Privacy notice

Information about browsing Flaregale, buying digital files and contacting support. Covers flaregale.com, www.flaregale.com, ebooks.flaregale.com, games.flaregale.com and the home, weddings, photo and downloads subdomains.

Who is responsible

Aday González Rodríguez, trading as Flaregale, is the controller for the order administration, delivery and support information we handle as supplier. Contact address: Calle Gomera 44, 35110 Santa Lucía de Tirajana, Calle Gomera 44, 35110 Santa Lucía de Tirajana, Las Palmas, España, España. For privacy questions or rights requests, contact support@flaregale.com. Full supplier details are in the legal notice. Payment and other service providers also process information for their own purposes as explained below.

Information, purposes and lawful bases

• Orders, access and refunds: purchase contact details, product, order reference, payment status, amount, currency and transaction information are used to administer the purchase, supply access and handle related requests. The basis is steps you request before purchase and performance of our contract. Information required to complete payment and deliver access must be provided for the transaction to proceed; any optional fields are separate.
• Support and complaints: contact details, messages and necessary order information are used to answer your request and resolve problems. Contract-related support uses the contract basis; general enquiries use our legitimate interest in responding to the person who contacted us. Please do not send passwords, full payment-card details, identity documents or private workbook contents for routine support.
• Required records: information needed for applicable accounting, tax, consumer or other legal obligations is processed on the basis of those obligations. Relevant information may also be retained to establish, exercise or defend claims, based on our legitimate interest in resolving disputes.
• Site delivery and security: service requests can include IP address, browser/device information, requested page, time, referrer, session identifiers and security-related events. The purpose is to serve the site and downloads and investigate errors, misuse or fraud. Essential technical delivery supports the requested service; proportionate security processing uses our legitimate interest in protecting users and the service. Optional analytics or advertising is a separate purpose, not made necessary by buying a product.

Order information comes from you and from the storefront/payment service reporting your order and its status. Technical information comes from your browser and the service handling the request. We do not operate a separate automated system to decide your product or refund rights. Payment providers may apply automated authentication or fraud checks affecting a payment; their notices explain their own processing. Contact us or the provider if a payment decision needs review.

Providers and recipients

Our service chain includes Impultienda/Impul Pay for storefronts and order flow, Whop for payments and its configured transaction-tax collection/remittance service, Vercel for our hub, ebook product pages, collection catalogues and downloadable files, and IONOS and Google Gmail for support email. Information is shared as needed for those functions. Support mail addressed to support@flaregale.com is forwarded through IONOS to the support Gmail account; replies may show the Gmail address.

Infrastructure providers process service data under their applicable terms and instructions. Payment providers can also be independent controllers for payment authentication, fraud prevention and legal compliance. We may disclose necessary records to professional advisers, authorities or another recipient where legally required or needed to resolve a claim. This is not permission for unrelated use of purchase information.

Provider information: Impultienda privacy, Whop privacy, Vercel privacy, IONOS privacy, Google privacy and Microsoft privacy. These notices explain the respective provider's processing; they do not replace Flaregale's responsibilities.

How long information is kept

Retention depends on the purpose and record type, rather than one fixed period for all information:

• Order and access records: as needed to fulfil the order, maintain the promised minimum download access and handle related refunds, complaints or disputes. After operational need ends, retain only the records still required for applicable accounting/tax duties or a claim within its applicable limitation period.
• Support correspondence: as needed to resolve the enquiry and necessary follow-up. If it becomes evidence of an order, complaint or dispute, the relevant record follows that purpose's retention criterion; unrelated private attachments are not needed for routine support.
• Technical and security records: for the relevant service operation or incident investigation, with the provider's applicable settings and legal retention requirements taken into account. Provider-controlled records follow the provider's own notice.
• Browser storage: session values depend on your browser's session handling. Storefront attribution storage uses a seven-day reuse timestamp; expiry of that timestamp does not itself erase the stored entry. You can remove site data in your browser. Data saved by the local Home planner remains in that browser until changed or removed, subject to browser behaviour.

When information is no longer needed for the relevant purpose and no applicable obligation or claim requires it, it should be deleted, anonymised or restricted as required by law. A request for deletion will be assessed against those criteria. The minimum 90-day download-access commitment is not a timetable for deleting personal data.

Browser storage, analytics and advertising

The storefront uses browser storage for session and attribution information. Campaign parameters and click identifiers may be present in incoming links and order context. The hub/download surfaces and the provider's checkout are separate surfaces; their technologies can differ. Payment interfaces and external resources may process request information under their provider notices.

The provider's checkout includes Microsoft Clarity for interaction analytics. This service can process technical and interaction information associated with checkout visits. Microsoft's privacy information explains its processing and regional cookie-consent rules. For questions about checkout analytics or to exercise applicable privacy rights, contact support using the address above.

Buying our files does not constitute consent to optional analytics or advertising. Where processing relies on your consent, you may refuse or withdraw it without affecting your purchase or earlier lawful processing. Browser storage controls let you remove local values; they do not themselves communicate a consent choice to every service. For a privacy request or concern about checkout analytics, contact support@flaregale.com; Microsoft's privacy statement also explains its processing and choices.

Marketing choices on ebooks.flaregale.com: our Vercel ebook pages ask before loading Meta Pixel. If you accept marketing measurement, only the pixel associated with the product you are viewing is initialized. The page sends PageView and ViewContent browser events for advertising measurement; it does not send its own Purchase event or Conversions API requests. Meta can receive the requested page and product, browser/device and network information and browser or click identifiers when available. Campaign parameters in a link are passed to the official checkout to preserve its context; we do not create a separate attribution database.

Your choice (accepted or rejected), its version and timestamp are stored locally on ebooks.flaregale.com when browser storage is available. We use that choice for up to 180 days. An expired entry is ignored and removed on your next visit when storage can be accessed; browser storage does not erase the entry while this site is closed. If storage is unavailable, the choice applies to the current page and you may be asked again later. Use Marketing preferences in the footer to reject or withdraw. Withdrawal blocks further marketing events from our page and sends Meta's browser consent-revoke instruction if its SDK is already loaded. It cannot undo information already sent or promise to delete provider-held records. Removing site data also removes the stored choice. The WWW and Games catalogues do not initialize these product pixels.

The native checkout is separate: the choice above controls our Vercel ebook pages. It is not represented as a control of Impultienda's browser or server integrations. The following paragraphs describe the existing native storefront/checkout separately.

Meta advertising measurement: Flaregale's Weddings, Home and Photo storefronts use Impultienda's native Meta Pixel and Conversions API integration. The provider describes automatic PageView, AddToCart and InitiateCheckout events and a Purchase event after payment approval. Events can include the product, order/event reference, purchase amount and currency, page/referral and campaign context, IP address, browser information and Meta browser/click identifiers such as fbp/fbc when available. Contact information supplied during checkout, such as email or phone when available, can be sent in hashed form for matching. Hashing does not make this information anonymous. PageView and InitiateCheckout requests have been observed in a fresh browser session before any marketing choice at the tested location; this does not establish behaviour in every location or prove delivery of a server Purchase event.

This information is shared with Meta for advertising matching, measurement and optimisation. These advertising purposes are separate from the processing needed to take payment, deliver files and handle the purchase contract. Meta explains its own processing in its Privacy Policy and the Meta Business Tools Terms. Those provider documents do not replace Flaregale's responsibilities.

A control that makes both the native checkout browser and server advertising flows wait for, and respect, the marketing choice on our Vercel ebook pages has not been verified. This notice does not claim that such consent has been obtained or that such a control is operating. Buying a product, accepting purchase terms or reading this notice is not, by itself, advertising consent. The rights and contact routes below remain available; this text does not promise that a request or browser setting automatically stops the native integration.

International processing

The providers used for payments, hosting, support email and checkout analytics may process information in the United States and other countries; this service is not represented as EU-only hosting. Whop's notice describes transfer safeguards, including European Commission standard contractual clauses where relevant. Vercel's data-processing addendum describes its international processing and transfer mechanisms. The mechanism applicable to a particular provider depends on the service, agreement and destination; these documents are not a claim that every provider uses the same mechanism.

You can ask support@flaregale.com for information about recipients, the applicable transfer mechanism and how to obtain relevant safeguards, subject to necessary protection of confidential information.

Your choices and rights

Depending on applicable law, you may request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. Contact support@flaregale.com. We may ask only for proportionate information necessary to identify the request; do not send passwords or full card details.

Where the GDPR applies, we respond to rights requests within one month, with any extension permitted by law explained within that first month. Some records must be retained for a legal obligation or claim; if we cannot grant a request, we explain the applicable reason and available complaint route. Rights and deadlines in other jurisdictions apply as required by their law.

You may complain to the Spanish Data Protection Agency or another competent authority. The UK Information Commissioner's Office is available for UK matters where applicable. US privacy rights depend on the state and applicable legal thresholds; this notice does not assume identical rules in every state.

Your downloaded files

Information you enter in downloaded PDFs or spreadsheets stays in the files and environment you choose unless you share it. The supplied local Home planner saves its plan in your browser when local storage is available; the inspected release does not send plan contents to us. If you choose your own cloud service or send content to support, that creates a separate sharing flow.

Changes

Material changes in purposes or collection technologies must be reflected in this notice and communicated where required. Publishing a revised notice does not retroactively create consent.

Text version: 21 October 2026.