Privacy

At 4hype we process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). Here we explain, with no small print, what data we use, why, and what you can do about it.

Data controller

• Controller: Registration in progress (trade name “4hype”)
• Tax ID (NIF): Registration in progress
• Address: Registration in progress
• Privacy contact: mnj.sneakers@gmail.com

What data we process

The website has no forms, sign-up or cart, so we only process:

• The data you give us when you message us on WhatsApp or by email: name, phone number or email address, the conversation and, if you buy, your shipping address, the product and size, the proof of payment and the details needed for the invoice. We will never ask for your card details in a chat.
• Technical connection data (IP address, browser, pages visited and date), recorded by our hosting provider for security and operational purposes. We don’t use it to build profiles or for advertising. From the IP address, Cloudflare only tells us the country you’re connecting from, so we can open the site in your language or suggest it; we don’t store it.
• Anonymous usage statistics: which pages and products are viewed, which size is chosen and whether WhatsApp is tapped, together with the country, language, device type and the website you came from. We don’t use cookies or store anything on your device for this: to count distinct visits, our server calculates a code from the IP address and browser that changes every day and can’t identify you.
• Your choice about TikTok cookies, which is stored only in your browser (see the cookie policy).

Why we use it and on what legal basis

• Answering your enquiries and sending you photos, videos or quotes: pre-contractual steps taken at your request (art. 6.1.b GDPR).
• Managing your order, shipping, returns and warranty: performance of the sales contract (art. 6.1.b GDPR).
• Invoicing, accounting and tax obligations: compliance with legal obligations (art. 6.1.c GDPR).
• Letting you know when a sold-out product is back, if you ask us to: your consent (art. 6.1.a GDPR), which you can withdraw at any time.
• Understanding what works on the website (visits, most viewed products and at which point a purchase is abandoned) with those anonymous statistics: legitimate interest (art. 6.1.f GDPR).
• Keeping the website secure and preventing abuse or attacks: legitimate interest (art. 6.1.f GDPR).

We will only send you news or promotions if you expressly ask us to, and you can unsubscribe at any time. We do not make automated decisions or build profiles about you.

How long we keep it

• Enquiries that don’t lead to a purchase: until resolved and, at most, one year after the last contact.
• Customer and order data: for as long as the relationship lasts and, afterwards, for the legal retention periods (six years for accounting records under the Spanish Commercial Code, plus the periods set by tax and warranty rules).
• Back-in-stock alerts: until we notify you or you ask us not to.
• Technical connection data: for the minimum time set by the hosting provider for security purposes.
• Usage statistics: 13 months.
• Chosen language: stored only in your browser for one year (see the cookie policy).

Who we share it with

We don’t sell or hand over your data. Only these providers and recipients access it, and only as needed:

• Transport and courier companies, to deliver your order.
• Banks or payment providers, when you pay us.
• Our accounting and tax advisers, and public authorities when required by law (for example, the Spanish Tax Agency).
• WhatsApp Ireland Ltd. (Meta group), as the messaging service you use to contact us.
• Google Ireland Ltd., as our email provider.
• Cloudflare, Inc., as the website’s hosting and security provider.
• TikTok, only if you enable the videos on the home page: its player collects browsing data as an independent controller, under its own privacy policy.

International transfers

Some of these providers (Meta, Google, Cloudflare) may process data outside the European Economic Area. In those cases, transfers rely on the EU-U.S. Data Privacy Framework or on standard contractual clauses approved by the European Commission.

Minors

The website is not aimed at children under 14, and you should not give us any data if you are under that age. To buy, you must be of legal age or have your parents’ or guardians’ permission.

Your rights

You can ask us at any time to:

• Access, rectify or erase your data.
• Object to its processing or ask us to restrict it.
• Port the data you gave us.
• Withdraw your consent, without affecting anything done before you withdrew it.

Email us at mnj.sneakers@gmail.com (or message us on WhatsApp) saying which right you want to exercise. If we have reasonable doubts about your identity, we may ask you to verify it. We will reply within one month at most. If you think we haven’t handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the data protection authority of your country of residence.

Security

We apply reasonable technical and organisational measures to protect your data: the website always runs over an encrypted connection (HTTPS), access to conversations and orders is limited to the people who run 4hype, and we only work with providers that offer adequate safeguards.

Changes to this policy

If we change the way we process your data, we will update this page and its date. If the change is significant, we will let you know clearly.