Política de privacidad

Last updated: 22.07.26

This Privacy Policy explains how Kalon's Lab ("we," "us," "our") collects, uses, and protects your personal information when you visit kalonslab.com or purchase our services.

Kalon's Lab is operated by Marc Prades Rovira, a sole trader based in Puerto del Rosario, Fuerteventura, Canary Islands, Spain, and acts as the data controller for the personal information described below.

If you have any questions about this policy or how your data is handled, contact us at thumbnify.co@gmail.com.

1. What Information We Collect

Information you provide directly:

  • Contact details (name, email address) when you place an order or contact us.
  • Payment information, processed entirely by our payment provider (Shopify Payments and/or Stripe). We do not store your full card details ourselves.
  • The photos you upload for your analysis, along with any details you share about yourself relevant to your report (for example, age range or gender, if requested).

Information collected automatically:

  • Basic technical data such as browser type, device type, and pages visited, collected through standard website and e-commerce cookies (for example, to keep items in your cart or understand site usage). See Section 6 below for more on cookies.

We do not knowingly collect any information beyond what is necessary to provide our service.

2. How We Use Your Information

We use your information to:

  • Generate and deliver your personalized analysis report.
  • Process your payment and manage your order.
  • Communicate with you about your order, including delivery of your report and responding to support requests.
  • Improve our service and troubleshoot issues.
  • Comply with legal obligations (for example, tax and accounting records).

We do not use your photos or personal information for advertising purposes, and we do not sell your personal information to third parties.

3. How Your Photos Are Processed

To generate your report, the photos you upload are:

  • Processed with the assistance of a third-party artificial intelligence service, which analyzes the images to produce the measurements and recommendations included in your report.
  • For the "Analysis + Plan" tier, additionally reviewed by a member of our team before your final report is sent, to check quality and accuracy.

Your photos are used solely for the purpose of generating your report. They are never used to train third-party AI models, are never shared with advertisers, and are never used for facial recognition or identity-verification purposes.

Retention: Your photos are automatically deleted from our systems within 30 days of your order being completed. Your final written report may be retained longer so that we can resend it to you on request, unless you ask us to delete it sooner (see Section 7).

4. Who We Share Your Information With

We share limited information with the following categories of service providers, solely to the extent necessary to operate our business:

  • Shopify (and its payment processing partners), which hosts our store and processes orders and payments.
  • Email/communication providers, to send you your report and respond to support requests.
  • A third-party AI service provider, to assist in analyzing your photos, as described in Section 3.

We require these providers to handle your information securely and only for the purposes we specify. We do not share your information with anyone else, except where required by law (for example, in response to a valid legal request from a public authority).

5. International Data Transfers

Because some of our service providers (including our AI processing partner) may be based outside of the European Economic Area (EEA) or the United Kingdom — for example, in the United States — your information may be transferred to and processed in those countries. Where this occurs, we rely on appropriate safeguards recognized under applicable data protection law, such as Standard Contractual Clauses, to protect your information.

6. Cookies

Our store uses cookies and similar technologies, primarily provided by Shopify, to operate core functions such as your shopping cart and checkout, and to understand basic site usage. You can manage your cookie preferences through the cookie banner shown on our site, and through your browser settings. Disabling certain cookies may affect the functionality of the store.

7. Your Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

  • Access — request a copy of the personal information we hold about you.
  • Correction — ask us to correct inaccurate information.
  • Deletion — ask us to delete your personal information, including photos already scheduled for automatic deletion.
  • Restriction or objection — ask us to limit or stop certain processing of your information.
  • Portability — request your information in a portable format, where applicable.
  • Withdraw consent — where we rely on your consent (for example, to process your photos), you may withdraw it at any time; this will not affect the lawfulness of processing before withdrawal, but may mean we can no longer provide your report.

To exercise any of these rights, contact us at thumbnify.co@gmail.com. We will respond within the timeframe required by applicable law.

If you are in the European Union, you also have the right to lodge a complaint with your local data protection authority, or with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es), as we are based in Spain.

If you are in the United Kingdom, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO, www.ico.org.uk).

If you are in Australia, you have rights under the Australian Privacy Act 1988 and may contact the Office of the Australian Information Commissioner (OAIC) with any concerns.

8. Legal Basis for Processing (EU/UK Users)

Where applicable, we process your personal information on the following legal bases:

  • Performance of a contract — to process your order and deliver your report.
  • Consent — for the processing of your photos, given their personal nature; you may withdraw this consent at any time as described in Section 7.
  • Legal obligation — for example, to keep records required for tax purposes.

9. Children's Privacy

Our service is intended only for individuals aged 18 and over. We do not knowingly collect personal information, including photos, from anyone under 18. If we become aware that we have inadvertently collected such information, we will delete it promptly.

10. Data Security

We take reasonable technical and organizational measures to protect your information against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

12. Contact Us

For any questions, requests, or concerns about this Privacy Policy or your personal information, contact:

Marc Prades Rovira (Kalon's Lab) Calle León y Castillo 185, esquina con Pintor Ribera, 1, 35600 Puerto del Rosario, Fuerteventura, Canary Islands, Spain thumbnify.co@gmail.com

This document was prepared as a starting template for an early-stage business and has not been reviewed by a lawyer. It is not a substitute for legal advice, and you should have it reviewed by a qualified professional as your business grows — particularly regarding biometric data laws in certain US states.