Privacy policy

Privacy policy

Last updated: 27 October 2026

1. Who is responsible for your data

The controller is Pol Garcia Amela, trading as Chess4pro, Avenida Béjar 45, local, 08225 Terrassa (Barcelona), Spain. Contact: sales@chess4pro.online. Full identification details are in our contact information.

2. What data we collect

  • Order data: name, email, phone, shipping and billing address, items purchased and order history. Payment card details are processed by the payment provider; we never see or store them.
  • Contact data: what you send us through the contact form or by email.
  • Newsletter data: your email address, if you subscribe.
  • Browsing data: device, browser, pages visited and approximate location, collected through cookies and similar technologies according to your cookie choices.

3. Why we use it and on what legal basis

  • To process, produce, ship and support your orders: performance of the contract (art. 6.1.b GDPR).
  • To keep invoices and accounting records: legal obligation (art. 6.1.c GDPR).
  • To answer your questions: your request and our legitimate interest in replying (art. 6.1.b and 6.1.f GDPR).
  • To prevent fraud and keep the store secure: legitimate interest (art. 6.1.f GDPR).
  • To send the newsletter and to use analytics and advertising cookies: your consent (art. 6.1.a GDPR), which you can withdraw at any time.

4. Who we share it with

We only share the data needed for each purpose with providers that process it on our behalf:

  • Shopify (store platform and checkout).
  • Printful (production and shipping of your order) and the carriers that deliver it.
  • Payment providers (Shopify Payments, PayPal and the other methods shown at checkout).
  • Klaviyo (email newsletter), only if you subscribe.
  • Google (Analytics and Tag Manager) and Meta (Facebook and Instagram), only if you accept the corresponding cookies.
  • Apps installed in the store for order tracking, reviews and customer messaging.
  • Public authorities, when the law requires it.

5. International transfers

Some of these providers are located in or access data from outside the European Economic Area, for example in the United States or Canada. In those cases the transfer is based on an adequacy decision (such as the EU-US Data Privacy Framework) or on the European Commission's standard contractual clauses.

6. How long we keep it

  • Order and invoice data: for as long as the law requires, generally six years under Spanish commercial law.
  • Contact messages: for as long as needed to handle your request, and up to one year afterwards.
  • Newsletter: until you unsubscribe.
  • Cookies: for the period shown in the cookie banner.

7. Your rights

You can request access to your data, its rectification or erasure, restriction of or objection to its processing, and data portability, and you can withdraw your consent at any time. Email sales@chess4pro.online. If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es) or the authority of your country.

8. Cookies

We use technical cookies needed for the store to work and, only with your consent, analytics and advertising cookies. You can accept, reject or change your choice at any time from the cookie banner.

9. Minors

This store is not intended for people under 18, and we do not knowingly collect their data.

10. YouTube API Services

Chess4pro publishes its own videos on its YouTube channel with an internal tool, Chess4pro Publisher, which uses YouTube API Services. Anyone who authorizes Chess4pro Publisher agrees to the YouTube Terms of Service, and Google's handling of the data is governed by the Google Privacy Policy.

Chess4pro Publisher is used only by Chess4pro to manage the Chess4pro YouTube channel; it is not offered to customers or to the public. With the channel owner's authorization through Google sign-in (OAuth), it accesses only: the authorized channel's ID and name; the list of videos on that channel with their titles, visibility and scheduled publication dates; and permission to upload videos with their title, description, tags and thumbnail, scheduled as private until their publication date. It does not access viewers' data, comments, subscribers, analytics or any other channel.

The authorization token is kept only on Chess4pro's own computer, in a file readable only by the tool. Nothing obtained through YouTube API Services is sold, shared with third parties or used for advertising. Channel data is read only to avoid duplicate uploads and scheduling conflicts; the only data stored is a local record of the videos the tool itself uploaded (video ID, scheduled date and a file fingerprint).

Access can be revoked at any time from the Google security settings. When access is revoked, or on request to sales@chess4pro.online, we delete the stored token and any stored API data within 7 days. Stored API data is also refreshed or deleted at least every 30 days.

11. Changes

We may update this policy. The current version is always available on this page, with the date of the last update.