Customer Protection

At Vualá, the safety of our customers is our absolute priority.

This document explains the technical, organizational, and legal measures we apply to ensure a secure purchase, the protection of your data, and the proper functioning of our online store.

1. Secure browsing (SSL/HTTPS)

All navigation within vualastore.es It is done under HTTPS protocol with SSL encryption , the same standard used by banks and large platforms.

This encryption guarantees that:

• Information travels securely.

· It cannot be read by third parties.

· Passwords and personal data cannot be intercepted.

You can check it by the 🔒 (lock) icon next to the browser bar.

2. Protection of payment data

At Vualá we do NOT store or directly process your card data.

All transactions are handled through certified external gateways:

• Shopify Payments (Stripe)

• Bizum (if active)

• Apple Pay / Google Pay

These platforms comply with:

• PCI DSS Level 1 (highest international certification for payments)

• Full end-to-end encryption

· Automatic anti-fraud systems

• Card tokenization (data is never stored by the merchant)

This means that neither Vualá nor any employee has access to your bank details .

3. Protection of personal data (GDPR)

Vualá fully complies with the General Data Protection Regulation (GDPR) and Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights .

Personal data is used exclusively for:

· process orders,

• manage shipments and returns,

• Customer service,

• voluntary communications from the client.

We never sell, transfer, or share data with third parties without your express consent.

4. Server and hosting security

Our store is hosted on Shopify , a global leader in e-commerce, which provides:

• 100% secure infrastructure

• 24/7/365 monitoring

• Protection against DDoS attacks

• Advanced firewalls

• Redundant backups

The Shopify environment automatically protects your information against failures, unauthorized access, or intrusion attempts.

5. Authentication and internal access

Internal access to the control panel is limited to authorized personnel only.

We implemented measures such as:

• Strong passwords

• Two-step authentication (2FA)

· Limited sessions

· Restricted access

• Periodic internal audits

6. Fraud Prevention

Vualá uses automated fraud detection tools provided by Shopify and our payment gateways.

These tools analyze:

• IP and geolocation

• Unusual coincidences

• Duplicate orders

• Suspicious cards

• User behavior

If an order is marked as "high risk", it may be canceled to protect both the customer and the store.

7. Email Security

The emails we send come exclusively from:

info@vualastore.es and vualainfo@gmail.com

We recommend:

· Never share bank details by email.

• Do not open suspicious links.

· Always verify that the sender is the official one.

8. Security on client devices

We recommend browsing from:

• Updated browsers,

• Secure WiFi networks,

• Devices protected with antivirus software.

This guarantees maximum security during the purchase.

9. Commitment to transparency

If at any time we detect any security incident or breach, we are committed to notifying the affected customer, taking immediate action, and informing the appropriate authority, if necessary.

10. Contact

For any questions regarding security or data protection, please contact us at info@vualastore.es