Privacy Policy

1. Data Controller

In compliance with the EU General Data Protection Regulation (GDPR), SHINY WALL S.L., Tax ID B70801311, C/ del Bages 54, Local, 08223 Terrassa, Barcelona, Spain, is the Data Controller for personal data collected through www.shinywall.com.

For data protection enquiries: info@shinywall.com.

2. Purposes of Processing

• Contract management: processing orders, payments, invoicing and service delivery.
• Handling enquiries and information requests received through the website forms, including sending the technical material you request (plans, manuals and other downloads).
• Marketing communications, with your prior consent.
• Service improvement through website usage analysis.
• Compliance with legal obligations.

3. Categories of Data

• Identity data: name, surname, address, phone, email, tax ID.
• App profile: username, date of birth, city, country and avatar configuration. This data is not visible to other users.
• Climbing activity: routes attempted or completed, grade, wall angle and timestamp. On public walls, this activity is visible to other users linked only to your username (see section 8).
• Payment data: processed by Stripe; Shiny Wall does not store card details.
• Website usage data: interaction with the website and products.
• Technical data: IP address, browser type, operating system.

4. Legal Basis

• Contract performance: data required to provide the requested service.
• Consent: for marketing communications and non-essential cookies.
• Legitimate interest: service improvement and fraud prevention.
• Legal obligation: invoice retention and regulatory reporting.

5. Data Sharing

Shiny Wall does not sell or trade your data. We only share it with the providers needed to deliver the service, which act as processors on our instructions and with the safeguards required by the GDPR:

• Stripe — payment processing and invoicing.
• Firebase / Google Cloud — storage of App data.
• Vercel — website hosting; processes IP addresses and access logs.
• Resend — delivery of our emails (confirmations, downloadable material and marketing messages). It records deliveries, opens and clicks so we can measure whether our communications work.
• Google and Meta — analytics and advertising, only if you accept the corresponding cookies in the consent panel. In that case we tell them that you have requested information, together with your email address and phone number transformed using a SHA-256 cryptographic hash, never in the clear, so we can tell which ad produced your enquiry. Details in our cookie policy.
• Carriers — delivery of orders.
• Public authorities — where legally required.

International transfers. Some of these providers are established in the United States or process data outside the European Economic Area. Those transfers rely on the Standard Contractual Clauses approved by the European Commission and, where applicable, on the provider's certification under the EU–US Data Privacy Framework.

6. Your Rights

You may exercise the following rights by writing to info@shinywall.com:

• Access, rectification and erasure of your data.
• Restriction and portability of processing.
• Objection to processing based on legitimate interest.
• Withdrawal of consent at any time.

You also have the right to lodge a complaint with your local data protection authority.

7. Retention Periods

• Billing data: 5 years (tax obligation).
• Contact data without a contract: until consent is withdrawn or 2 years from last contact.
• Order data: 5 years or the applicable warranty period.
• App profile and activity data: profile data is kept for as long as the account is active and is deleted when the account is deleted; published activity (boulders, sends, grades and ratings) remains visible in anonymised form, no longer linked to the user.

8. Public Activity in the App

The Shiny Wall App allows users to log climbing activity on each wall (routes, grade, angle, date). On public walls, this activity is visible to any App user linked exclusively to the climber's username. No other personal data (real name, email, date of birth, etc.) is accessible to other users.

• Public walls: username + activity visible to all App users.
• Private walls: activity visible only to users with authorised access to that wall.

You can delete your account from the app itself or by writing to info@shinywall.com. Doing so deletes your profile and your personal data; any activity you have published remains visible in anonymised form, no longer linked to you (see Terms of Use).

9. Security

We implement appropriate technical and organisational measures: encryption in transit (HTTPS/TLS), restricted access controls and continuous monitoring.

10. Changes to This Policy

We reserve the right to update this policy. Material changes will be notified by email to customers and subscribers.

Last updated: August 2026