Privacy Policy

The Owner informs you about its Privacy Policy regarding the processing and protection of personal data of users and customers that may be collected while browsing, purchasing a product, or contracting a service through the Website: https://whalesprayusa.websitespain.com

In this regard, the Owner guarantees compliance with current regulations on personal data protection, as established in Organic Law 3/2018 of December 5 on Personal Data Protection and the Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons (GDPR).

Use of this Website implies acceptance of this Privacy Policy and the terms included in the Legal Notice.

Data Controller Identity

Controller: WHALESPRAY SL
Tax ID: B65396459
Registered in: Barcelona Commercial Registry, Volume 42104, Page 168, Sheet B-402173
Address: C/ Mas Dorca 4 – AMETLLA PARK, 08480 L’Ametlla del Vallès, Barcelona, Spain
Email: whalespray@whalespray.com
Website: https://whalesprayusa.websitespain.com

Principles Applied to Data Processing

When processing your personal data, the Owner applies the following principles in accordance with the GDPR:

Lawfulness, fairness, and transparency: Personal data is processed only with prior informed consent.
Data minimization: Only data strictly necessary for specific purposes is collected.
Storage limitation: Data is retained only for the time necessary for its intended purpose.
Integrity and confidentiality: Appropriate security measures are applied to protect personal data.

The Owner takes all necessary precautions to prevent unauthorized access or misuse by third parties.

Collection of Personal Data

Browsing this Website does not require you to provide any personal data.

User Rights

You have the right to:

Request access to your stored personal data
Request correction or deletion
Request restriction of processing
Object to processing

The right to data portability does not apply.

These rights must be exercised personally by contacting the Owner directly.

To exercise your rights, you must submit your request along with a copy of your national ID or equivalent document to:

whalespray@whalespray.com

These rights do not apply to data that must be retained for legal, administrative, or security purposes.

You also have the right to file a complaint with the Spanish Data Protection Agency if you believe your data has been processed unlawfully.

Purpose of Personal Data Processing

When you contact the Owner, subscribe to a newsletter, or purchase a product or service, you provide personal information such as: IP address, Name and surname, Physical address, Email address, Phone number, Other relevant information.

By providing this information, you consent to its collection, use, management, and storage as described in:

The personal data and the purpose of processing by the Owner vary depending on the information collection system:

Product or service contracting forms: The Owner requests personal data, which may include: first and last name, identification document (tax identification number, foreign identification number, passport, or residence permit), email address, postal address, phone number, and payment data (payment methods or banking details) for the purpose of maintaining a business relationship with the User, processing orders, providing contracted services, and carrying out billing and collection for the contracted products or services.

There are other purposes for which the Owner processes personal data:

To ensure compliance with the conditions set out on the Legal Notice page and applicable law. This may include the development of tools and algorithms that help the Website ensure the confidentiality of the personal data it collects.
To support and improve the services offered by this Website.
To manage social networks. The Owner has a presence on social media. If you become a follower on the Owner’s social media accounts, the processing of personal data will be governed by this section, as well as by the terms of use, privacy policies, and access regulations of the relevant social network that you have previously accepted.

You can consult the privacy policies of the main social networks at the following links:

The Owner will process your personal data in order to properly manage its presence on social networks, inform you about its activities, products, or services, as well as for any other purpose permitted by social media regulations.

Under no circumstances will the Owner use followers’ profiles on social networks to send individualized advertising.

Personal Data Security

To protect your personal data, the Owner takes all reasonable precautions and follows industry best practices to prevent loss, misuse, unauthorized access, disclosure, alteration, or destruction.

The Website is hosted by: Web Empresa. Data security is guaranteed, as they take all necessary security measures. You may consult their privacy policy for more information.

The Owner informs the User that personal data will not be transferred to third-party organizations, except when such transfer is required by law or when the provision of a service requires a contractual relationship with a data processor. In the latter case, data will only be transferred to the third party when the Owner has the express consent of the User.

However, in some cases, collaborations with other professionals may take place. In such cases, the User’s consent will be required, informing them of the collaborator’s identity and the purpose of the collaboration. This will always be carried out under the strictest security standards.

Content from Other Websites

Pages on this Website may include embedded content (for example, videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if you had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction using this code.

Cookies Policy

For this Website to function properly, it needs to use cookies, which are pieces of information stored in your web browser.

Legal Basis for Data Processing

The legal basis for processing your data is:

The data subject’s consent.
Performance of a contract or the application of pre-contractual measures with the data subject, in order to provide a product or service purchased from the Owner.
Compliance with legal obligations.

Categories of Personal Data

The categories of personal data processed by the Owner are:

Identification data.
No specially protected categories of data are processed.

Retention of Personal Data

Personal data provided to the Owner will be retained until you request its deletion.

Recipients of Personal Data

Google Analytics is a web analytics service provided by Google, Inc., a Delaware company whose main office is located at 1600 Amphitheatre Parkway, Mountain View, California, CA 94043, United States (“Google”).
Google Analytics uses “cookies,” which are text files placed on your computer, to help the Owner analyze how Users use the Website. The information generated by the cookie about Website use (including the IP address) will be directly transmitted to and stored by Google on servers in the United States.More information at: https://analytics.google.com

You can consult how Google manages privacy regarding the use of cookies and other information on Google’s Privacy Policy page: https://policies.google.com/privacy?hl=es

You can also see a list of the types of cookies used by Google and its partners and all information related to the use of advertising cookies at:

Web Browsing

When browsing the Website, non-identifiable data may be collected, which may include IP address, geolocation, records of how services and sites are used, browsing habits, and other data that cannot be used to identify you.

The Website uses the following third-party analytics services:

Google Analytics.

The Owner uses the information obtained to generate statistical data, analyze trends, manage the site, study browsing patterns, and collect demographic information.

The Owner is not responsible for the processing of personal data carried out by websites that may be accessed through the links contained on the Website.

Accuracy and Truthfulness of Personal Data

You agree that the data provided to the Owner is accurate, complete, correct, and up to date, and that you will keep it properly updated.

As a User of the Website, you are solely responsible for the accuracy and correctness of the data submitted, releasing the Owner from any liability in this regard.

Acceptance and Consent

As a User of the Website, you declare that you have been informed of the conditions regarding personal data protection and accept and consent to its processing by the Owner in the manner and for the purposes indicated in this Privacy Policy.

To contact the Owner, subscribe to a newsletter, or post comments on this Website, you must accept this Privacy Policy.

Changes to the Privacy Policy

The Owner reserves the right to modify this Privacy Policy to adapt it to legislative or jurisprudential developments, as well as industry practices.

These policies will remain in force until they are modified by others that are duly published.

US State Privacy Rights Addendum

Effective Date: 23/02/2026

This section applies to residents of the United States and supplements our general Privacy Policy. It explains your rights under state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other state privacy laws (such as those in Virginia, Colorado, Connecticut, Utah, and others).

Notice of Collection and Use

In the preceding 12 months, we have collected the following categories of personal information.

Category	Examples	Collected?
Identifiers	Name, email address, IP address, unique device identifiers.	No
Commercial Info	Records of products purchased, obtained, or considered.	No
Internet Activity	Browsing history, search history, interaction with our website (cookies).	Yes (Cookies only)
Geolocation Data	Physical location or movements (e.g., via IP address).	No
Sensitive Data	Social Security number, login credentials, precise geolocation, racial/ethnic origin.	No

We collect this information for the business purposes described in the “How We Use Your Data” section of our main Privacy Policy.

Your Privacy Rights

Depending on your state of residence, you may have the following rights:

Right to Know/Access:You have the right to request a copy of the specific pieces of personal information we have collected about you, including the sources of that information and the business purposes for collecting it.
Right to Delete:You have the right to request that we delete personal information we have collected from you, subject to certain legal exceptions.
Right to Correct:You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sale or Sharing:You have the right to direct us not to “sell” or “share” your personal information for cross-context behavioral advertising.
Right to Limit Use of Sensitive Information:If we collect sensitive personal information (like precise geolocation or financial info) for purposes other than providing our services, you can limit our use of that data.
Right to Non-Discrimination:We will not discriminate against you (e.g., by denying goods or charging different prices) for exercising your privacy rights.

“Do Not Sell or Share My Personal Information”

We do not sell your personal information for monetary value. However, we may share information with third-party advertising partners (like Google or Facebook) to show you relevant ads. Under US laws (like the CCPA), this sharing may be defined as a “sale” or “sharing” for cross-context behavioral advertising.

To exercise your Right to Opt-Out:

Click here:https://www.whalesprayusa.com/contact/
Global Privacy Control (GPC):We honor the Global Privacy Control signal. If your browser sends a GPC signal, we will automatically treat it as a request to opt-out of the sale/sharing of your information.

How to Exercise Your Rights

To submit a request to Know, Delete, or Correct your data, please contact us at:

Email:whalespray@whalespray.com
Web Form:https://www.whalesprayusa.com/contact/

We will verify your identity before processing your request to protect your security. If we cannot verify your identity, we may deny the request.

Appeals (Virginia, Colorado, Connecticut)

If we decline to take action on your request, we will inform you of the reason. Residents of certain states (like VA, CO, CT) have the right to appeal our decision. To submit an appeal, please email us at whalespray@whalespray.com with the subject line “Privacy Appeal.”

Critical “Gotchas” to Remember

The “Look Back”:The CCPA requires you to tell users what you collected in the last 12 months. If you just started complying today, you still need to disclose what you were doing yesterday.
Verification:You cannot just delete data because someone emails you. You must verify they are who they say they are (e.g., by sending a confirmation email to the address on file).

The “Limit Sensitive Info” Link: If you collect Sensitive Data (like sexual orientation, precise geolocation, or social security numbers), California requires a second link in your footer labeled: “Limit the Use of My Sensitive Personal Information.” If you don’t collect this, you don’t need the link.