Last updated: 5 October 2026
Protecting your personal data is important to us. This Privacy Policy explains which personal data we collect when you visit www.icestrains.com or place an order, why we use it, how long we keep it and which rights you have under the EU General Data Protection Regulation (GDPR).
1. Data controller
| Company name | COSTA SELECT TRADING COMPANY SL |
|---|---|
| Tax ID (CIF) | B05611157 |
| Registered address | Avenida Al Vedat, 57, piso 5, puerta 15, 46900 Torrent (Valencia), Spain |
| support@icestrains.com | |
| Phone | +34 643 492 358 |
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD). For any question about your data, write to support@icestrains.com.
2. Personal data we collect
- Identity and contact data: name, email address, phone number, billing and delivery address.
- Order data: products purchased, order amounts, payment method, order and shipping status, invoices.
- Account data: login details and order history if you create a customer account.
- Payment data: confirmation of payment. Card and Bizum payments are processed directly by the payment provider; we never see or store your full card details.
- Communication data: messages you send us through the contact form, email, phone, WhatsApp or Telegram.
- Reviews: your name (shown shortened), rating and review text if you write a review.
- Newsletter data: your email address and subscription preferences, only if you subscribe.
- Technical data: IP address, browser and device type, pages visited and cookies (see section 9).
We do not knowingly collect special categories of data (such as health data). Please do not send us such information.
3. Purposes and legal bases
| Processing orders, delivery, invoicing and customer account | Performance of a contract – Art. 6(1)(b) GDPR |
|---|---|
| Answering enquiries, returns, complaints and guarantee claims | Performance of a contract and our legitimate interest – Art. 6(1)(b) and (f) GDPR |
| Accounting, tax and legal obligations, age checks | Legal obligation – Art. 6(1)(c) GDPR |
| Newsletter and marketing emails | Your consent – Art. 6(1)(a) GDPR, which you can withdraw at any time |
| Website security, fraud prevention, statistics | Our legitimate interest – Art. 6(1)(f) GDPR, or your consent for non-essential cookies |
| Publishing product reviews | Your consent – Art. 6(1)(a) GDPR |
We do not use automated decision-making or profiling that produces legal effects concerning you.
4. Who receives your data
We never sell your personal data. We share it only with service providers we need to run the shop, and only to the extent necessary. They act as data processors on our behalf under written agreements and confidentiality obligations:
- Shipping companies (for example SEUR, Correos, GLS) – name, address and phone number to deliver your parcel;
- Banks and payment providers – to process card, Bizum and bank-transfer payments;
- Hosting and security – our web host (Fornex), Cloudflare (content delivery and protection) and our website security service;
- Email and communication – Google Workspace (customer-service email) and Brevo (contact form, transactional and newsletter emails);
- Accounting and tax advisers and public authorities – where required by law.
5. International data transfers
Some providers (for example Google or Cloudflare) may process data outside the European Economic Area. In those cases transfers are protected by an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework) or by the European Commission’s Standard Contractual Clauses.
6. How long we keep your data
| Order and invoice data | As long as required by Spanish commercial and tax law (generally 6 years) |
|---|---|
| Customer account | Until you delete your account or ask us to delete it |
| Contact-form and support messages | Up to 2 years after the last contact, unless needed for a claim |
| Newsletter | Until you unsubscribe |
| Cookies | According to the duration shown in the cookie settings |
After these periods, data is deleted or anonymised.
7. Your rights
You have the right to:
- access the personal data we hold about you;
- rectify inaccurate or incomplete data;
- erase your data (“right to be forgotten”) where there is no legal reason to keep it;
- restrict or object to the processing of your data;
- data portability – receive your data in a structured, machine-readable format;
- withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise your rights, email support@icestrains.com. We will reply within one month. We may ask you to verify your identity.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or with the data protection authority of your country of residence.
8. Newsletter
If you subscribe to our newsletter, we use your email address to send you offers and news about our products. Every email contains an unsubscribe link, and you can also unsubscribe at any time by writing to us. Our newsletter is sent through Brevo, which may record opens and clicks to help us improve our emails.
9. Cookies
We use cookies and similar technologies:
- Necessary cookies – required for the shop to work (cart, checkout, login, language and currency selection, security). These do not need consent.
- Analytics and marketing cookies – only with your consent, to understand how the website is used and to show relevant offers.
When you first visit the website you can accept, reject or customise cookies in the cookie banner. You can change your choice at any time using the cookie icon at the bottom of the page, and you can delete cookies in your browser settings.
10. Data security
Our website uses an encrypted HTTPS connection. We apply appropriate technical and organisational measures – such as access restrictions, firewalls, regular updates and backups – to protect your data against loss, misuse and unauthorised access.
11. Minors
Our shop is intended only for adults aged 18 or over. We do not knowingly collect personal data from minors. If we learn that a minor has provided personal data, we will delete it.
12. Changes to this Privacy Policy
We may update this Privacy Policy when our services or the law change. The current version is always available on this page, with the date of the last update shown at the top.