Plantilla legal gratuita
Generador de política de privacidad
Responde unas preguntas sobre tu tienda y llévate una política de privacidad que puedes publicar hoy. Es una plantilla de partida, no asesoramiento legal.
Tu tienda
Detalles · Política de privacidad
Esto es una plantilla, no asesoramiento legal. Revísala, adáptala a tu negocio y pide a un abogado que la compruebe si vendes en categorías reguladas.
La política generada está en inglés. Tradúcela antes de publicarla si tu tienda vende en otro idioma.
Privacy Policy
[Store name] · Effective September 15, 2026
1. Overview
This Privacy Policy describes how [Store name] ("we", "us" or "our") collects, uses and shares your personal information when you visit [website URL] (the "Site"), buy something from us, or otherwise communicate with us. It takes effect on September 15, 2026.
By using the Site you agree to the collection and use of information as described here. If you do not agree, please do not use the Site or place an order.
2. Information we collect
We collect the following types of personal information:
- Device information: your browser type, IP address, time zone, approximate location, the pages or products you view, the site that referred you, and how you interact with the Site. We collect this automatically using cookies, log files and similar technologies.
- Order information: your name, billing address, shipping address, email address, phone number and the items you buy. Payment card details are entered directly with our payment processor; we never see or store your full card number.
- Account information: if you create an account, we store your name, email address, a hashed version of your password, your order history and any saved addresses.
- Marketing preferences: whether you have signed up for our emails, which emails you open, and which links you click, so we can send you things you are more likely to want.
- Customer support information: anything you send us when you contact us, including the contents of your messages and any attachments.
3. How we use your information
We use the information we collect to:
- Fulfilling orders: processing your payment, arranging shipping, sending order confirmations and updates, and handling returns or refunds.
- Communicating with you: answering your questions and telling you about changes to your order or to our policies.
- Preventing fraud: screening orders for risk and protecting the Site, our customers and ourselves from abuse.
- Improving the Site: understanding how visitors use the Site so we can fix problems and make it better.
- Marketing: sending you product news, offers and abandoned-cart reminders when you have agreed to receive them. Every marketing email includes an unsubscribe link, and you can opt out at any time.
- Legal compliance: keeping the records we are required to keep by tax, consumer-protection and other laws.
4. Cookies and analytics
A cookie is a small file stored on your device when you visit a site. We use cookies that are essential for the Site to work (for example, to keep items in your cart and to remember that you are logged in), and, where you allow it, cookies that help us understand and improve the Site.
Google Analytics: we use Google Analytics to understand how visitors find and use the Site. Google collects information such as the pages you visit, how long you stay and the device you use. You can read how Google uses this data at https://policies.google.com/privacy and opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.
You can control cookies through your browser settings, including blocking or deleting them. If you block essential cookies, parts of the Site, including checkout, may not work.
5. How we share your information
We share your personal information with third parties only where needed to run the store, and never sell it to data brokers:
- Payment processors: Stripe process your payment on our behalf. They receive your card details and billing information directly and handle them under their own privacy policies (Stripe: https://stripe.com/privacy).
- Shipping carriers: we share your name, address and phone number with the carriers who deliver your order so they can get it to you and contact you about the delivery.
- Email service providers: the platform we use to send emails stores your email address and engagement data on our behalf.
- Analytics and advertising partners: Google, as described in the cookies section above.
- Service providers: the platform that hosts our store and other providers who help us run the business, all of whom may only use your information to provide their service to us.
- Legal requirements: we may disclose information to comply with the law, respond to a lawful request, or protect our rights.
- Business transfers: if we sell or merge the business, your information may be transferred to the new owner, who will be bound by this policy.
6. How long we keep your information
We keep order information for three years after your last order, unless a longer period is required by law, needed to resolve a dispute, or needed to enforce our agreements.
Account information is kept for as long as your account is open. You can ask us to delete your account at any time, after which we keep only the records we are legally required to keep.
Device and analytics information is kept in aggregated form that no longer identifies you.
7. Your rights under GDPR and UK GDPR
If you are in the European Economic Area, Switzerland or the United Kingdom, we process your personal information on the following legal bases: performance of our contract with you (to fulfil your order); our legitimate interests (to run and improve the Site and prevent fraud); your consent (for marketing and non-essential cookies); and compliance with our legal obligations.
You have the right to:
- Access the personal information we hold about you and receive a copy of it.
- Correct inaccurate or incomplete information.
- Ask us to delete your information, where we have no overriding reason to keep it.
- Restrict or object to our processing of your information.
- Receive your information in a portable, machine-readable format.
- Withdraw consent at any time where we rely on consent, without affecting processing that has already taken place.
To exercise any of these rights, email us at [contact email]. We will respond within one month. You also have the right to lodge a complaint with your local data protection authority.
Because we and our service providers may be located outside your country, your information may be transferred across borders. Where we transfer information out of the EEA or UK, we rely on standard contractual clauses or another lawful transfer mechanism.
8. Your rights under California law (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use and disclose, and receive a copy of it.
- Delete personal information we have collected from you, subject to certain exceptions.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of your personal information.
- Not be discriminated against for exercising any of these rights.
We do not sell or share your personal information as those terms are defined under California law.
To exercise your rights, email [contact email]. We may need to verify your identity before responding. You can also authorise an agent to make a request on your behalf.
9. Security
We use reasonable technical and organisational measures to protect your personal information, including encryption in transit (HTTPS) and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Children
The Site is not intended for anyone under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us at [contact email] and we will delete it.
11. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or for legal reasons. The date at the top shows when it was last changed. If the changes are significant, we will let you know by email or with a notice on the Site.
12. Contact us
Questions about this policy or your personal information? Email us at [contact email].
[Store name], [your country or state].
Los datos de tu tienda se quedan en este navegador para que las otras tres políticas se rellenen solas. No se sube nada.
Responde unas preguntas
Qué datos recoges, qué pasarelas de pago y herramientas de marketing usas y a dónde envías.
Recibe una política formateada
Apartados de datos recogidos, cookies, terceros, conservación y derechos del usuario, escritos en lenguaje claro.
Cópiala en tu tienda
Pega el texto en tu página de Política de Privacidad. Actualízala cada vez que añadas una herramienta nueva.
Qué debe cubrir la política de privacidad de una tienda
Una política de privacidad le dice al visitante qué recoges sobre él, para qué y quién más lo ve. En una tienda online eso significa: datos personales recogidos en el checkout (nombre, dirección, correo, teléfono), datos de pago (que normalmente gestiona por completo tu pasarela y tú no almacenas), datos de cuenta si los clientes pueden iniciar sesión, y datos de comportamiento procedentes de cookies y analítica.
También debe nombrar a los terceros implicados. Es decir, tu pasarela de pago, tu herramienta de email marketing si envías boletines o correos de carrito abandonado, tu proveedor de analítica y cualquier píxel publicitario que uses para retargeting. Indica cuánto tiempo conservas los datos y explica cómo pedirte que los borres o los exportes.
Mantén el lenguaje claro. Una política que nadie puede leer es una política en la que nadie confía, y los reguladores esperan cada vez más lenguaje llano en lugar de fórmulas legales.
Lo básico de GDPR, UK GDPR y CCPA/CPRA
Si tienes clientes en la Unión Europea o en Reino Unido, el GDPR y el UK GDPR esperan que nombres tu base legal para tratar los datos (normalmente el contrato, para un pedido, o el consentimiento, para marketing), que enumeres los terceros con los que compartes datos y que expliques cómo alguien solicita acceder a sus datos o borrarlos.
Si tienes clientes en California, la CCPA y su actualización CPRA esperan que declares las categorías de información personal que recoges y vendes o compartes (incluido para segmentación publicitaria) y que ofrezcas a los residentes una forma de oponerse a esa venta o cesión, a menudo como un enlace de tipo Do Not Sell or Share My Personal Information. Otros estados de EE. UU., entre ellos Virginia, Colorado y Connecticut, tienen leyes parecidas con sus propios umbrales.
No hace falta ser una empresa grande para que esto te aplique. Si vendes a residentes de esas regiones, cubre lo básico en lugar de saltártelo.
Dónde ponerla
Enlaza la política en el pie de tu tienda en todas las páginas, y otra vez en el checkout junto a la casilla donde el cliente acepta tus condiciones. Si envías email de marketing, enlázala también en el pie de cada campaña, porque es el primer sitio donde mirarán un regulador o un proveedor de correo.
Más herramientas gratuitas
Todas las herramientasPreguntas frecuentes
¿Este generador de política de privacidad es gratis?
¿La política generada es asesoramiento legal?
¿Cubre GDPR y CCPA?
¿Necesito política de privacidad si soy una tienda pequeña?
¿Tengo que mencionar las cookies por separado?
¿Y si uso apps que recogen sus propios datos?
¿Cada cuánto debo actualizar mi política de privacidad?
¿Puedo usarla si vendo a otros países?
Prueba gratis de 7 días
Empieza hoy la prueba gratis de tu tienda.
Sin tarjeta de crédito. Todas las herramientas de esta página siguen funcionando, te registres o no.