Last Updated: April 2026
Gestión Lupealex SL ("we", "us", or "our") is committed to protecting the privacy and security of the personal information we receive from our business partners, clients, and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage in business with us. Please read this policy carefully to understand our practices regarding your personal data.
1. Information We Collect
In the course of our B2B steel and iron trading operations, we may collect the following categories of information:
- Business Contact Information: Company name, contact person name, job title, email address, phone number, and business address.
- Transaction Data: Purchase orders, invoices, delivery details, payment records, and correspondence related to your orders.
- Account Information: Login credentials if you register for an account on our website.
- Technical Data: IP address, browser type and version, operating system, referral source, pages visited, time and date of visit, and other browsing behaviour on our website.
- Communication Data: Records of correspondence when you contact us via email, phone, or our website contact forms, including requests for quotes and product enquiries.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Processing and fulfilling orders for steel and iron products, including delivery coordination and invoicing.
- Managing our business relationship with you, including responding to enquiries and providing customer support.
- Sending relevant product updates, price lists, stock availability notices, and promotional communications (only with your consent where required by law).
- Improving our website, products, and services based on usage patterns and feedback.
- Complying with legal and regulatory obligations, including tax reporting, trade compliance, and record-keeping requirements.
- Protecting our legitimate business interests, including fraud prevention and contract enforcement.
3. Data Sharing & Third Parties
We do not sell your personal information to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis:
- Logistics & Shipping Partners: To coordinate delivery of steel and iron materials to your specified locations.
- Payment Processors & Financial Institutions: To process transactions and manage invoicing.
- IT & Hosting Providers: Third-party service providers who host our website and maintain our IT infrastructure, bound by strict data processing agreements.
- Legal & Regulatory Authorities: Where required by applicable law, regulation, legal proceedings, or governmental request.
- Professional Advisors: Including accountants, auditors, and legal counsel, as necessary for the operation of our business.
4. Cookies
Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us:
- Remember your preferences and settings for future visits.
- Analyse website traffic and usage patterns to improve site performance.
- Provide relevant content and functionality.
You may control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of our website. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until deleted or expired).
5. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), secure server environments, access controls, and regular security assessments. While we strive to protect your personal data, no method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security but are committed to maintaining industry-standard protections and promptly addressing any security incidents.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
- Right to Restriction: Request that we limit the processing of your data under certain circumstances.
- Right to Data Portability: Request your data in a structured, commonly used, machine-readable format.
- Right to Object: Object to the processing of your data for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within the timeframe required by applicable law.
7. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Transaction records are typically retained for a minimum period as required by applicable tax and commercial law. When personal data is no longer required, it is securely deleted or anonymised.
8. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information. Continued use of our website or services following the posting of changes constitutes acceptance of those changes.
9. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at:
