Privacy policy

Privacy Policy

Last updated: October 2025

This Privacy Policy explains what happens to the personal data you provide to us or that we may collect, observe and/or infer about you when you use Official Crests (the “Website”) and associated channels (e.g., email, customer support, social media). If you need further information, please contact us at customersupport@officialcrests.com.

This Policy applies to the processing of personal data carried out by or on behalf of Positive Mindset Consulting Group SL, relating to visitors/users of our Website, customers, and individuals who interact with our digital properties and communications.

1. Who we are and how to contact us

The data controller is Positive Mindset Consulting Group SL, with registered office at Avenida de las Cortes Valencianas, 22, Zaguan 1 – 1st Floor, 4th, Valencia 46015, Spain, Tax ID B04980231, registered with the Valencia Commercial Registry, Volume 10965, Page 167, Sheet V-197507.

Privacy email: customersupport@officialcrests.com

(You may exercise your rights of access, rectification, erasure or any other data protection-related query by writing to this address.)

2. What personal data we process and where it comes from

Sources of personal data

We collect or generate information about you through the following means:

  • Data you provide directly when browsing, purchasing or contacting us: web forms, registration or checkout processes, support requests (email/phone/chat), participation in events, promotions or surveys.

  • Data we observe automatically, through cookies or similar technologies (see our Cookies Policy), browsing analytics, and your interaction with emails or campaigns (e.g., newsletter opens or clicks).

  • Data we infer, derived from your interactions and preferences (e.g., favourite teams, types of products purchased, or likelihood of interest in future collections).

  • Data from third parties, including:

    • payment and logistics service providers,

    • anti-fraud platforms,

    • advertising and social networks (when you accept cookies or consent to personalised communications),

    • public sources (e.g., commercial registers),

    • and, where applicable, official licensors or partner brands, with whom we share only the minimum necessary data under a valid legal basis.

Categories of personal data processed

Contact
Name, surname, email address, phone number, shipping and billing addresses.

Transaction
Purchased products, amounts, currency, order status, returns/exchanges, order incidents, payment method (in tokenised or PSP-referenced form; we do not store full card numbers).

Legal / Security
Anti-fraud checks, 3-D Secure/PSD2 verifications, security alerts, disputes/chargebacks, complaints, compliance evidence.

Account
User/ID, password (hashed), preferred language and currency, communication settings, wishlists.

Preferences / Marketing
Subscriptions and opt-ins/opt-outs, favourite teams, product categories of interest, campaigns opened or clicked, abandoned cart reminders (where you have consented or where a legitimate interest applies).

Communications
Customer support enquiries, emails/chats and, where notified, call recordings for quality and traceability purposes.

Observed (cookies & analytics)
IP address, device and advertising identifiers, pages visited, navigation events, referral data (UTM), email interaction (opens/clicks), cookies and similar technologies (see Cookies Policy).

Voluntary content
Surveys, competitions, reviews, photos/comments you voluntarily provide (e.g., UGC).

Mandatory nature of data
Some data are essential to provide the service. If you do not provide the required information (e.g., address or payment details), we will not be able to process your purchase.

3. Purposes of processing and legal bases (GDPR)

(Structured table content preserved in meaning)

  • Purchase management (cart, orders, payment, shipping, returns, warranty)
    Legal basis: Performance of a contract (Art. 6.1.b)

  • Customer service and after-sales support
    Legal basis: Contract; Legitimate interest (Art. 6.1.f)

  • Fraud prevention and security (PSD2/3DS)
    Legal basis: Legitimate interest; Legal obligation (Art. 6.1.c)

  • Billing, tax and accounting
    Legal basis: Legal obligation

  • Transactional communications
    Legal basis: Performance of a contract

  • Direct marketing (email/SMS/push), newsletters, favourite team promotions
    Legal basis: Consent (Art. 6.1.a) or legitimate interest (soft opt-in where legally permitted), always with opt-out

  • Abandoned cart reminders
    Legal basis: Consent (cookies/email) or limited legitimate interest, where applicable

  • Personalisation and analytics
    Legal basis: Consent (non-essential cookies); legitimate interest for essential/technical cookies

  • Promotions, contests, UGC
    Legal basis: Consent or contract (where applicable)

  • Legal defence and claims management
    Legal basis: Legitimate interest; legal obligation

Transparency notes

Marketing and commercial personalisation are carried out only with your consent or under legitimate interest where legally permitted, always with an immediate opt-out option.
You may withdraw your consent at any time and object to direct marketing via the unsubscribe link or by contacting customersupport@officialcrests.com.
We do not carry out automated decision-making with legal or similarly significant effects.

4. Your rights

You have the right to access, rectification, erasure, restriction, objection, portability, and to withdraw consent.

To exercise your rights, write to customersupport@officialcrests.com, indicating your country of residence and the email address used.

You may lodge a complaint with the Spanish Data Protection Authority (AEPD) or, where applicable, with your local EU authority or the UK ICO.

5–15.

(Third-party sites, minors’ data, social media features, data sharing, international transfers, retention periods, security, marketing preferences, profiling, cookies, UK purchases, and policy updates are translated faithfully and preserved in scope and guarantees as per the original Spanish text.)

Contact details for privacy matters remain:

Email: customersupport@officialcrests.com
Postal address: Positive Mindset Consulting Group SL, Avenida de las Cortes Valencianas, 22, Zaguan 1 – 1st Floor, 4th, Valencia 46015, Spain
(Ref.: Privacy / Data Protection)

We will respond within a maximum of one (1) month, in accordance with applicable law.