Privacy policy

Privacy Policy

At Glowwave Solutions (hereinafter “K-Project Lab”, “we” or “the controller”) we take the privacy of your personal data seriously. This Privacy Policy explains what data we collect, for what purpose, how long we keep it and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

  • Controller: Glowwave Solutions
  • Trade name: K-Project Lab
  • Tax ID (CIF): B75506253
  • Mailing address: Apartado Postal 222, 07690 Santanyí, Balearic Islands, Spain
  • Contact email: info@kprojectlab.com
  • Website: kprojectlab.com

2. What data we collect

We process the data you provide to us and the data generated while you browse or make a purchase:

  • Identification and contact data: first name, last name, email, phone number, postal address.
  • Order and billing data: products purchased, amount, shipping and billing address, order history.
  • Payment data: handled directly by the payment gateway. We do not store your full card details.
  • Browsing data: IP address, device and browser type, pages visited, through cookies and similar technologies (see Cookie Policy).

3. Purposes and legal basis

Purpose Legal basis
Managing your order, shipping and after-sales service Performance of the sales contract
Complying with tax and accounting obligations Legal obligation
Responding to your enquiries via the contact form Consent / legitimate interest
Sending you marketing communications and launch announcements (if you subscribe) Consent
Analyzing use of the site and improving the experience Consent (analytics cookies)

4. How long we keep your data

We keep your data for as long as necessary for the purpose for which it was collected and, thereafter, for the legally required periods (for example, tax regulations require transaction records to be kept for at least four to six years). Data used for marketing communications is kept until you withdraw your consent.

5. Recipients and data processors

To provide our service, we share data with providers acting as data processors, under contract and with the safeguards required by the GDPR:

  • Shopify Inc. — store platform and order management.
  • Payment provider — secure payment processing.
  • Shipping carrier — delivery of orders.
  • Klaviyo — sending email communications (if you subscribe).
  • Judge.me — management of verified reviews.
  • Google (Analytics) — site usage analytics.
  • Meta Platforms — measurement and advertising (if you accept the relevant cookies).

Some of these providers may process data outside the European Economic Area. In such cases, the appropriate safeguards provided for in the GDPR apply, such as the European Commission's Standard Contractual Clauses.

6. Your rights

You may exercise the following rights at any time: access, rectification, erasure, objection, restriction of processing, data portability and withdrawal of consent. To do so, email us at info@kprojectlab.com stating the right you wish to exercise.

If you believe that the processing of your data does not comply with the regulations, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply appropriate technical and organizational measures to protect your personal data against loss, misuse or unauthorized access, including encryption of communications via the HTTPS protocol.

8. Changes to this policy

We may update this Privacy Policy to reflect changes in legislation or in our services. The current version will always be the one published on this page.

Last updated: June 2026.