PRIVACY POLICY
Who processes your data?
SU SHI DESIGN SL (Bohemy), CIF B93072544, C/ Marqués de Ovieco 4, 3º C, 29011 Málaga. Email for privacy issues: privacidad@bohemy.com.
What data do we collect and for what purpose?
| So that | What data | Legal basis | How long |
|---|---|---|---|
| Manage your order, shipping, exchanges and returns | Name, address, phone number, email, items purchased | Purchase and sale agreement | For as long as the relationship lasts and afterwards, for the time required by law (6 years for invoices and accounting) |
| Your customer account | Email, password and your order details | Contract | Until you delete your account |
| Answer your questions | Name, email, and what you tell us | Your consent | The time needed to respond to you |
| Send you the newsletter | Your consent | Until you unsubscribe (link in each email) | |
| Avoid payment fraud | Order and payment details | Legitimate interest | The time required for verification |
We do not make automated decisions about you or create profiles, except for the assessment that Klarna makes if you choose to pay in installments.
Who do we share your data with?
We only share information with the companies we need to fulfill your order or maintain the store, and only the essential data:
- Shipping: Nacex and Correos.
- Payments: Redsys (card), PayPal and Klarna.
- Newsletter: Mailrelay.
- Website hosting: our hosting provider.
- Our agency, to fulfill tax obligations.
If any of these companies stores data outside the European Economic Area (for example, PayPal), it does so with the guarantees required by the GDPR.
We never sell your data.
What rights do you have?
You can ask us at any time to access your data, correct it, delete it, limit its use, object to its use, or transfer it to another company. You can also withdraw your consent at any time.
Write to us at privacidad@bohemy.com indicating which right you wish to exercise. If you believe we have not handled your data correctly, you can file a complaint with the Spanish Data Protection Agency (aepd.es).
How do we protect your data?
The website uses a secure connection (https). We do not see or store your card details: they are handled directly by the payment gateways.
Minors
We do not sell to minors under 18 years of age or knowingly collect their data.
Changes to this policy
If we change this policy, we will post the new version on this page with its date. Last updated: October 9, 2026.