How TamedTail collects and processes personal data for orders, support, and customer service.
GroupB Live SL, tax ID B13958152, with address at Rambla Nova 10, 43004 Tarragona, Spain, is the data controller for this website's order, support, and customer-service data.
For any privacy-related inquiry or to exercise your data protection rights, contact us at support@tamedtailmotion.com.
We may process name, email, shipping address, billing details, order contents, payment status, shipping/tracking information, support messages, app/download entitlement information, and technical diagnostics voluntarily provided by the customer.
Card data is handled exclusively by Stripe. TamedTail does not receive, process, or store full card numbers.
Each processing purpose is tied to a specific legal basis under the GDPR:
Contract performance (Art. 6.1.b): processing your order, taking payment, shipping products, providing download access, issuing invoices, and delivering customer support related to your purchase.
Legal obligation (Art. 6.1.c): issuing and retaining invoices as required by tax law (Ley 58/2003 General Tributaria), maintaining accounting records (Código de Comercio), responding to binding requests from public authorities, and complying with consumer protection regulations including warranty and withdrawal obligations.
Legitimate interest (Art. 6.1.f): preventing fraud, detecting and defending against payment disputes, improving product reliability through aggregated diagnostics, and sending transactional communications directly related to an existing order or support case.
Consent (Art. 6.1.a): any communication or processing that goes beyond transactional needs (for example, newsletter sign-up or optional product feedback surveys) will only take place after you give explicit, freely given consent, which you may withdraw at any time.
We share only the minimum data necessary with the following categories of processors, each bound by a data processing agreement under Article 28 GDPR:
Payment: Stripe, Inc. (payment processing). Stripe is certified under the EU-US Data Privacy Framework.
Shipping: DHL (DHL Express / Deutsche Post AG) or an alternative tracked carrier. The shipping address, contact name, and phone are transmitted to generate the shipping label and tracking. For non-EU shipments, customs-relevant data (product description, value, HS code) is shared as required by export law.
Email delivery: Resend (Resend, Inc.). Transactional emails (order confirmation, shipping notification, support replies) are routed through Resend. Data is processed under Standard Contractual Clauses where applicable.
Hosting and database: Google Cloud Platform (Google Cloud EMEA Limited). Order and customer data is stored in GCP infrastructure located in the European Economic Area. Google is certified under the EU-US Data Privacy Framework.
Public authorities: we disclose data when required by law, court order, or binding request from tax, customs, or law enforcement authorities.
We never sell, rent, or trade personal data to third parties for their own marketing purposes.
Where a processor is located outside the European Economic Area or may access data from outside the EEA, we rely on one of the following transfer mechanisms as required by Chapter V of the GDPR:
EU-US Data Privacy Framework (DPF): Stripe and Google Cloud Platform are certified under the EU-US DPF, which was deemed adequate by the European Commission on July 10, 2023.
Standard Contractual Clauses (SCC): Resend and DHL may process data in countries not covered by an adequacy decision. We use European Commission-approved Standard Contractual Clauses with supplementary technical and organizational measures where appropriate.
For intra-EU processing (DHL within the EU, Google Cloud EMEA), data remains within the EEA and no transfer safeguard is required.
We keep personal data only as long as it serves the purpose for which it was collected, or as required by law:
Order and invoice data: 6 years from the end of the tax period in which the transaction occurred (Ley 58/2003 General Tributaria, Art. 66; accounting records under Código de Comercio Art. 30).
Support communications: retained for 3 years after the case is closed, to address follow-up questions, warranty claims, and product reliability analysis.
Shipping and tracking data: retained for the duration of the order lifecycle plus 3 years, aligned with warranty and consumer guarantee obligations.
Payment metadata (Stripe-sourced): available through Stripe for the duration of our account relationship; we do not independently duplicate full payment instrument data.
Diagnostic data voluntarily shared for support: retained for up to 3 years for product improvement and warranty history, or deleted earlier upon request where deletion does not conflict with legal obligations.
Under the GDPR, you have the right to: access your data, rectify inaccurate data, request deletion (right to be forgotten), restrict processing, data portability, and object to processing based on legitimate interest.
To exercise any of these rights, email support@tamedtailmotion.com. We will respond within one month (extendable by two additional months for complex requests, with notice). Identification may be required.
You also have the right to lodge a complaint with a supervisory authority. The competent authority in Spain is:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6 — 28001 Madrid
www.aepd.es
If you are based in another EU member state, you may also contact your local data protection authority.
This website uses only strictly necessary (technical) cookies required for the operation of the site — such as session management, shopping cart functionality, and security (Cloudflare Turnstile). These cookies do not require consent under Art. 22.2 of the Spanish LSSI (Ley 34/2002).
We do not use analytics, advertising, tracking, or profiling cookies. If this changes in the future, a cookie consent banner will be deployed and this section will be updated before any non-essential cookies are activated.
