Privacy and Cookies Policy

1. Data controller

The controller responsible for personal data collected through www.intoyou.eu is:

Company name: ACCESSORIES UNLIMITED, S.L.
Tax identification number (CIF): B53073847
Registered address: Carretera de Catral, 61, 03360 Callosa de Segura, Alicante, Spain
Privacy email: info@intoyou.eu

This policy applies to browsing and purchases made through the INTOYOU online store. Processing carried out within the ActiveJoy® application is governed by the specific privacy information available in that application.

2. Personal data we process

Depending on how you use the store, we may process the following categories of data:

Identity and contact data: first name, surname, email address, telephone number, billing address and delivery address.
Order and transaction data: products purchased, amount, currency, order status, returns, incidents and information required for invoicing.
Payment data: selected method, confirmation and transaction status. INTOYOU does not receive or retain complete card details; payment is processed by Shopify and the payment providers enabled during checkout.
Communications: enquiries, messages, support requests and requests to exercise data protection rights.
Reviews: displayed name, email address, product purchased, rating, text, submitted images or videos, and technical data required to verify and publish the review through Judge.me.
Technical and usage data: IP address, device and browser type, identifiers, time zone, pages visited, interactions and data obtained through cookies or similar technologies.
Marketing preferences: consent, subscriptions and responses to communications or campaigns.

Data is obtained directly from the user, their device and browser, Shopify, and the providers involved in purchasing, delivery, advertising measurement or publishing reviews.

3. Purposes and legal bases

Purpose	Legal basis
Managing the cart, purchase, payment, delivery, returns and warranty.	Performance of a contract and steps taken before entering into a contract.
Responding to enquiries, incidents and requests relating to products or orders.	Performance of a contract or legitimate interest in providing customer service.
Issuing invoices, keeping accounts and complying with tax, consumer, product safety and other legal obligations.	Compliance with legal obligations.
Preventing fraud, abuse and unauthorised access, and protecting the store and its users.	Legitimate interest in ensuring security and preventing fraud, without prejudice to applicable legal obligations.
Sending marketing communications and newsletters.	Consent. Where permitted by law for existing customers and similar products, legitimate interest subject to the right to object.
Measuring website use through Google Analytics and measuring or personalising campaigns through Google Ads.	Consent for non-essential cookies and technologies.
Requesting, verifying, moderating and publishing reviews through Judge.me.	Legitimate interest in understanding customer satisfaction and providing product information; consent for voluntarily submitted content where required.
Managing privacy preferences and retaining evidence of consent.	Compliance with legal obligations and legitimate interest in documenting the selected preferences.

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Shopify and payment providers

The store is hosted on Shopify. Shopify provides the ecommerce infrastructure, checkout, security, order management and other functions required to operate the Site. Payments are processed by Shopify and by the payment gateways or providers available at checkout at any given time. These providers may process the information required to authorise payment, prevent fraud and comply with their own legal obligations.

INTOYOU receives confirmation, status and limited information required to link the payment to the order, but does not retain the complete card number or security code.

Further information is available in Shopify's Consumer Privacy Policy.

5. Google Analytics and Google Ads

We use Google Analytics to obtain statistics about use of the store and Google Ads to measure campaigns and conversions and, where authorised, personalise advertising. These tools may process online identifiers, IP address, device information, pages visited and interactions with advertisements or the store.

In territories where required, non-essential Google tags and cookies are activated according to the preferences expressed through the cookie banner or privacy panel. Information about how Google uses data from sites that use its services is available at Google Privacy & Terms.

6. Reviews through Judge.me

We use Judge.me to request and manage product and store reviews. Judge.me may receive limited order information, such as name, email address, purchased product and order identifier, to send a review request, verify the purchase and manage submitted content.

Published reviews may display the selected name or alias, rating, text and submitted files. Do not include personal information in a review that you do not want to make public. You can read the Judge.me Privacy Policy.

7. Recipients of personal data

We may disclose or provide access to data, to the extent required for each purpose, to:

Shopify and its subprocessors.
Payment providers available at checkout.
Transport and logistics companies for delivery and incident management.
Google for analytics and advertising, where consent has been given.
Judge.me for review management.
UpPromote, to attribute visits, registrations and purchases to affiliates or partners using identifiers and affiliate cookies, where consent has been given.
Orbe, to adapt the country, language, currency and browsing experience based on approximate location and device preferences.
Essential Loyalty, to manage accounts, points, rewards, benefits and referral programmes.
AlgoShop, to provide the chatbot and customer support service, including information that the user voluntarily provides during the conversation.
Hosting, security, technical support, communications and customer service providers.
Accounting, tax and legal advisers and auditors subject to confidentiality.
Government bodies, courts and authorities where legally required.

We do not sell our customers' personal data.

8. International transfers

Some providers may process personal data outside the European Economic Area. Where an international transfer takes place, the safeguards required under applicable law will be used, such as adequacy decisions, binding corporate rules or standard contractual clauses approved by the European Commission.

Shopify operates through international entities and subprocessors and states that it uses lawful transfer mechanisms, including binding corporate rules and standard contractual clauses where applicable. Google and Judge.me apply the mechanisms described in their respective policies and data processing agreements.

9. Retention periods

We retain personal data only for as long as required for the purpose for which it was collected and subsequently for the periods necessary to meet possible liabilities and legal obligations.

Order, invoice and transaction data is retained for the periods required by tax, commercial, consumer and anti-fraud legislation.
Enquiries and complaints are retained while they are being handled and for the applicable limitation periods.
Marketing data is processed until you withdraw consent or exercise the right to object.
Cookie preferences and evidence of consent are retained for as long as required to document their management and are renewed when appropriate.
Reviews may remain published while relevant, unless you request their removal or another reason for deletion applies.

When data is no longer required, it will be deleted or restricted as required by law.

10. Individual rights

You may exercise the following rights:

Access to your personal data.
Rectification of inaccurate data.
Erasure where applicable.
Restriction of processing.
Data portability in the cases provided by law.
Objection to processing based on legitimate interest and to marketing communications.
Withdrawal of consent at any time.
The right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you, where applicable.

To exercise these rights, email info@intoyou.eu and state the right you wish to exercise. We may request information required to verify your identity. We will respond within the periods established by applicable law.

You may also lodge a complaint with the Spanish Data Protection Agency: www.aepd.es.

11. Cookies and similar technologies

We use:

Essential cookies: these enable the cart, checkout, security, preferences and access to the store. Consent is not required where they are strictly necessary to provide the requested service.
Analytics cookies: these help us understand how the store is used through Google Analytics.
Advertising cookies: these enable measurement of Google Ads campaigns and, where authorised, advertising personalisation.
Affiliate cookies: these enable UpPromote to attribute visits and purchases to affiliates or partners after the user accesses the store through a referral link.
Location and preference cookies: these enable Orbe to remember the selected country, language or currency and adapt the experience using approximate location and device preferences.
Functional cookies: these enable additional functions provided by Shopify or integrated applications, such as Essential Loyalty and AlgoShop.

Non-essential cookies are used according to your consent. You can accept, reject or change your preferences through the store's cookie banner and privacy panel. Withdrawing consent must be as easy as giving it. You can also delete cookies through your browser settings, although some essential store functions may no longer operate correctly.

The current list of providers, categories, purposes and duration is displayed in the preferences panel where the installed technology allows it.

12. Minors

The Site is intended exclusively for people over 18 years of age. We do not knowingly request data from minors. If you believe that a minor has provided us with information, contact info@intoyou.eu so that we can review and delete it where appropriate.

13. Security

We apply reasonable technical and organisational measures to protect personal data against loss, unauthorised access, alteration or disclosure. No system is completely invulnerable, so we also recommend protecting your credentials and not sharing sensitive information through insecure channels.

14. Changes to this policy

We may update this policy when processing activities, providers or legal requirements change. We will publish the current version on this page and state the date of the latest update.

15. Contact

For privacy enquiries or to exercise your rights:

ACCESSORIES UNLIMITED, S.L.
CIF B53073847
Carretera de Catral, 61
03360 Callosa de Segura, Alicante, Spain
info@intoyou.eu

Last updated: 23 August 2026.