Privacy Policy

1. Data controller

• Controller: Bookmark Iberia S.L.
• CIF: B54317334
• Registered office: Calle Holanda 14, Polígono Industrial Las Maromas, 03160 Almoradí (Alicante), España
• Shop: With Love, Avenida de las Naciones 1A, Local 17, 03170 Ciudad Quesada, Rojales (Alicante)
• Email: 1@shopwithlove.es
• Data protection contact: privacy@bemiyo.com
• Telephone: +34 865 481 601

With Love is the retail business of Bookmark Iberia S.L., a family company that operates under the Bemiyo corporate identity. Corporate information for the group is at bemiyo.eu.

2. Personal data we process

Bookmark Iberia S.L. collects and processes personal data only to provide its services. This website has no registration, purchase or subscription forms: data is collected in the shop or when a customer contacts us.

2.1 Postbox service

When a customer signs up for the postbox service, the following data is collected in the shop:

• Full name and surname of each household member
• Assigned postbox number
• Contact telephone number
• Email address
• Copy of an identity document (DNI/NIE/passport)
• Signature on the contract, which may be captured digitally

This data is collected through a contract signed by the customer that includes the data-protection information required by the GDPR. To run the service we record the mail and parcels received for each household (addressee surname, item type, date received and, where applicable, courier and tracking number) and each collection, with the amounts charged.

Items received for people who are not customers of the service are logged (surname, description of the item and contact details where available), and a photograph of the label may be kept to identify the addressee and arrange delivery or return.

2.2 British passport service

When a customer uses our British passport assistance service, the following data is collected in the shop:

• Full name and surname
• Date of birth
• Place of birth
• Postal address
• Contact telephone number
• Email address
• Current passport number (where applicable)
• Passport issue and expiry dates
• Application reference (PEX number)
• Name of the legal guardian (for minors)
• Scanned copies of supporting documents (passport, birth certificate, guardian documents) and the signed consent document

This data is processed solely to prepare, check and submit the passport application to HM Passport Office, which receives the application and its supporting documents. Document copies are stored in private, encrypted storage with access restricted to authorised staff.

2.3 Online look-ups

The postbox check and passport status functions on this website let customers look up information by entering their postbox number or PEX reference and surname. These look-ups are answered on the spot and do not store personal data or keep a record of the searches made.

2.4 Email notifications

Customers who opt in to email notifications may receive messages about: welcome to the postbox service, storage warnings, creation of passport applications and changes in application status. Emails are sent from hello@shopwithlove.es, and we keep a record of each one sent (recipient, subject and date) to avoid duplicates. The email address is collected with the customer’s consent and notifications can be switched off at any time by asking in the shop.

2.5 Enquiries and communications

If you email us, call us or contact us on WhatsApp, we process the contact details and the information you choose to give us in order to answer your enquiry. WhatsApp is a third-party service governed by its own privacy policy.

3. Purposes

The personal data collected is used for the following purposes:

• Managing and providing the postbox service
• Communicating with the customer about the status of their mail and parcels
• Preparing, checking and submitting British passport applications to HM Passport Office
• Tracking passport application status and communicating updates to the customer
• Sending email notifications (with the customer’s prior consent)
• Answering enquiries and communications
• Invoicing and collecting payment for services
• Complying with legal obligations

4. Legal basis

The processing of personal data is based on:

• Performance of a contract (art. 6.1.b GDPR): processing is necessary to provide the postbox or passport assistance service requested.
• Legal obligation (art. 6.1.c GDPR): processing is necessary to comply with applicable legal, tax and accounting obligations.
• Consent (art. 6.1.a GDPR): for email notifications, the customer gives explicit consent and may withdraw it at any time.
• Legitimate interest (art. 6.1.f GDPR): to answer enquiries, manage correspondence and deliver or return items received for people who are not customers.

5. Retention

Personal data is kept for as long as the contractual relationship with the customer lasts and, once it ends, for the periods required by law to deal with any liabilities arising from the processing (a minimum of 5 years under Spanish tax and commercial rules).

Passport application data and document copies are kept until the application is complete and for a reasonable period afterwards for queries or claims. Once the process is complete, document copies are securely deleted.

Records of notifications sent and communications received are kept for as long as needed to deal with the matter concerned.

6. Recipients

Personal data is not passed to third parties except where the law requires it or where it is needed to provide the service requested (for example, HM Passport Office for passport applications). To provide the service, Bookmark Iberia S.L. uses the following technology providers, which act as processors:

• Supabase Inc. — database and file storage hosting (servers in the European Union).
• Vercel Inc. — website hosting and aggregated usage statistics (global delivery network with processing in the EU).
• Gandi SAS — email service for sending notifications (servers in the European Union).

These providers offer appropriate data-protection guarantees under the GDPR.

7. Your rights

You may exercise the following rights over your personal data:

• Access: know what personal data is being processed.
• Rectification: ask for inaccurate or incomplete data to be corrected.
• Erasure: ask for data to be deleted when it is no longer needed.
• Objection: object to processing in certain circumstances.
• Restriction: ask for processing to be restricted in the cases provided by law.
• Portability: receive your data in a structured, commonly used format.

To exercise any of these rights, write to privacy@bemiyo.com or 1@shopwithlove.es, or come into the shop with a valid identity document.

You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) if you consider that the processing of your data does not comply with the law: www.aepd.es

8. Cookies and web analytics

This website uses only strictly necessary technical cookies: one that remembers your chosen language and, only for shop staff who log in to the management panel, the session cookies needed for that login.

We also use Vercel Analytics and Vercel Speed Insights to collect aggregated, anonymous data about how the site is used, such as the number of visits, the most viewed pages and loading performance. These tools do not use cookies, do not track individual users and do not collect identifiable personal data. The data is processed in aggregated, anonymous form by Vercel Inc. under its Privacy Policy.

No advertising or third-party tracking cookies are used.

9. Third-party content

This website embeds a Google Maps map on the "Find us" page through an iframe. That embedded content is served directly by Google LLC and is governed by the Google Privacy Policy. The iframe does not set cookies in your browser.

10. Security

Bookmark Iberia S.L. has adopted the technical and organisational measures needed to keep personal data secure and prevent its alteration, loss, unauthorised processing or access, in line with the state of the art and the nature of the data stored.

All communication between your browser and the server is encrypted (HTTPS/TLS). Access to stored data is restricted to authorised staff through secure authentication.

11. Changes

Bookmark Iberia S.L. reserves the right to change this Privacy Policy at any time. Any change will be published on this page with the date of the last update. The legal notice (in Spanish) completes this information.