Privacy policy

Last updated: September 17, 2026.

1. WHO IS RESPONSIBLE FOR YOUR PERSONAL INFORMATION

The company responsible for processing personal information collected through https://uglychristmassweater.shop/ (the “Website”) is:

  • Company name: COOL CHRISTMAS CLOTHING, S.L.

  • Trade name: Ugly Christmas Sweater.

  • Spanish tax identification number (NIF): B42975615.

  • Registered office: Plaza Castilla 3, 14 E1, 2, 28046 Madrid, Spain.

  • Mailing address: Las Fábricas 14, 28923 Alcorcón, Madrid, Spain.

  • Contact email: info@uglychristmassweater.shop.

For questions about the protection of your personal information, please email info@uglychristmassweater.shop.

In this policy, “personal information” includes information referred to as “personal data” under applicable data protection laws.

2. PERSONAL INFORMATION WE PROCESS

We process information you provide directly and information generated when you use the Website, make a purchase, or interact with our services.

2.1. Information you provide

Depending on the service you use, we may process:

  • Identification and contact information, such as your first and last name, email address, telephone number, and mailing address.

  • Purchase and transaction information needed to manage orders, deliveries, returns, exchanges, refunds, and billing.

  • Customer account information, where accounts are available and you choose to create one.

  • Customer service information included in questions, requests, reported issues, complaints, or communications with our team.

  • Subscription and form information provided when you subscribe to our newsletter, complete a form, or request information.

  • Product review information, such as the review content, rating, name or username, and any images you choose to attach.

2.2. Information generated through browsing

When you browse the Website, we may process technical and usage information, including:

  • IP address.

  • Device or browser identifiers.

  • Pages visited and products viewed.

  • Interactions with the Website.

  • Referral source.

  • Browsing dates and times.

  • Information collected through cookies and similar technologies.

More information about these technologies is available in our Cookie Policy.

3. PURPOSES, LEGAL BASES, AND RETENTION PERIODS

The legal bases described below explain the grounds on which we process personal information where the applicable law requires such a basis. Additional rights under applicable U.S. state privacy laws are addressed in section 7.

3.1. Purchases and the contractual relationship

We process the information needed to manage your order, confirm the purchase, collect payment, prepare and ship products, provide order updates, process exchanges, returns, cancellations and refunds, and address issues after purchase.

The legal bases are performance of the purchase contract and compliance with applicable legal obligations.

Information is retained for as long as necessary to manage the contractual relationship and afterward for the retention or limitation periods established by applicable law.

3.2. Customer service, inquiries, and complaints

We process your information to answer questions, manage requests, resolve issues, and address complaints concerning the Website, products, or orders.

The legal basis is performance of a contract, taking steps at your request before entering into a contract, or our legitimate interest in responding appropriately to communications we receive.

Information is retained for the time needed to address the request and afterward for legally required periods relating to potential liabilities.

3.3. Customer accounts

Where customer accounts are available and you choose to create one, we process your information to provide access to your profile, order history, account details, and associated features.

The legal basis is performance of the contractual relationship or taking steps at your request before entering into a contract.

Information is retained while your account remains active. After account deletion, certain information may be retained with restricted access for legally required periods.

3.4. Newsletters and marketing communications

We may send marketing communications about Ugly Christmas Sweater, our products, new releases, promotions, and campaigns if you have consented or another legal basis permits us to do so under applicable law.

The legal basis is your consent or, where permitted, our legitimate interest in informing existing customers about products similar to those they have already purchased. You will always have a simple, free way to object or unsubscribe.

We use Klaviyo to send and automate marketing communications.

We retain this information while your consent remains valid or until you unsubscribe, subject to any information we need to retain to respect your preferences or comply with the law.

You may unsubscribe at any time through the link included in each marketing communication or by emailing info@uglychristmassweater.shop.

3.5. Product reviews

If you submit a review, we process the information you include to display it on the Website, manage its publication, and improve our products and services. We use Judge.me for this service.

Publication is based on your request or consent when submitting the review. We may display the name, username, or other information you choose to make public together with the review.

A review may remain published while the product is available and you have not requested its removal. Information may also be retained when necessary for legal reasons or to defend against potential claims.

3.6. Returns and exchanges

We process the information needed to manage return, cancellation, exchange, and refund requests.

Requests must be initiated through our customer service channels as described in our Terms and Conditions. Where used to process a request, Reveni may receive the information necessary to provide its return management services.

The legal bases are performance of the contract, compliance with consumer protection obligations, and, where applicable, our legitimate interest in organizing and improving after-sales services.

Information is retained for the time necessary to handle the request and for the applicable legal retention periods.

3.7. Fraud prevention and security

We may process purchase, payment, browsing, and behavioral information to prevent fraud, misuse, attacks on the Website, and other activities that threaten the security of our services.

The legal bases are our legitimate interest in protecting the Website, our customers, and our business, and compliance with legal obligations where applicable.

Information is retained for the time necessary for these purposes and to address potential liabilities.

3.8. Analytics, measurement, and personalized advertising

With your consent, we may use cookies and similar technologies to analyze use of the Website, measure advertising campaigns, and display more relevant advertising.

Depending on the active configuration, we may use Google Analytics 4, Google Ads, Meta, TikTok, Elevar, Klaviyo, and other analytics or marketing tools.

The legal basis for these optional tracking activities is your consent. You may withdraw or change it using the cookie preference controls made available on the Website or contact us for assistance.

Cookie lifespans are described in our Cookie Policy. Personal information derived from these technologies is retained only as necessary for the stated purposes and subject to applicable legal requirements.

Your additional choices regarding targeted advertising and the sale or sharing of personal information are described in section 7.

3.9. Affiliate marketing

With your consent, we may use the Propelbon affiliate network to attribute purchases to links, content, or promotional activities from our affiliates and measure campaign performance.

For this purpose, Propelbon may process cookie identifiers, technical browsing information, referral sources, transaction identifiers, and order details such as the amount, currency, or products needed to attribute a sale.

We do not provide additional personal information that is unnecessary for this purpose.

The legal basis is your consent to marketing cookies and similar technologies. You may withdraw or change that consent using the cookie preference controls made available on the Website or contact us for assistance.

Cookie lifespans are described in our Cookie Policy. Related information is retained only as necessary for the stated purpose and subject to applicable legal requirements.

4. RECIPIENTS OF PERSONAL INFORMATION

We do not sell or rent your personal information in exchange for money.

However, certain disclosures to advertising or analytics partners may qualify as a “sale,” “sharing,” or processing for “targeted advertising” under applicable U.S. state privacy laws, even when no money is exchanged. The relevant information may include online identifiers, browsing activity, purchase information, and inferred interests.

We may disclose information or provide access to service providers that support the operation of our store, order management, and customer service. These include:

  • Shopify, our e-commerce platform.

  • Shopify Payments and its payment service providers, for payment processing.

  • Klaviyo, for newsletters and marketing automation.

  • Propelbon, for affiliate marketing attribution and measurement.

  • Re:amaze, for customer service management.

  • Judge.me, for managing and publishing product reviews.

  • Reveni, where used for return and exchange management.

  • GLS, FedEx, and DHL Express, for order delivery.

  • Elevar, Multifeeds, and Forms, where relevant to the configured services.

  • Google, Meta, and TikTok, when you have accepted the relevant analytics or advertising cookies and subject to applicable privacy choices.

These providers may act as processors, service providers, or independent recipients, depending on the nature of the service and the applicable configuration.

We may also disclose information to public administrations, authorities, financial institutions, insurers, professional advisers, or law enforcement agencies when legally required or necessary to defend our rights.

5. INTERNATIONAL DATA TRANSFERS

Our company is based in Spain. Your information may be processed in Spain and in other countries where our service providers operate, including the United States.

Some providers may be located outside the European Economic Area or allow information to be accessed from those locations.

When international transfers take place, we apply the safeguards required by applicable law. Where relevant, these may include European Commission adequacy decisions, standard contractual clauses, or other valid transfer mechanisms.

You may request additional information about applicable international transfers by emailing info@uglychristmassweater.shop.

6. AUTOMATED DECISIONS AND PROFILING

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

However, if you consent to analytics or advertising cookies, we may create basic marketing segments or profiles based on browsing activity, campaign interactions, or purchase history to measure performance and personalize communications or advertising.

You may withdraw your consent for these purposes using the cookie preference controls made available on the Website, the unsubscribe mechanisms in our marketing communications, or by contacting us.

Additional rights to opt out of targeted advertising or certain profiling activities may apply as described below.

7. YOUR PRIVACY RIGHTS

7.1. Access, correction, deletion, and other requests

Subject to the conditions and exceptions under applicable law, you may exercise the following rights:

  • Access: find out what personal information we process about you.

  • Correction: request correction of inaccurate or incomplete information.

  • Deletion: request deletion of your information where applicable.

  • Objection: object to certain processing based on legitimate interests.

  • Restriction: request that we restrict processing in certain circumstances.

  • Portability: receive your information in a structured format and transfer it to another controller where applicable.

  • Withdrawal of consent: withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, email info@uglychristmassweater.shop and indicate the right you wish to exercise. You may also use our Contact page.

We may request additional information to verify your identity where necessary and permitted by law. We will not require identity verification for an opt-out request where applicable law prohibits doing so.

We will respond within one month, unless applicable law permits an extension because of the complexity or number of requests. If a shorter deadline applies to a particular request, we will follow that deadline.

If you believe that our processing does not comply with applicable data protection law, you may submit a complaint to the Spanish Data Protection Agency or another competent authority.

7.2. Additional rights under U.S. state privacy laws

Depending on your state of residence and whether the relevant law applies to our business and processing activities, you may also have the right to:

  • Obtain information about the categories of personal information collected, their sources, purposes, and recipients.

  • Opt out of the sale or sharing of personal information or its use for targeted advertising.

  • Opt out of certain profiling that produces legal or similarly significant effects.

  • Limit certain uses or disclosures of sensitive personal information.

  • Appoint an authorized agent to submit a request.

  • Appeal a decision concerning a privacy request.

  • Exercise applicable privacy rights without unlawful discrimination.

You may submit requests, including requests marked “Do Not Sell or Share My Personal Information,” to info@uglychristmassweater.shop or through our Contact page.

To appeal a decision where that right applies, contact us through the same channels and identify the request you wish to appeal.

Where required by applicable law, we honor recognized opt-out preference signals, including Global Privacy Control (GPC). Further information appears in our Cookie Policy.

8. CHILDREN’S PRIVACY

The Website and purchasing services are intended for people with sufficient legal capacity to enter into a contract.

We do not knowingly collect personal information from children under 14 without the authorization of their parents or legal guardians. Any collection involving children remains subject to applicable requirements, including verifiable parental consent requirements for children under 13 where relevant.

If you believe that a child has provided personal information without the required authorization, please contact info@uglychristmassweater.shop so that we can investigate and take appropriate action.

9. INFORMATION SECURITY

We apply reasonable technical and organizational measures to protect personal information against loss, alteration, unauthorized access, disclosure, or destruction.

However, no transmission or storage system is completely secure. Although we implement appropriate measures, we cannot guarantee absolute information security.

10. THIRD-PARTY WEBSITES

The Website may link to third-party websites. We are not responsible for their privacy practices or content.

We recommend reviewing those websites’ privacy policies before providing personal information.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy when necessary because of legal, technical, operational, or information-processing changes.

The current version will always be the one published on this page. When changes are significant, we will take reasonable steps to notify you.