Privacy

Data controller

FANTASTIC FAMILY S.L. (NIF B44977841) is responsible for personal data processed in connection with this website. Registered address: calle Ramón Areces, LOCAL Nº 6 – A, BLOQUES 3 Y 4, 29660 MARBELLA, NUEVA ANDALUCÍA, SPAIN. For privacy enquiries and rights requests, email office@fantastic-familysl.com.

Data and purposes

Opening a page involves technical request information such as an IP address, browser information, requested resource and request time. This is used to deliver pages and media, maintain availability and protect the service. If you contact us by email or through a channel you choose, we process the contact details and information you provide to answer the enquiry. Please do not send unnecessary sensitive information.

Legal bases

Technical operation and proportionate security monitoring rely on the legitimate interest in providing a reliable, secure website; they are separate from optional audience analytics. Optional analytics relies on your consent, not on browsing, inactivity or playing the welcome film. Responding to an enquiry about a possible purchase may be necessary to take steps at your request before a contract; other correspondence relies on our legitimate interest in answering the request. Applicable legal obligations may also require processing.

Optional audience analytics

Where optional analytics is enabled, it starts only after you explicitly accept and the welcome film has ended or been skipped. Events are sent only to this website's own origin to measure page visits and clicks on WhatsApp, telephone and directions links. Records contain a recognised page route, event time, broad device category and, where supplied, short validated source, medium and campaign labels. They do not contain names, email addresses, message contents, raw IP addresses or full referrer/query URLs. Country is recorded as unknown unless a verified country source is available. These statistics do not identify an exact person or prove a visit to the boutique or a sale.

Analytics session and choice

After consent, a random identifier in this browser tab groups events into a session, renewed after 30 minutes of inactivity or a maximum of 24 hours. The server stores a daily keyed HMAC of that identifier, not the original browser identifier; this is pseudonymous data, not a promise of complete anonymity. Accept and Reject are offered with equal prominence and refusing does not restrict the website. Use Cookie settings in the footer to change your choice or withdraw consent at any time; withdrawal removes the browser analytics session and stops future analytics events. Earlier lawful processing is not affected; rights requests can be sent to office@fantastic-familysl.com.

Honouring withdrawal

Where the current browser-tab identifier is available, withdrawal also requests deletion of associated detailed events. This does not identify other tabs or recover identifiers already discarded. If the request cannot be completed, for example because of a network failure, use office@fantastic-familysl.com for rights enquiries. To honour withdrawal and prevent delayed requests from recreating deleted details, the server retains a separate keyed hash of the blocked session identifier for 14 days. This limited protective record contains no raw identifier or IP address and is not used for audience profiling.

Retention

Correspondence is retained for the time needed to answer and resolve the enquiry, and longer only for applicable legal obligations or legal claims. Technical records follow the hosting service's operational and security retention settings. Where optional analytics is enabled, event records are retained for 14 days and aggregate statistics for 90 days, then removed by scheduled maintenance. The analytics choice is remembered for 180 days, the language preference for up to one year, and administrator authentication for up to four hours. These database periods do not automatically delete copies of aggregate reports already delivered to the operator through Telegram. Questions about applicable retention: office@fantastic-familysl.com.

Service providers and international transfers

Railway Corporation supplies this website's hosting, database and media infrastructure and may use subprocessors to provide those services. Its published Data Processing Addendum describes international processing, including in the United States, and applicable transfer safeguards such as EU standard contractual clauses. You can ask us for information about safeguards relevant to your data. Email and any external messaging service you choose also involve the relevant communications provider.

Operational reports and Telegram

The operator may use Telegram bot @LuLuMonitor_bot for service-health alerts and, where optional analytics is enabled, daily and weekly aggregate summaries, with an optional shorter reporting interval. Reports contain statistical totals and limited operational categories only, never visitor identifiers, full IP addresses, email addresses, cookies, raw logs, bot secrets or raw database records. A limited editorial change journal records the type of change, field names, version and time, not the previous or new field contents. Telegram processes delivered messages under its own service terms, potentially outside the EEA; the operator restricts recipients and access to bot commands accordingly. Telegram is not embedded in this website and your browser sends no tracking requests to Telegram. Ask office@fantastic-familysl.com about the relevant recipients and safeguards.

External services and advertising

WhatsApp, Instagram, TikTok and Google Maps are reached through links you choose to open; maps and social feeds are not automatically embedded. Those providers apply their own privacy terms when you visit them. This website does not use Google Analytics, Meta Pixel or advertising trackers, and does not offer a newsletter, customer account or active online checkout.

Your rights

You can request access, rectification, erasure, restriction or portability of your personal data, and object to processing where applicable, by writing to office@fantastic-familysl.com or the registered address. If a processing activity relies on consent, you may withdraw it without affecting earlier lawful processing. We may request information reasonably needed to verify your identity. You may complain to the Spanish Data Protection Agency (AEPD), www.aepd.es. This website does not make automated decisions with legal or similarly significant effects about visitors.

Scope and updates

This notice covers the informational website, its contact channels, operational monitoring and optional consent-based analytics where enabled. It does not describe an active online shop or payment service. New purposes or material changes require updated information and, where necessary, a new consent choice. Last updated: 28 October 2026.

Owner details

Legal entity

FANTASTIC FAMILY S.L.

Tax identifier

B44977841

Registered address

calle Ramón Areces, LOCAL Nº 6 – A, BLOQUES 3 Y 4, 29660 MARBELLA, NUEVA ANDALUCÍA, SPAIN

Privacy email

office@fantastic-familysl.com

Complaints email

office@fantastic-familysl.com

Contact the boutique