Last updated: 30 October 2026
Montessori Edited (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit montessoriedited.com, read our blog or buy from our shop, in accordance with the EU General Data Protection Regulation (GDPR), the Spanish Organic Law 3/2018 on Data Protection (LOPDGDD) and, where applicable, the UK GDPR.
1. Who we are (data controller)
Montessori Edited is a brand operated by:
- Company: Openscape SL
- NIF: B75362160
- Registered address: Avenida Valladolid, 2, 46020 Valencia, Spain
- Email: montessori.edited@gmail.com
- Website: https://montessoriedited.com
We have not appointed a Data Protection Officer, as we are not required to. For any privacy question, write to the email above.
2. Personal data we collect
- Identity and contact data: name, billing and delivery address, email address, telephone number.
- Order data: products purchased, order history, payment status. We never see or store your full card details (see section 5).
- Account data: username and password (stored in encrypted, hashed form), if you create a customer account.
- Checkout data from unfinished orders: if you start checkout but don’t complete it, the details you have already typed (such as your email address, name and cart contents).
- Reviews and comments: your name, email address, the content you post, and your IP address when you leave a product review or a comment on our blog.
- Technical data: IP address, browser type, device information, pages visited, and cookies or similar technologies (see section 8).
- Communications: the content of emails you send us.
We do not knowingly collect data from children. Our content is intended for parents and adults.
3. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Processing, delivering and invoicing your order; managing returns | Performance of a contract (6.1.b) |
| Managing your customer account | Performance of a contract (6.1.b) |
| Keeping invoices and accounting records | Legal obligation (6.1.c) |
| Answering your emails and customer support | Contract (6.1.b) or legitimate interest (6.1.f) |
| If you start checkout but don’t finish, we may email you once, personally, to ask whether you had a problem and need help | Legitimate interest (6.1.f) in helping you complete a purchase you started. We never add you to a mailing list, and you can ask us not to contact you again |
| Publishing your review or blog comment | Consent (6.1.a), given when you submit it |
| Website security, fraud and spam prevention | Legitimate interest (6.1.f) |
| Analytics and advertising measurement (Google Analytics, Google Ads) | Consent (6.1.a), via our cookie banner |
Providing your name, address and email is necessary to complete a purchase; without them we cannot fulfil your order. Everything else is optional.
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.
4. Who we share your data with
We only share your data with providers who need it to provide their service to us, under data processing agreements:
- Payment processing: WooPayments (Automattic Inc., with Stripe Inc. as payment processor and Sift Science Inc. for fraud prevention). They receive the payment details you enter at checkout and process them under their own security standards (PCI-DSS). If you choose to pay with PayPal, your payment is handled by PayPal (Europe) S.à r.l. et Cie, S.C.A. under its own privacy policy.
- Shipping: postal and courier services, which receive your name, delivery address and, where needed, phone number and email.
- Hosting and website services: Bluehost (Newfold Digital Inc.), which hosts our website and its database; WooCommerce services (Automattic Inc.); Wordfence (Defiant Inc.) for website security, which processes IP addresses to block attacks.
- Email: our email is provided by Google (Gmail), so messages you send us and our replies are stored there.
- Analytics and advertising: Google Ireland Limited (Google Analytics 4 and Google Ads), only if you give consent (see section 8).
- Backups: backups of our website, which include customer and order data, are stored in Google Drive (Google Ireland Limited).
- Professional advisers and authorities: our accountants (gestoría), and tax or other authorities where required by law.
We do not sell your personal data.
5. Payments
Card payments are processed by WooPayments/Stripe. Card numbers are entered into their secure fields and never reach or stay on our server. We only receive confirmation of the payment and limited details such as the card brand and last four digits. If you pay with PayPal, you enter your details with PayPal and we only receive confirmation of the payment.
6. International data transfers
Some of the providers above (e.g. Google, Bluehost/Newfold Digital, Automattic, Stripe, Sift, PayPal, Defiant) are based in, or may process data in, the United States or other countries outside the European Economic Area. Where this happens, transfers are protected by the EU–US Data Privacy Framework (for certified companies) and/or the Standard Contractual Clauses approved by the European Commission.
7. How long we keep your data
- Orders and invoices: for as long as required by Spanish tax and commercial law (generally 6 years under the Commercial Code, and at least 4 years under tax law).
- Customer account: until you ask us to delete it. Order records are kept for the legal period above.
- Unfinished checkout data: no longer than 3 months, or until you ask us to delete it.
- Reviews and blog comments: for as long as they are published, or until you ask us to remove them.
- Emails with us: for as long as needed to deal with your request, and up to 2 years after.
- Analytics data: Google Analytics keeps detailed data for a limited period (at most 14 months), after which only aggregated reports remain.
- Cookies: see our Cookie Policy for each cookie’s duration.
8. Cookies, analytics and advertising
Essential cookies are needed for the website to work (shopping cart, checkout, security, language choice, remembering your cookie preference). They are always active.
Analytics (Google Analytics 4): with your consent, we use Google Analytics, provided by Google Ireland Limited, to understand how visitors use our site, for example which pages are visited and how people find us.
Advertising (Google Ads): with your consent, we use Google Ads conversion tracking and remarketing to measure whether our ads lead to purchases and to show our ads to people who have visited our site.
Google Consent Mode: until you make a choice in our cookie banner, Google’s tags run in a restricted mode that does not set analytics or advertising cookies. They only send basic signals without cookies (for example that a page was viewed). If you accept, they set cookies as described above. If you reject, they stay in restricted mode.
Changing your choice: you can change or withdraw your consent at any time by clicking the cookie icon at the bottom of any page. Withdrawing consent does not affect processing that took place before.
More about how Google uses data: policies.google.com/technologies/partner-sites
For the full list of cookies, see our Cookie Policy.
Some pages include YouTube videos in privacy-enhanced mode. YouTube (Google) sets no cookies until you press play; once you play a video, YouTube may set cookies under its own privacy policy.
9. Your rights
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to processing (including processing based on legitimate interest);
- receive your data in a portable format;
- withdraw your consent at any time.
To exercise any of these rights, email montessori.edited@gmail.com. We will reply within one month. We may ask you to confirm your identity.
If you believe we have not handled your data correctly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or to the data protection authority in your country of residence.
10. Security
We use HTTPS encryption across the whole site, keep our software up to date, use a security firewall and limit access to personal data to people who need it.
11. Changes to this policy
We may update this policy to reflect legal or operational changes. The date at the top shows the latest version.