Privacy Policy

At Glowwave Solutions (hereinafter, "K-Project Lab", "we" or "the owner") we take the privacy of your personal data seriously. This Privacy Policy explains what data we collect, for what purpose, how long we keep it, and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

• Owner: Glowwave Solutions
• Trade name: K-Project Lab
• Tax ID (CIF): B75506253
• Address: 07650 Santanyí, Balearic Islands, Spain
• Contact email: info@kprojectlab.com
• Website: kprojectlab.com

2. What data we collect

We process the data you provide to us and the data generated while you browse or make a purchase:

• Identification and contact details: first name, last name, email, phone number, postal address.
• Order and billing details: products purchased, amount, shipping and billing address, order history.
• Payment details: handled directly by the payment gateway. We do not store your full card details.
• Browsing data: IP address, device and browser type, pages visited, through cookies and similar technologies (see Cookie Policy).

3. Purpose and legal basis

Purpose	Legal basis
Managing your order, shipping and after-sales service	Performance of the sales contract
Complying with tax and accounting obligations	Legal obligation
Handling your enquiries through the contact form	Consent / legitimate interest
Sending you commercial communications and launch alerts (if you subscribe)	Consent
Analysing site usage and improving the experience	Consent (analytics cookies)

4. How long we keep your data

We keep your data for as long as necessary for the purpose for which it was collected and, thereafter, for the legally required periods (for example, tax regulations require transaction documentation to be kept for a minimum of four to six years). Data used for commercial communications is kept until you withdraw your consent.

5. Recipients and data processors

To provide our service, we share data with providers acting as data processors, under contract and with the safeguards required by the GDPR:

• Shopify Inc. — store platform and order management.
• Payment provider — secure payment processing.
• Shipping carrier — order delivery.
• Klaviyo — email communications (if you subscribe).
• Judge.me — verified review management.
• Google (Analytics) — site usage analysis.
• Meta Platforms — measurement and advertising (if you accept the corresponding cookies).

Some of these providers may process data outside the European Economic Area. In such cases, the appropriate safeguards provided for in the GDPR apply, such as the European Commission's Standard Contractual Clauses.

6. Your rights

You may exercise the following rights at any time: access, rectification, erasure, objection, restriction of processing, portability and withdrawal of the consent given. To do so, write to us at info@kprojectlab.com indicating the right you wish to exercise.

If you believe that the processing of your data does not comply with the regulations, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply appropriate technical and organisational measures to protect your personal data against loss, misuse or unauthorised access, including encryption of communications via the HTTPS protocol.

8. Changes to this policy

We may update this Privacy Policy to adapt it to legislative changes or changes to our services. The current version will always be the one published on this page.

Last updated: June 2026.