Last updated: 8 October 2026
Canary Billiards respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, how we use it and what rights you have under applicable data protection law, including the EU General Data Protection Regulation (GDPR/RGPD) and applicable Spanish data protection legislation.
1. Who is responsible for your data?
Data Controller: Philipp Goldmann, acting as autónomo
NIF: Z0519523G
Business address: Calle La Virgen 9, 38410 Los Realejos, Tenerife, Spain
Email: philipp@canarybilliards.com
For any questions about how your personal data is handled, or to exercise your data protection rights, please contact us at the email address above.
2. What personal data do we collect?
Depending on how you use our website, we may collect:
- Name and surname
- Billing and delivery address
- Email address
- Telephone number, where provided
- Account login information
- Order and transaction information
- Products purchased and order history
- Information you provide through our contact or custom-quote forms
- Information you provide when subscribing to our newsletter
- Communications you send to us
- Technical information such as IP address, browser type and device information
- Website usage and analytics information, where you have consented to the relevant cookies
We only collect information that is reasonably necessary for the relevant purpose.
3. How do we use your personal data?
We may use your personal data to:
Process and fulfil orders
To process purchases, arrange payment, prepare and dispatch orders, provide delivery services and communicate with you about your order.
Manage customer accounts
If you create a WooCommerce customer account, we use your information to maintain your account, provide access to your order history and manage your account-related requests.
Respond to enquiries and quote requests
If you contact us or request a custom quotation, we use the information you provide to respond to your enquiry and prepare the requested quotation.
Provide customer support
We may use your information to answer questions, deal with problems and provide after-sales support.
Send newsletters and marketing communications
If you subscribe to our newsletter, we use your email address to send you news, product information, offers and other marketing communications from Canary Billiards.
You can unsubscribe at any time using the unsubscribe link in our emails.
Improve and understand our website
Where you have given the required consent, we use analytics and marketing technologies to understand how visitors use our website and to improve our services and marketing.
Meet legal and accounting obligations
We may process and retain information where necessary to comply with Spanish tax, accounting, consumer protection and other legal obligations.
Protect our website and prevent abuse
We may process technical information, including IP addresses, to maintain website security, detect fraud, prevent abuse and protect our systems.
4. Legal bases for processing
Depending on the purpose, we rely on the following legal bases under the GDPR:
| Purpose | Legal basis |
|---|---|
| Processing and delivering orders | Performance of a contract |
| Customer accounts | Performance of a contract |
| Custom quotations and enquiries | Pre-contractual steps / legitimate interests |
| Customer service | Performance of a contract or legitimate interests |
| Accounting and legal records | Legal obligation |
| Newsletter marketing | Consent |
| Product requests for out-of-stock items | Consent |
| Non-essential analytics | Consent |
| Website security and fraud prevention | Legitimate interests |
| Essential website functionality | Performance of a contract / legitimate interests |
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn. The GDPR recognises consent, contractual necessity, legal obligations and legitimate interests among the available legal bases for processing personal data.
5. Payments
We accept credit and debit cards, Apple Pay and Google Pay. Payments are processed by WooPayments, which is powered by Stripe.
Where you pay through a third-party payment provider, payment information is processed by the relevant payment provider. Canary Billiards does not receive or store your full card number or card security code.
Payment providers may process personal data for payment processing, fraud prevention, security and related purposes under their own privacy policies. Stripe, for example, describes processing associated with payments, fraud detection, loss prevention and customer service in its privacy documentation.
6. Delivery
For orders requiring delivery, we share the information necessary to fulfil the delivery — such as your name, delivery address and relevant contact information — with the Packlink shipping platform, which we use to book deliveries, and our delivery provider Correos Express, and any other delivery service we may use where necessary to fulfil an order.
We do not provide your personal information to delivery companies for unrelated marketing purposes.
7. Newsletter
If you subscribe to our newsletter, your email address and any information you voluntarily provide may be processed through MailerLite, our email marketing service provider.
Newsletter subscriptions are based on your consent. You can unsubscribe at any time using the unsubscribe link included in our emails.
MailerLite provides GDPR data-processing arrangements for customers subject to the GDPR and uses contractual safeguards, including Standard Contractual Clauses where applicable, for international transfers.
Product requests for out-of-stock items
If you request an out-of-stock product using the “Request it” form, we collect your email address and the product you are interested in. We use this only to contact you about your request – for example to confirm a special order, its price and its expected arrival date.
This is based on your consent, which you give by ticking the box on the form. You can withdraw it at any time by replying to our emails or contacting us at philipp@canarybilliards.com. We keep your request only for as long as needed for this purpose, and delete it sooner if you ask us to. These details are stored on our website and are not used for newsletters or other marketing unless you separately subscribe.
8. Analytics and marketing
We currently use services including:
- Google Analytics
- Google Search Console
- Jetpack Stats and WooCommerce Analytics (provided by Automattic)
- Google reCAPTCHA
Non-essential analytics and marketing technologies will only be used where the required consent has been obtained through our cookie consent mechanism.
These services may process information such as IP address, device information, browser information and information about how you interact with our website.
Some providers may process personal data outside the European Economic Area. Where this occurs, appropriate safeguards required by the GDPR will be used, such as an adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism. EU data protection rules continue to apply when personal data is transferred outside the EEA.
Further information about cookies and tracking technologies is provided in our Cookie Policy.
9. Cookies
Canary Billiards uses cookies and similar technologies.
Some cookies are strictly necessary for the website to operate, including functions relating to WooCommerce, shopping carts, customer accounts, security and checkout.
Other cookies, including certain analytics and marketing cookies, require your consent before they are used.
Our cookie banner allows you to accept or reject non-essential cookies and to manage your preferences.
You can change or withdraw your cookie consent at any time through our cookie settings.
The Spanish Data Protection Agency (AEPD) requires consent for cookies that involve personal-data processing where consent is the applicable legal basis, and its guidance requires accepting and rejecting cookies to be presented with comparable visibility.
10. How long do we keep your data?
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required by law.
For example:
- Orders and invoices: retained for the periods required by Spanish tax, accounting and consumer legislation.
- Customer accounts: retained while the account remains active and, where necessary, afterwards to meet legal obligations or resolve disputes.
- Contact and quotation enquiries: normally retained for as long as necessary to handle the enquiry and any resulting business relationship.
- Newsletter data: retained until you unsubscribe or withdraw your consent.
- Analytics/marketing data: retained according to the applicable service’s settings and our cookie-consent arrangements.
When information is no longer required, we will delete it or anonymise it where reasonably possible.
11. Who may receive your personal data?
Depending on the circumstances, your personal data may be processed by trusted service providers that help us operate Canary Billiards, including:
- WooCommerce/WordPress hosting and technical service providers
- Stripe and other payment providers
- Packlink and Correos Express (shipping and delivery)
- MailerLite
- Google services
- Automattic (WordPress.com / Jetpack / WooCommerce services)
- Security and anti-spam service providers such as Google reCAPTCHA
- Professional advisers, such as accountants, where necessary
- Public authorities where we are legally required to provide information
These providers only receive information necessary for the services they provide or where disclosure is required by law.
Where a provider acts as a processor on our behalf, we require appropriate contractual data-protection safeguards.
12. Your rights
Under the GDPR, you have rights including:
- Right of access — to request a copy of the personal data we hold about you.
- Right to rectification — to ask us to correct inaccurate or incomplete information.
- Right to erasure — to request deletion of your personal data where the legal requirements are met.
- Right to restriction — to ask us to restrict processing in certain circumstances.
- Right to object — to object to certain processing, including direct marketing.
- Right to data portability — to receive certain personal data in a structured, commonly used and machine-readable format.
- Right to withdraw consent — where processing is based on your consent.
- Rights relating to automated decision-making where applicable.
These rights are not absolute and certain legal exceptions may apply — for example, we may be required to retain transaction or accounting records even if you request deletion.
The European Commission confirms that organisations should generally respond to rights requests without undue delay and, in principle, within one month.
13. How to exercise your rights
To exercise any of your rights, email:
Please explain your request clearly and provide sufficient information for us to verify your identity where necessary.
We will not normally charge a fee for exercising your rights. We may request additional information where reasonably necessary to confirm your identity and protect against unauthorised access to personal data.
14. Complaints
If you believe that we have not handled your personal data in accordance with applicable data protection law, we encourage you to contact us first so that we can try to resolve the matter.
You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD), the Spanish data protection supervisory authority. The AEPD provides an electronic procedure for submitting complaints.
15. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, technology or legal requirements.
The latest version will always be published on this page, with the date of the latest update shown at the top.