ESCAPTFREN
EN
Basket

Privacy policy

Last updated: 28 October 2026

This policy explains what personal data we process, why, on what legal basis, for how long and what your rights are, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 of 5 December on the protection of personal data and the guarantee of digital rights.

1. Data controller

  • Controller: Nutri Gains S.L.
  • Spanish tax ID (NIF): B75769281
  • Registered address: Ctra. Nacional II nº 2, Els Hostalets (Llers), 17730 Girona (Spain)
  • Email: info@nutrigains.es
  • Phone: +34 619 775 659

2. What data we process and why

Purchases in our shop

Your first name and surname, delivery and billing addresses, email address, phone number, the products you buy, the amount and the payment method. We never see or store your full card details: they are handled directly by the payment provider.

  • Purpose: to manage your order, payment, delivery and invoice, to help you and to handle returns and guarantee claims.
  • Legal basis: performance of the sales contract (Art. 6(1)(b) GDPR) and compliance with our legal obligations, such as tax and accounting obligations (Art. 6(1)(c) GDPR).
  • Retention: for as long as our relationship lasts and, after that, for the periods required by law (for example, 6 years for accounting records under the Spanish Commercial Code).

Your customer account

If you create an account in My account, we store your email address, your encrypted password, your addresses and your order history so that you can consult them. Legal basis: performance of the contract and your request (Art. 6(1)(b) GDPR). We keep it until you ask us to delete it, except for order data that we must keep by law.

Emails after your purchase

A few days after your order is completed, we write to ask for your review and, later on, to let you know when a product you bought is about to run out. We only tell you about products similar to the ones you have already bought.

  • Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) and Article 21.2 of Spanish Law 34/2002 (LSSI), which allows this with customers and for products similar to those they bought.
  • How to opt out: tick the box provided when you place your order, or click “unsubscribe here” in any of those emails. Emails about your orders (confirmation and dispatch) will still reach you.

Product reviews

If you review a product, we publish your first name and the initial of your surname, your rating, your text and the date. Your email address is not published. We check reviews before publishing them. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw by asking us to delete your review.

Contacting us by email, phone or WhatsApp

We use the details you give us to reply to you. Legal basis: your consent and, if your query is about an order, performance of the contract. We keep them for as long as we need them to help you.

Max’s welcome code

If you ask Max, the website’s assistant, for your welcome code, we receive your email address in order to send it to you and to send you Nutri Gains news, as you agree at that point. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time by writing to us or from any of those emails. Your conversation with Max stays in your browser: we do not receive it.

Subscribing to our guides

If you subscribe to our guides from an article, your email address is stored in our Brevo list so that we can send you our new guides. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe from any of those emails.

Enquiries from businesses and distributors

If you write to us using the business form, we use your business contact details to reply to you and, if we reach an agreement, to manage the commercial relationship. Legal basis: your request and steps taken prior to entering into a contract (Art. 6(1)(b) GDPR).

Cookies and measurement

With your permission, we use analytics and advertising cookies. We explain this in our cookie policy.

3. Who we share your data with

We do not sell your data. We only share it with those who need it to provide the service to you, or when the law requires it:

  • Payment providers: Stripe (card, Apple Pay and Google Pay) and Amazon Pay, to take payment for your order and prevent fraud.
  • The logistics and courier companies that prepare and deliver your order.
  • Our providers of web hosting, email, email sending (Brevo) and business management, who process the data on our behalf under contract.
  • Google and Meta, only if you accept analytics or advertising cookies.
  • Our tax and accounting advisers, and public authorities, judges and courts when the law requires it.

Some of these providers (for example, Google, Meta, Stripe or Amazon) may process data outside the European Economic Area, for example in the United States. Where they do, they do so with the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

4. Your rights

You can ask us at any time to:

  • give you access to your data;
  • correct it if it is inaccurate;
  • delete it;
  • restrict its use, or object to it (including the emails after your purchase);
  • send it to you in a format you can take to another company (portability);
  • withdraw your consent, without this affecting anything done before.

Write to us at info@nutrigains.es with the subject “Data protection” and tell us which right you wish to exercise. If we have doubts about your identity, we will ask you for some information to verify it. We will reply within one month.

We do not make automated decisions that significantly affect you.

If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or with the data protection authority of the country where you live.

5. Security

We apply technical and organisational measures to protect your data: the website is encrypted (https), access to data is limited to those who need it and our providers are contractually bound to protect it.

6. Minors

Our shop is for people aged 18 and over only. We do not knowingly collect data from minors.

7. Changes to this policy

If we change this policy, we will publish the new version on this page with its date.