Last updated: August 2026

Futon Llit processes the personal data of people who visit and make purchases from its online shop. This policy explains what data is collected, what it is used for, the legal basis for its processing, how long it is retained, with whom it is shared, and how users can exercise their rights.

1. Data controller

• Headline: NAGEIRE, S.L.U. (Single-member company)
• Trade name: Futon Llit
• Tax Identification Number (NIF): B-66318130
• Registered office: Rambla del Prat, 2 — 08012 Barcelona
• Telephone: (+34) 932 922 149
• Email: info@futonllit.com
• Registration details: registered in the Barcelona Commercial Register, volume 44362, folio 21, page B-453913, 1st entry.

Futon Llit is not obliged to appoint a Data Protection Officer. For any queries regarding this policy, users may contact info@futonllit.com.

2. What data is processed and where does it come from?

2.1. Data provided directly by the user.

• When creating a customer account: first name and surname, email address and password.
• When placing an order: full name, tax identification number, billing address, delivery address, telephone number and email address. Payment details are entered directly into the payment gateway and are not stored on Futon Llit’s systems.
• When contacting Futon Llit via the contact form, by telephone, by email or via WhatsApp: the personal and contact details provided, and the content of the enquiry.
• When requesting a quote for bespoke furniture: in addition to your contact details, the measurements, materials and your preferences for the project.
• When posting a product review or a comment on the blog: the name or alias used to sign the post and the content of the post.

2.2. Data generated during the relationship. Order history, amounts, products purchased, issues, returns, communications with the customer and delivery status.

2.3. Data derived from browsing activity. Whilst browsing futonllit.com, and provided the user has given their consent via the cookies panel, data is collected on the pages visited, the products viewed and interactions with the site, for analytical and advertising purposes. Full details can be found in the Cookie Policy.

We do not process special categories of data (such as health, political views, ethnic origin and similar) or data relating to minors. The shop is intended exclusively for adults.

3. Purposes of processing and legal basis

(a) Create and manage the customer account. Legal basis: performance of the contract and the implementation of pre-contractual measures (Article 6(1)(b) of the GDPR). To make a purchase on futonllit.com, you must have an account.

b) Process, prepare and dispatch the order, and handle payment. Legal basis: performance of the contract (Article 6(1)(b) of the GDPR).

(c) Issue the relevant invoice and fulfil Futon Llit’s accounting and tax obligations. Legal basis: compliance with a legal obligation (Article 6(1)(c) of the GDPR), in accordance with Royal Decree 1619/2012, which regulates invoicing obligations, the Commercial Code and tax legislation. For this reason, the tax identification number (NIF) is a mandatory piece of information required to complete an order.

(d) To handle returns, the right of withdrawal, statutory guarantees and complaints. Legal basis: performance of the contract and compliance with legal obligations relating to consumer matters (Articles 6(1)(b) and 6(1)(c) of the GDPR).

(e) Contact the customer regarding an order in progress when it is necessary to clarify an address, confirm a measurement, arrange a delivery or resolve an issue. Legal basis: performance of the contract (Article 6(1)(b) of the GDPR). These are operational, non-commercial communications.

f) Respond to enquiries received via the online form, by telephone, by email or via WhatsApp. Legal basis: the implementation of pre-contractual measures at the request of the data subject where the enquiry relates to a potential purchase (Article 6(1)(b) of the GDPR) and, in all other cases, Futon Llit’s legitimate interest in responding to those who contact it (Article 6(1)(f) of the GDPR).

g) Draw up quotes for bespoke furniture and monitor them by telephone or email. Legal basis: legitimate interests (Article 6(1)(f) of the GDPR). Futon Llit has carried out the relevant balancing of interests and has concluded that following up on a quotation requested by the customer themselves forms part of ordinary sales activity and the normal relationship with those requesting a quotation, and that it is their reasonable expectation to receive such a response. The data subject may object at any time by writing to info@futonllit.com.

(h) To prevent fraud in orders and payments. Legal basis: legitimate interest in preventing fraudulent transactions that cause financial loss (Article 6(1)(f) of the GDPR).

(i) Publish product reviews and comments on the blog. Legal basis: the data subject’s consent (Article 6(1)(a) of the GDPR), which may be withdrawn at any time by requesting the removal of the content.

(j) To ensure the security of the website, to keep access logs and make backups. Legal basis: legitimate interest in safeguarding the integrity and availability of the service (Article 6(1)(f) of the GDPR).

k) Analyse website usage and display personalised adverts using third-party analytics tools and tracking pixels. Legal basis: the user’s consent, given via the cookies panel (Article 6(1)(a) of the GDPR). This consent may be withdrawn at any time via the same panel.

Futon Llit does not send newsletters or marketing communications by email. If I were to do so in the future, I would give prior notice and obtain the data subject’s consent separately.

4. Retention periods

• Customer account: whilst it remains active. If three years pass without any activity, the account holder will be notified and the account will be deleted.
• Order, invoicing and accounting data: six years from the last entry, in accordance with Article 30 of the Commercial Code, and four years for the purposes of the tax limitation period.
• Information required to process the statutory warranty claim: three years from the date of delivery of the product, plus the limitation period for any claims that may arise.
• Enquiries and quotes that do not result in a purchase: A year since we last spoke.
• Published reviews and comments: whilst the product or post remains published, or until a request is made for it to be removed.
• Browsing data and cookies: the deadlines set out in the Cookie Policy.

Once these time limits have elapsed, the data is deleted or blocked, and remains available only to judges, courts and public authorities for the purposes of addressing any potential liabilities, until the limitation period expires.

5. Data processors

Futon Llit uses suppliers who access users’ data in order to provide a service. It has entered into a data processor agreement with all of them, as required by Article 28 of the GDPR. The categories are as follows:

• Provider of web hosting, infrastructure and corporate email services: Hostinger International Ltd, a company established in the European Union, with its registered office in Larnaca (Cyprus) and its operational headquarters in Lithuania.
• Providers of analytics and digital advertising tools: Meta Platforms Ireland Limited, which is responsible for the advertising pixel, and Google Ireland Limited, the provider of the Google Analytics 4 analytics service.
• Company responsible for the maintenance and technical support of the website.
• Tax, accounting and employment advice.
• Transport and logistics companies responsible for delivering orders.

6. Disclosure of data to third parties

In addition to the aforementioned data controllers, the data may be disclosed to:

• Banks and payment service providers, to process payments and manage any refunds. Specifically, Redsys, as the payment gateway provider, and Banco Bilbao Vizcaya Argentaria, S.A., as the acquiring bank. Both entities process the transaction data as independent data controllers, in compliance with payment services and anti-money laundering regulations, and are established in Spain. When a customer pays with an American Express card, the transaction is also processed via that organisation’s network, which is necessary for the execution of the payment requested by the customer themselves.
• The State Tax Administration Agency and other public authorities, where there is a legal obligation.
• Courts, tribunals and law enforcement agencies, whenever they so require in the course of their duties.

Futon Llit does not pass on data to third parties for commercial purposes, nor does it compile customer lists for use in advertising by external platforms.

7. International data transfers

The use of analytics and advertising tools involves the transfer of data to providers whose parent companies are based in the United States, specifically Meta and Google. These transfers are covered by the adequacy decision adopted by the European Commission in respect of that country, by the providers’ certification under the relevant framework and, in addition, by the standard contractual clauses approved by the European Commission.

These transfers only take place if the user has consented to the use of analytics and advertising cookies. If the user refuses, no data is transmitted to these providers.

The hosting and email provider is based in the European Union. Where the contracted data centre is also located within the European Economic Area, the hosting does not involve any international data transfers. Otherwise, the transfer is covered by the standard contractual clauses approved by the European Commission, which are incorporated into the data processing agreement entered into with that provider.

The processing of payments does not involve any international transfers: both the payment gateway provider and the acquiring bank are based in Spain.

Users may request further information about these transfers and a copy of the safeguards in place by writing to info@futonllit.com.

8. Tracking technologies

The website uses cookies and similar technologies, including third-party pixels for advertising purposes. With the exception of those strictly necessary for the website to function, all of these require the user’s prior consent, which is requested via the settings panel that appears when you first access the site and which can be amended or withdrawn at any time.

Full details of each cookie, its purpose, its owner and its retention period are set out in the Cookie Policy.

9. Rights of the data subject

Users may exercise the following rights at any time:

• Access: to find out which of your personal data are being processed.
• Correction: correct any inaccurate or incomplete data.
• Deletion: request the erasure of your data when it is no longer necessary.
• Opposition: to object to processing based on Futon Llit’s legitimate interests.
• Restriction: request that processing be suspended whilst a complaint is being investigated.
• Portability: to receive your data in a structured, commonly used format, or to request that it be transferred to another data controller.
• Withdraw consent provided, without this affecting the lawfulness of the previous processing.

To exercise these rights, simply write to info@futonllit.com stating the right you wish to exercise. It will be sufficient for the request to be sent from the email address associated with the data subject’s account or orders; It is not necessary to provide a copy of your national identity card. If it is not possible to identify the applicant using the information available, only the essential additional details will be requested.

Futon Llit will respond within one month of receiving the request; this period may be extended by a further two months if the complexity of the case so requires, in which case the applicant will be notified.

10. Complaint to the supervisory authority

If the user considers that their request has not been dealt with correctly or that the processing of their data does not comply with the regulations, they may lodge a complaint with the Spanish Data Protection Agency, with its registered address at C/ Jorge Juan, 6 — 28001 Madrid, and its website at www.aepd.es.

Before taking any further action, Futon Llit would appreciate the opportunity to resolve the matter by writing to info@futonllit.com.

11. Amendments to this policy

Futon Llit may update this policy to bring it into line with regulatory changes or changes to the operation of the website and the services it provides. The current version will always be the one published on this page, showing the date of its last update. If the changes substantially affect processing operations based on consent, the data subject will be notified and new consent will be sought.