Privacy Policy

This policy explains which personal data we process when you use the TK Boards website, why, how long we keep it and how you can exercise your rights.

Data controller

The data controller is Matos Tarifa España, S.L. (TK Boards brand), tax ID (NIF) B-09728130, Lugar Conchas de Soto, nº 33, Cortijo Los Robles, 11380 Tarifa (Cádiz), Spain. For any question about your data or to exercise your rights, write to us at info@tk-boards.com.

Data we process

• Customer account: email address, password (stored only in encrypted form), first name, last name, phone, language and delivery addresses.
• Orders: products ordered, amounts, delivery address, email, payment and shipping status, invoices. Payment is handled by Stripe: we never have access to your card details.
• TK ID: the link between your board and your account, and any ownership transfers (the new owner’s email address).
• Lost or stolen report: the message and contact details you choose to provide are shown publicly on the board’s TK ID page, so that someone who finds it can reach you. They are removed as soon as you mark the board as recovered.
• Contacting an owner: if you found a board reported lost or stolen, the message and contact details you provide are sent by email to its owner.
• Contact form: name, email address, message and the product concerned.
• Security: IP address, used temporarily to limit abusive attempts, and a bot check on forms.
• Audience measurement: pages viewed, referring page, country, type of device, browser and operating system, in aggregate, without cookies and without identifying visitors (Vercel Web Analytics).

Why, and on what legal basis

• Managing your account, your orders, their delivery and TK ID: performance of a contract.
• Issuing invoices and keeping accounts: legal obligation.
• Securing the website and preventing abuse and fraud: legitimate interest.
• Measuring website traffic to improve it: legitimate interest.
• Answering your messages: legitimate interest or pre-contractual steps (questions about a product).
• Showing your contact details publicly in a lost or stolen report: your consent, which you can withdraw at any time by removing the report.

We do not sell your data or use it for advertising. The emails we send you are about your account and your orders.

How long we keep it

• Account and TK ID: as long as your account exists. You can delete it at any time from your customer area.
• Orders and invoices: for the period required by accounting and tax rules (6 years in Spain), including after your account is deleted.
• Contact messages: as long as needed to handle your request.
• Security data (IP address): from a few minutes to a few hours.

Recipients and service providers

Your data is processed by our team and by service providers acting on our behalf:

• Vercel — website hosting and audience measurement
• Neon — database
• Stripe — online payment
• Resend — email delivery
• Sanity — website content and images
• Cloudflare — bot protection on forms

If you play a video, it is served by YouTube (Google). Some of these providers are based outside the European Union, notably in the United States. These transfers are covered by the safeguards provided for by the GDPR (EU–US Data Privacy Framework or the European Commission’s standard contractual clauses).

Your rights

You can at any time ask to access, rectify or erase your data, restrict its processing, object to processing based on our legitimate interest, request data portability and withdraw your consent. Write to us at info@tk-boards.com: we reply within one month.

If you believe your rights are not respected, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es) or with the data protection authority of your country.

Cookies

To see which cookies the website uses, read our cookie policy.

Changes

We may update this policy. The date of the last update is shown at the top of this page.