Privacy policy

Privacy Policy

Last updated: July 29, 2026

Hidden Samples operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated fragrance sampling and shopping experience (the “Services”). Hidden Samples is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, store, disclose, and otherwise process your personal information when you visit, use, or make a purchase or other transaction through the Services, create or use a customer account, subscribe to marketing communications, contact us, or otherwise interact with Hidden Samples.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, use, processing, storage, and disclosure of personal information.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood how personal information is handled as described in this Privacy Policy.

1. Data Controller

For the purposes of applicable data protection laws, including the General Data Protection Regulation (“GDPR”), the data controller responsible for the personal information processed by Hidden Samples is:

Alejandro Trilla Pardo, trading as Hidden Samples
Carrer del Cigne 14
07006 Palma, Illes Balears
Spain
Email: hiddensamples.info@gmail.com
Website: hiddensamples.com

2. Personal Information We Collect or Process

When we use the term “personal information”, we mean information that identifies you or that can reasonably be linked to you or another person.

Personal information does not include information that has been collected anonymously or properly de-identified so that it can no longer identify or reasonably be linked to an individual.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:

Contact details: including your name, billing address, shipping address, email address, telephone number, and delivery instructions.
Payment and transaction information: including your chosen payment method, billing information, transaction identifiers, payment status, payment confirmation, order value, currency, refunds, and limited card information made available by payment providers, such as the card type or final digits.
Account information: including your email address, customer account identifier, login or authentication information, saved addresses, order history, preferences, and account settings.
Order information: including perfume samples and related products viewed, searched for, added to your cart, purchased, cancelled, returned, replaced, or refunded, together with delivery methods, discounts, order status, and past transactions.
Product and fragrance interests: including brands, perfumes, fragrance families, collections, product categories, and other products that you view, search for, add to your cart, or purchase.
Communications with us: including emails, customer service enquiries, complaints, return requests, photographs, documents, and other information you provide when communicating with Hidden Samples.
Marketing preferences: including whether you have subscribed to or unsubscribed from promotional communications and your cookie or privacy preferences.
Device information: including information about your device, browser, operating system, network connection, IP address, approximate location derived from your IP address, language, time zone, and other technical identifiers.
Usage information: including how and when you interact with the Services, pages and products viewed, searches performed, links selected, referring pages, landing pages, and interactions with the cart, checkout, and store features.
Fraud and security information: including transaction risk indicators, login activity, IP address information, device data, and other information used to identify fraudulent, unauthorised, malicious, or suspicious activity.

Payment card information

Payments are processed by Shopify and the payment provider selected during checkout.

Hidden Samples does not generally receive or store your complete payment card number or card security code. Payment providers may independently collect and process payment details, financial information, billing information, fraud-prevention data, and transaction identifiers in accordance with their own privacy policies and legal obligations.

Please do not send payment card numbers, passwords, authentication codes, or other sensitive financial information to us by email.

3. Sources of Personal Information

We may collect personal information from the following sources:

Directly from you: including when you place an order, create or access an account, subscribe to marketing communications, contact us, exercise a privacy right, or otherwise provide information to us.
Automatically through the Services: including from your device when you visit or use the Site and through cookies, pixels, tags, local storage, log files, and similar technologies.
From Shopify: including information processed through the Shopify platform, checkout, customer accounts, Shop, Shop Pay, analytics, fraud-prevention tools, and other Shopify services.
From payment providers: including transaction confirmations, payment status, payment method, billing information, refunds, disputes, and fraud-prevention information.
From shipping and postal providers: including delivery status, tracking events where available, returned packages, delivery problems, and address-related information.
From service providers: including companies that provide hosting, analytics, email, technical support, security, fraud prevention, marketing, customer service, and other business services.
From partners or other third parties: where permitted by law and relevant to the operation, protection, or improvement of the Services.

4. How We Use Personal Information

Depending on how you interact with us and which Services you use, we may use personal information for the following purposes:

Providing and operating the Services: to display and operate the Site, provide store functionality, remember preferences, maintain shopping carts, and make perfume samples and related products available for purchase.
Processing orders: to accept orders, process payments, prepare and package perfume samples and related products, arrange shipping, deliver orders, and send order confirmations and shipping information.
Managing customer accounts: to create, maintain, authenticate, and administer customer accounts, saved addresses, preferences, and order history.
Returns and customer service: to respond to enquiries, manage cancellations, damaged or defective products, missing orders, replacements, refunds, complaints, and other customer support matters.
Tailoring and improving the Services: to understand how customers use the Site, improve navigation, products, store performance, content, and the shopping experience, and recommend perfumes or samples that may be relevant based on products viewed or purchased.
Marketing and advertising: where permitted by applicable law, to send promotional communications by email, announce new perfume samples or promotions, measure marketing performance, understand interactions with advertisements, and display advertising based on products viewed, added to the cart, or purchased.
Security and fraud prevention: to authenticate customer accounts, secure payments, detect and investigate possible fraud, abuse, unauthorised activity, malicious behaviour, or security incidents, and protect Hidden Samples, Shopify, customers, payment systems, and other users.
Business administration: to maintain accounting, tax, invoicing, consumer, transaction, and commercial records and to manage the operation of the business.
Legal reasons: to comply with applicable laws, regulations, court orders, tax requirements, customs obligations, lawful requests from public authorities, and to establish, exercise, or defend legal claims.
Enforcing our policies: to investigate or respond to suspected violations of our Terms of Service, policies, rights, or the rights of other customers or third parties.

5. Legal Bases for Processing

If you are located in the European Economic Area (“EEA”), the United Kingdom, Switzerland, or another jurisdiction that requires a lawful basis for processing, we process personal information under one or more of the following legal bases:

Performance of a contract: when processing is necessary to accept and process your order, collect payment, prepare and package products, arrange delivery, communicate about the order, manage customer accounts, and handle cancellations, replacements, or refunds.
Compliance with legal obligations: when processing is necessary to comply with tax, accounting, commercial, consumer protection, customs, fraud-prevention, regulatory, or other legal requirements.
Legitimate interests: when processing is reasonably necessary to operate and secure the business, prevent fraud, communicate with customers, improve the Site and Services, understand store performance, maintain records, and establish, exercise, or defend legal claims, provided that these interests do not override your fundamental rights and freedoms.
Consent: when you subscribe to marketing communications, accept non-essential cookies, consent to personalised advertising, submit optional information, or otherwise give us permission to process your information for a specified purpose.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Certain information is necessary to enter into or perform a purchase contract. If you do not provide the information required to process payment, prepare the order, or arrange delivery, we may be unable to accept or complete your order.

6. Cookies and Similar Technologies

Hidden Samples, Shopify, and our service providers may use cookies, pixels, tags, local storage, web beacons, and similar technologies to operate the Site, maintain shopping carts, remember preferences, process checkout, protect the Services, understand Site usage, and, where permitted, provide marketing or personalised advertising.

These technologies may include the following categories:

Strictly necessary technologies: required for core functions such as security, navigation, customer authentication, cart management, checkout, payment processing, and fraud prevention.
Functional technologies: used to remember choices such as language, currency, country, region, account settings, or other preferences.
Analytics and performance technologies: used to understand how visitors use the Site, measure traffic, identify technical errors, and improve store performance and navigation.
Advertising and marketing technologies: used, where permitted, to measure campaigns, understand interactions with advertisements, personalise advertising, and show products that may be relevant to you.

Where required by applicable law, non-essential cookies and similar technologies will not be used until you have provided consent.

You may accept, reject, or change your cookie preferences through the cookie banner or cookie preference controls available on the Site. You may also manage cookies through your browser settings, although blocking strictly necessary cookies may prevent parts of the Site, cart, customer account, or checkout from functioning correctly.

The specific cookies and technologies used may change when Shopify, Hidden Samples, or connected applications are updated. For this reason, we do not maintain a fixed list of individual cookie names within this Privacy Policy.

7. Marketing Communications

Where permitted by applicable law, we may use your name, email address, purchase history, fragrance interests, and marketing preferences to send information about new perfume samples, new brands, collections, promotions, availability, and other Hidden Samples updates.

You may unsubscribe from promotional emails at any time by selecting the unsubscribe link included in the message or by contacting us at hiddensamples.info@gmail.com.

Unsubscribing from marketing communications will not prevent us from sending essential non-promotional communications relating to an order, payment, customer account, delivery, replacement, refund, privacy request, or security matter.

8. How We Disclose Personal Information

We may disclose personal information to third parties where reasonably necessary to operate the Services, fulfil orders, protect the business, or comply with applicable law.

Recipients may include:

Shopify: to host and operate the online store, checkout, customer accounts, analytics, security, fraud-prevention services, and related ecommerce functionality.
Payment providers: including payment processors, banks, card networks, digital wallets, and other payment services available during checkout.
Shipping and postal providers: including Correos, USPS, destination-country postal operators, customs intermediaries, and other delivery partners.
Technology and service providers: including providers of hosting, cloud storage, email, analytics, customer service, security, technical support, fraud prevention, and store applications.
Marketing and advertising providers: where permitted by law and subject to your applicable privacy and cookie choices.
Professional advisers: including accountants, tax advisers, legal advisers, insurers, auditors, and other professional service providers.
Public authorities: when disclosure is required by law, regulation, court order, tax obligation, customs requirement, or another valid governmental or legal request.
Business successors: in connection with a genuine sale, transfer, merger, restructuring, financing, insolvency, or reorganisation of all or part of the business.
Third parties you authorise: when you request, direct, or consent to the disclosure, such as when information must be provided to a postal or shipping company to deliver your order.

Service providers generally receive only the information reasonably necessary to perform their services and are expected to process personal information in accordance with applicable law and contractual obligations.

9. Relationship with Shopify

The Services are hosted and powered by Shopify. Shopify collects and processes personal information relating to your access to and use of the Services in order to provide, secure, maintain, and improve Shopify services for Hidden Samples and its customers.

Information submitted through the Services may be transmitted to and shared with Shopify and other service providers, including providers located in countries other than the country where you live.

Hidden Samples uses certain Shopify enhanced features that may incorporate information obtained from your interactions with our store, Shopify, and other Shopify merchants. These features may support services such as security, fraud prevention, analytics, store personalisation, marketing measurement, and advertising.

For these enhanced features, Shopify may process information relating to your interactions with Hidden Samples together with information from interactions with Shopify and other Shopify merchants. In these circumstances, Shopify may be responsible for that processing, including responding to requests concerning Shopify’s use of personal information for its own purposes.

Depending on the processing activity, Shopify may act as a processor or service provider acting on behalf of Hidden Samples, or as an independent controller responsible for its own processing.

You can learn more by reading the Shopify Consumer Privacy Policy.

You may also use the Shopify Privacy Portal to learn more about Shopify’s use of personal information and to exercise rights relating to information processed by Shopify.

10. Personalised Advertising, Sale, and Sharing

Hidden Samples does not sell personal information in exchange for money.

However, some privacy laws define certain transfers of browsing, device, purchase, or interaction information to Shopify, analytics providers, or advertising partners as a “sale”, “sharing”, or processing for “targeted advertising”, even where no money is paid in exchange for the information.

Depending on where you live, you may have the right to opt out of certain disclosures or uses of personal information for targeted advertising.

Where available, you may exercise this right through the Your Privacy Choices or data-sharing opt-out link displayed on the Site, through the cookie preference controls, or by contacting us at hiddensamples.info@gmail.com.

If you visit the Site with a recognised Global Privacy Control preference signal enabled, Shopify may treat the signal as an opt-out request for the browser and device used to visit the Site, depending on your location and the applicable Shopify privacy settings.

If Shopify can associate the device transmitting the signal with a Shopify account, Shopify may also apply the preference to that account.

Other than recognised privacy preference signals such as Global Privacy Control where applicable, the Site does not necessarily respond to general “Do Not Track” signals because there is no consistent industry standard governing those signals.

11. Third-Party Websites and Links

The Services may contain links to websites, payment providers, social media platforms, delivery services, perfume brands, or other online resources operated by third parties.

If you follow a link to a third-party website or service, you should review its own privacy policy, security practices, and terms and conditions.

Hidden Samples does not control and is not responsible for the privacy, security, accuracy, availability, or data-processing practices of third-party websites or services.

The inclusion of a third-party link does not, by itself, imply endorsement of that third party, its services, or its content.

12. International Data Transfers

Hidden Samples is based in Spain, but Shopify and some of our service providers operate internationally. Personal information may therefore be transferred, stored, or processed outside Spain, the EEA, the United Kingdom, Switzerland, or the country where you live.

Where required by applicable law, international transfers are protected through recognised safeguards such as adequacy decisions, Standard Contractual Clauses approved by the European Commission, equivalent United Kingdom transfer mechanisms, Binding Corporate Rules, data-processing agreements, or other lawful transfer mechanisms.

International processing may also occur where necessary to process payments, prevent fraud, provide Shopify services, fulfil orders, or arrange international delivery.

13. Security and Retention of Personal Information

We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, accidental loss, misuse, alteration, disclosure, or destruction.

These measures may include secure Shopify accounts, access controls, authentication measures, encryption provided by Shopify and payment services, fraud monitoring, security updates, and restrictions on access to customer information.

No method of electronic transmission, storage, or security is completely secure. We therefore cannot guarantee absolute security.

Please protect your customer account and authentication information and do not share login codes, passwords, payment card details, or other confidential information with third parties.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy. The retention period depends on the type of information, the reason for processing it, and applicable legal requirements.

Order, invoice, payment, transaction, tax, accounting, and commercial records are retained for the periods required by applicable law.
Customer service communications, complaints, damaged or defective product claims, missing order enquiries, replacements, and refund information may be retained for as long as necessary to resolve the matter and establish, exercise, or defend legal claims.
Customer account information may be retained while the account remains active and for an appropriate period after closure, subject to applicable legal obligations.
Marketing information may be retained until you unsubscribe, withdraw consent, object to the processing, or the information is no longer reasonably required.
Limited suppression information may be retained after you unsubscribe to ensure that your opt-out preference continues to be respected.
Fraud-prevention and security information may be retained for as long as reasonably necessary to protect the Site, customers, payments, and the business.

When personal information is no longer required, we will delete it, anonymise it, or restrict its use unless continued retention is required by law or necessary for a legal claim.

Information may remain temporarily in secure backups until those backups are overwritten or deleted according to the applicable service provider’s retention procedures.

14. Automated Decision-Making and Fraud Prevention

Hidden Samples does not use customer information to make decisions based solely on automated processing that produce legal or similarly significant effects on customers.

Shopify, payment providers, card networks, and fraud-prevention services may use automated systems to evaluate transactions, IP addresses, device information, payment activity, and other indicators of potential fraud, unauthorised activity, or security risks.

These systems may flag, delay, reject, or request additional verification for a transaction where suspicious activity is detected.

Where required by applicable law, you may contact us to request further information or human review if you believe that a transaction has been incorrectly affected by an automated fraud or security assessment.

15. Your Rights and Choices

Depending on where you live and the applicable law, you may have some or all of the following rights regarding your personal information:

Right of access or knowledge: to request confirmation of whether personal information concerning you is processed and to obtain access to that information.
Right to correction: to request correction of inaccurate personal information and completion of incomplete information.
Right to deletion: to request deletion of personal information in circumstances provided by applicable law.
Right to restriction: to request that the processing of personal information be restricted in certain circumstances.
Right to object: to object to processing based on legitimate interests in certain circumstances and to object to direct marketing at any time.
Right to data portability: to receive certain personal information in a structured, commonly used, machine-readable format and, where technically feasible and legally applicable, request its transfer to another controller.
Right to withdraw consent: to withdraw consent at any time where processing is based on consent.
Right to opt out: to opt out of certain disclosures, sales, sharing, or processing for targeted advertising where applicable.
Right regarding automated decisions: to request appropriate safeguards or human review where you are subject to a decision based solely on automated processing that produces legal or similarly significant effects.
Right to complain: to lodge a complaint with a competent data protection authority.

These rights are not absolute and may be subject to conditions, limitations, and exceptions under applicable law.

For example, we may be required to retain certain information to comply with tax, accounting, commercial, fraud-prevention, consumer protection, or other legal obligations.

To exercise a privacy right, contact us at hiddensamples.info@gmail.com. Please describe your request clearly and provide enough information for us to identify the relevant records.

We may request reasonable information to verify your identity before processing a request. We will use verification information only for the purpose of confirming your identity and handling your request.

Where permitted by applicable law, an authorised representative may submit a request on your behalf. We may require evidence that you have authorised that person to act for you and may also ask you to verify your identity directly.

We will not discriminate against you for exercising a privacy right and will respond within the period required by applicable law.

16. Managing Communication Preferences

You may unsubscribe from promotional emails at any time by using the unsubscribe option displayed in the message.

You may also contact us at hiddensamples.info@gmail.com to request removal from promotional communications.

If you unsubscribe, we may still send non-promotional communications concerning orders, accounts, deliveries, payments, replacements, refunds, customer service, security, or legal matters.

17. Children’s Data

The Services are not specifically directed at children, and we do not knowingly collect personal information from children who are below the minimum age at which they may lawfully provide their own consent or enter into an online purchase under applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us improperly, please contact us at hiddensamples.info@gmail.com so that we can review the matter and, where appropriate, delete the information.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we sell or share, as those terms may be defined under applicable privacy laws, personal information belonging to individuals under 16 years of age.

18. Complaints

If you have a concern or complaint about how we process your personal information, please contact us first at hiddensamples.info@gmail.com so that we have an opportunity to review and resolve the matter.

If you are located in Spain or are otherwise protected by Spanish data protection law, you also have the right to lodge a complaint with the Spanish Data Protection Agency — Agencia Española de Protección de Datos (AEPD).

You may also lodge a complaint with the competent data protection authority in the country where you live or work.

Information about European data protection supervisory authorities is available from the European Data Protection Board.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, connected applications, Shopify settings, data-processing practices, legal obligations, or for other operational, legal, or regulatory reasons.

The revised version will be published on this page with an updated “Last updated” date.

Where required by applicable law, we will provide additional notice of material changes.

20. Contact

If you have questions about our privacy practices or this Privacy Policy, wish to exercise a privacy right, or want to make a complaint, please contact: