service, prevent fraudulent use, and defend rights; the basis is our legitimate interest in these purposes, respecting your rights.
- Website statistics: to understand general website usage and improve the catalog and navigation through Odoo’s Plausible integration; the basis is our legitimate interest in evaluating website performance without advertising tracking.
- Marketing communications: only where there is a valid basis, such as your consent to subscribe. You may withdraw it at any time. Buying or contacting us does not automatically subscribe you to advertising.
Data needed for each request is identified as mandatory. Without it, we cannot handle the request or process the order. We do not request data unnecessary for the stated purpose.
Who may receive data
The website and order management are provided through Odoo S.A., based in Belgium, which processes data in our database on JAJ’s behalf for hosting, maintenance, and support. You can find its subprocessors, locations, and safeguards in the Odoo privacy policy.
The essential data may be received by carriers delivering an order, advisers handling accounting and tax obligations, and payment providers used for the transaction. The available method and provider are identified before payment. Stripe or PayPal are involved only when their services are actually used; mentioning them does not mean they are enabled on this website.
If you buy on Wallapop or write to us via WhatsApp, those platforms also process data under their own policies and functions. You can consult the Wallapop privacy policy and the WhatsApp privacy policy.
Authorities and other bodies receive information when required by law. We do not sell your personal data.
Technical services, statistics, and cookies
The current configuration uses Plausible Analytics integrated into Odoo for visit statistics. Plausible describes operation without analytics cookies or persistent identifiers: it processes request data to generate a daily identifier and statistics about pages, general traffic sources, and devices. You can consult its explanation of data processing. This is not equivalent to Google Analytics; the Google Analytics/Tag Manager integration is disabled in the reviewed configuration.
The website uses Odoo’s technical functions for sessions, security, language, and shopping carts. These functions may store cookies needed to provide your requested service or remember your choices. You can delete or block them in your browser; some functions, such as sessions or carts, may no longer work correctly.
Poppins and Questrial fonts are loaded from Google Fonts. When requesting these files, your browser connects to Google and sends technical connection data, including your IP address. See the Google privacy policy.
If you access external content or services, such as a map or a Wallapop or WhatsApp link, the relevant service’s privacy terms also apply. Linking to a platform does not mean JAJ receives all the information that platform processes about you.
Optional cookies requiring consent must allow a prior choice and withdrawal of consent. Adding new advertising or tracking tools will require updating this information and the relevant consent mechanism.
Processing outside the European Economic Area
Some international providers may process data or allow access from countries outside the European Economic Area. Odoo describes hosting and backup locations by region and limited access by staff of its subsidiaries; it states that it uses European Union standard contractual clauses for such international access. Details and updates are available in the policy linked above.
Google, WhatsApp, and payment providers, when you use them, explain destinations and applicable mechanisms in their policies, such as adequacy decisions or standard contractual clauses. You can request additional information from JAJ about providers involved in your transaction and the relevant safeguards by writing to tienda@justaboutjames.com.
How long we retain information
Order data is kept during the business relationship and for the time needed to manage delivery, returns, warranty, and potential claims. Tax and accounting documentation is kept for the applicable legal periods, including possible interruptions or extensions.
Inquiries are kept as long as needed to handle them and resolve any resulting liabilities. Account data is kept while the account is active, without prejudice to purchase documents that must be retained by law. You may request account closure.
Subscription data is kept until you withdraw consent or unsubscribe; where needed, we retain evidence of your preferences to respect them. Technical logs and backups follow the hosting provider’s criteria: Odoo reports general log retention of up to 12 months, subject to the security or legal exceptions it describes, and backup retention of up to 12 months.
Where applicable, data is restricted to address liabilities and then deleted. An erasure request does not require deleting documents we must retain by law.
Your rights
You may request access, rectification, erasure, objection, restriction, and portability in the cases provided for by law. You may also withdraw consent without affecting the lawfulness of earlier processing.
Write to tienda@justaboutjames.com or our postal address with your request. If identity verification is necessary, we will request only proportionate information that is needed. You also have the right to lodge a complaint with the Spanish Data Protection Agency.
Updates
We will review this policy when website services or processing change. Each order is governed by the information communicated when the contract was made.
Last updated: October 2, 2026.