Tienda Carpfishing app privacy

Last updated: 20 August 2026.

Controller

Tienda Carpfishing Sociedad Cooperativa Andaluza, tax ID F56108269, Calle Isaac Peral 73, 14730 Posadas (Córdoba), Spain. Contact: incidencias@tiendacarpfishing.es.

Scope

This policy explains data processing in the Tienda Carpfishing Android app. The app displays our Shopify store and adds push notifications and secure linking to the customer account.

Data processed

Installation identifier, push token, platform, app version, device model and language.
App opens, pages visited and notification interactions.
Customer identifier and email address when the user signs in, purchases or starts checkout.
Basic order and checkout information: identifier, amount, currency, products, status and, where applicable, recovery link.

Purposes and legal basis

We process this data to provide the app and manage purchases; send notifications accepted by the user; provide order or cart information; personalise communications; prevent duplicates, fraud and abuse; resolve incidents and produce operational statistics. The applicable bases are performance of a contract, consent for notifications and legitimate interests in service security and improvement.

Providers and payments

Shopify, Supabase, Expo and Firebase Cloud Messaging may process the data required to provide their services. We do not sell personal data. The app and its backend do not store card numbers, bank credentials or complete payment data. Checkout and payment methods are managed by Shopify and the providers selected in the store.

Retention

Technical usage events are retained for no more than 90 days. Tokens are retained while the installation remains active. Order data is retained for the periods required to manage the commercial relationship and comply with legal obligations.

Rights and deletion

You can request access, correction, objection, restriction, portability or deletion at incidencias@tiendacarpfishing.es. You can also start deletion of your account and associated data at Delete app account and data.

Security

We use HTTPS connections, access controls and separation between administrative and customer data. No system is infallible; if a relevant incident is detected, we will act in accordance with applicable law.