LEMN DROPS – Privacy Policy

Effective Date: 27th February 2026
Last Updated: 27th February 2026

This Privacy Policy explains how LEMN DROPS (“we,” “us,” or “our”) collects, uses, and protects personal data in accordance with:

Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)
Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD)

1. Data Controller

The Data Controller responsible for processing your personal data is:

LEMN DROPS
28, Carrer Pintor Aparicio,
Alicante – 03003
Email: info@lemn-drops.com

2. Categories of Personal Data We Collect

2.1 Data Collected Through NFC Tap Analytics

When a user taps an NFC card linked to LEMN DROPS, we may collect:

Device type
Operating system
Browser type
IP address (anonymized where possible)
General browser geolocation (country or city level)
Date and time of tap
Unique NFC identifier
Interaction events (plays, clicks, etc.)

We do not collect precise GPS location unless explicitly requested and consented to.

2.2 Data Collected via Website

When you visit our website, we may collect:

IP address
Browser type
Device information
Referring URLs
Pages visited
Time spent on pages

This information may be collected through cookies and analytics tools such as Google Analytics GA-4.

2.3 Data Collected When Placing Orders

When purchasing NFC cards or services:

Full name
Billing address
Shipping address
Email address
Phone number
Order details
Tax/VAT information (if applicable)

Payment card data is processed securely by third-party payment providers. We do not store full payment card numbers.

2.4 Payment Processing

Payments are handled via secure third-party processors (e.g., Stripe, PayPal, or similar).

We may receive:

Transaction confirmation
Partial payment identifiers
Payment status

Payment processors act as independent data controllers.

2.5 Contact Forms & Support

When you contact us via:

Contact forms
Email
Customer support channels

We may collect:

Name
Email address
Company name
Message content
Communication history

2.6 Newsletter & Marketing

If you subscribe to our newsletter:

Name
Email address
Marketing preferences
Interaction with campaigns (opens, clicks)

We only send marketing emails with your consent.

You may unsubscribe at any time.

3. Legal Basis for Processing (Article 6 GDPR)

We process personal data based on:

Contractual Necessity (Art. 6(1)(b))

Order fulfillment
Payment processing
Hosting services
NFC card provisioning

Legal Obligation (Art. 6(1)(c))

Accounting
Tax compliance
Fraud prevention

Legitimate Interest (Art. 6(1)(f))

Website security
Platform analytics
Service improvement
Business communication

Consent (Art. 6(1)(a))

Newsletter subscriptions
Optional analytics cookies
Optional marketing communications

4. Purpose of Processing

We process personal data to:

Fulfill NFC card orders
Encode and provision digital music experiences
Deliver streaming content
Provide analytics to Creators (aggregated where possible)
Improve platform performance
Process payments
Ship products
Provide customer support
Send service-related communications
Send marketing communications (with consent)

5. Data Retention

We retain personal data:

For the duration of the contractual relationship
As required by Spanish tax and accounting law (generally 6 years)
Until consent is withdrawn (for marketing)
For as long as necessary to resolve disputes

NFC tap analytics may be stored in aggregated or anonymized format for long-term analytics.

6. Sharing of Data

We may share data with:

Payment processors
Shipping carriers
Cloud hosting providers
Email marketing platforms
Analytics providers (e.g., Google Analytics)
IT service providers

All service providers are bound by data processing agreements (Art. 28 GDPR).

We do not sell personal data.

7. International Data Transfers

If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, including:

EU Standard Contractual Clauses (SCCs)
Adequacy decisions
GDPR-compliant processing agreements

8. Google Analytics & Cookies

We may use Google Analytics or similar tools to:

Measure website traffic
Understand user behavior
Improve performance

IP anonymization is enabled where possible.

Users can manage cookies through:

Our cookie banner
Browser settings

A separate Cookie Policy may apply.

9. Data Security

We implement appropriate technical and organizational measures including:

SSL encryption
Secure hosting infrastructure
Access control restrictions
Authentication safeguards
Encrypted storage where applicable

However, no system is 100% secure.

10. Data Subject Rights (Under GDPR)

Under GDPR, you have the right to:

Access your data
Rectify inaccurate data
Erase data (“Right to be Forgotten”)
Restrict processing
Object to processing
Data portability
Withdraw consent at any time

To exercise your rights, contact:
info@lemn-drops.com

We will respond within one month.

11. Children’s Data

LEMN DROPS does not knowingly collect personal data from children under 14 years of age (as per Spanish law).

If we become aware of such collection, we will delete the data.

12. Automated Decision-Making

We do not engage in automated decision-making that produces legal or similarly significant effects.

13. Updates to This Policy

We may update this Privacy Policy periodically.

The updated version will be published on our website with a revised date.

14. Contact

For privacy-related inquiries: