Privacy policy

This privacy policy explains what personal data we process when you visit lacasasibarita.co.uk, why we process it, how long we keep it and what rights you have. We process personal data in line with the GDPR and, for visitors in the United Kingdom, the UK GDPR.

1. Data controller

Controller: LA CASA SIBARITA S.L.
Tax ID (NIF): ESB06895049
Address: Avenida Reyes Visigodos 134, 28991 Torrejón de la Calzada (Madrid), Spain
Email: contacto@lacasasibarita.es
Trading name: LA CASA SIBARITA
Website: lacasasibarita.co.uk

2. At a glance

  • We only collect the data you send us through the contact form or by email, plus the technical data any web server records.
  • We use no analytics, advertising or tracking tools. The only cookies we set ourselves are the ones that store your cookie choice.
  • YouTube videos only load if you accept marketing cookies (in the cookie banner or by clicking a video’s placeholder).
  • Amazon only receives data after you click a link and arrive on its website.
  • We do not sell anything on this website: there is no shopping basket, no customer accounts and no payments.

3. Visiting the website and server logs

When you visit the website, our server automatically records technical data that your browser sends: IP address, date and time of the request, the page requested (URL), the referring page (referrer) and your browser.

Purpose: to deliver the website, keep it secure and stable, and detect and prevent abuse and attacks.
Legal basis: our legitimate interest in running a secure and working website.
Retention: the logs are rotated daily and deleted after seven rotations (about eight days), unless a specific incident requires us to keep them longer.

4. Cookies and consent management (Complianz)

We use the consent tool Complianz. It stores your cookie choice in our own cmplz_ cookies, which contain nothing but your settings and are kept for 365 days. We do not use statistics, advertising or tracking cookies.

Legal basis: our legitimate interest in remembering and being able to demonstrate your choice. You can find all the details in our cookie policy.

5. YouTube videos (only with your consent)

Some product pages and our author pages include YouTube videos (in Spanish). To stop any data reaching YouTube when you simply open a page, our consent tool, Complianz, blocks these videos at first: you only see a placeholder and nothing is loaded from YouTube. The videos load only after you accept marketing cookies, either in the cookie banner (‘Accept’, or the ‘Marketing’ category under ‘View preferences’) or by clicking the placeholder of a video. On our website, the ‘Marketing’ category covers YouTube only. Once you have accepted, all videos on the website are loaded from YouTube’s servers until you withdraw your consent.

From that moment, YouTube receives technical data such as your IP address and the page you are on, and it may use cookies or your browser’s local storage. Google may also process data in the United States. For more information, see Google’s privacy policy.

Purpose: to show the videos of our tests and on our author pages.
Legal basis: your consent (Article 6(1)(a) UK GDPR and, for storing or accessing information on your device, regulation 6 of PECR). Complianz stores your choice for 365 days. You can withdraw your consent at any time using the ‘Manage consent’ button shown at the bottom of every page; after that, no videos are loaded. You can delete any cookies YouTube has already set in your browser.

6. Contact form and email

If you write to us through the form on our contact page, we process your name, your email address, the subject and your message, plus any other data you choose to include. Messages are stored in the website’s database, and a copy is emailed to us at contacto@lacasasibarita.es, so that we can reply. The same applies if you email us directly.

Purpose: to answer your enquiry.
Legal basis: your consent and, where applicable, our legitimate interest in answering the messages we receive.
Retention: 12 months from the last communication, unless we need to keep the data for longer to establish, exercise or defend legal claims.

7. Amazon affiliate links

Our buy buttons and product links take you to amazon.co.uk and contain our affiliate tag, so Amazon can see that you came from our website. We do not load any Amazon scripts, pixels or cookies on our website. Amazon only processes data once you click a link and arrive on its website, where its own privacy and cookie policies apply.

Legal basis: our legitimate interest in funding our content through affiliate commissions. Find out more in our affiliate disclosure.

8. Links to social networks and other websites

Our author pages contain simple links to LinkedIn and Instagram. These services are not embedded on our website, so no data is sent to them while you browse. If you click such a link, the privacy policy of the website you visit applies.

9. Fonts

The fonts we use (Lato and Poppins) are hosted on our own server. Your browser does not connect to Google Fonts.

9a. AI assistant

You are chatting with artificial intelligence, not a person. (This notice reflects Article 50 of the EU Artificial Intelligence Act, Regulation (EU) 2024/1689.) Our AI assistant automatically answers questions about the products featured on lacasasibarita.co.uk. Nobody reads or replies in this chat. Replies are generated by an AI system and may contain mistakes; the information on the product page and Amazon’s price at the time of purchase always prevail. This notice appears in the header of the chat window and in the first message.

What data we process:

  • the text of your messages (up to 500 characters each) and the assistant’s replies;
  • a random session identifier created when you open the chat, together with the date and time;
  • your IP address only as a hash (pseudonymised, calculated with a secret key). We do not store the IP address itself. The hash is used solely to limit misuse (maximum number of messages per hour and per day).

We do not ask for any personal data: no name, email address, phone number or account. Please don’t enter personal data in the chat. If you do type an email address or phone number, it is automatically replaced with a placeholder before the message is stored or passed on.

Purposes and lawful basis: answering the questions about our products that you choose to ask in the chat, as steps taken at your request before entering into a contract (Article 6(1)(b) UK GDPR); and preventing misuse and protecting the service, on the basis of our legitimate interests (Article 6(1)(f) UK GDPR).

Recipients and international transfers: OpenAI Ireland Ltd. generates the replies as our processor under its Data Processing Addendum. It receives your message, the last messages of the current conversation (up to 12) and our public product catalogue; it does not receive your IP address or its hash. We use its interface with the “store: false” setting, so OpenAI does not keep the conversation for the service. Transfers of data outside the European Economic Area rely on the European Commission’s standard contractual clauses or on an adequacy decision (Article 45 GDPR), together with the UK Addendum. The service and its database run on our own server (section 3).

How long we keep it: messages, the session identifier and the IP hash are kept for 30 days in our database and then deleted automatically. Technical error logs may contain a message for up to 14 days.

Storage in your browser: the assistant does not set any cookies. Only if you have accepted the “Preferences” category in the cookie banner is the conversation kept in your browser’s sessionStorage (entry “lcs_asis_v1”), so that it carries over between pages; it is deleted when you close the tab and when you withdraw your consent. Without that consent, the conversation is lost when the page reloads. The assistant only loads once the page has fully loaded, and only from our own domain.

No automated decision-making: the assistant only provides information. No automated decision with legal or similarly significant effects is made (Article 22 UK GDPR).

Your rights: the rights in section 12 and the right to complain in section 13 apply. As we do not collect names or contact details, please give us the date and time of the conversation through our contact form.

9b. Legal obligations and your rights

We may also process your data where necessary to comply with legal obligations, deal with requests to exercise your rights, respond to requests from public authorities or handle claims.

Legal basis: compliance with a legal obligation and, where applicable, our legitimate interest in defending our rights and interests.
Retention: for as long as needed to meet the relevant legal obligation or to deal with any liability arising from the processing.

10. What we do not use

We do not use Google Analytics, Google Tag Manager, Google Ads, the Meta Pixel or any other analytics, advertising or remarketing tools. There is no newsletter, no live chat with staff and no WhatsApp service (our AI assistant, described in section 9a, is the only chat). Comments are closed and Gravatar profile images are disabled. We do not track you or build profiles.

11. Recipients and international transfers

The website is hosted by Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus, which acts as our processor. The server is located in Paris, France (EU). Hostinger also provides our email service (the contacto@lacasasibarita.es mailbox), likewise as our processor. Cloudflare only provides our DNS and does not process visitor data.

OpenAI Ireland Ltd. generates the replies of our AI assistant as our processor under its Data Processing Addendum, only if you use it (section 9a).

Apart from that, we only share personal data with public authorities, courts or law enforcement where we are legally required to do so. YouTube (Google) and Amazon only receive data in the situations described above (YouTube only after your consent, Amazon only after you click one of our links), and process it under their own policies; Google may do so in the United States.

12. Your rights

You have the right to know whether we process personal data about you and, in general terms, the following rights:

  • access to your data;
  • rectification of inaccurate data;
  • erasure;
  • restriction of processing;
  • objection to processing based on our legitimate interest;
  • data portability, where applicable;
  • withdrawal of your consent at any time, without affecting the lawfulness of processing carried out before you withdrew it.

To exercise your rights, write to contacto@lacasasibarita.es or to our postal address: Avenida Reyes Visigodos 134, 28991 Torrejón de la Calzada (Madrid), Spain. Please tell us clearly who you are and which right you want to exercise. We may ask for reasonable additional information to verify your identity.

13. Complaints to a supervisory authority

As we are established in Spain, our supervisory authority is the Agencia Española de Protección de Datos (AEPD), www.aepd.es. If you are in the United Kingdom, you can also contact the Information Commissioner’s Office (ICO), ico.org.uk.

14. Data security

LA CASA SIBARITA S.L. applies appropriate technical and organisational measures to protect personal data against loss, destruction, alteration, unauthorised access or unlawful processing, taking into account the nature of the data and the risks involved. However, no system is completely invulnerable, so absolute security cannot be guaranteed.

15. Children

This website is not aimed at children. If we find out that we have received personal data from a child without a valid legal basis, we will delete it.

16. Accuracy of your data

Please make sure that the personal data you send us is true, accurate, complete and up to date, and let us know if it changes. You are responsible for any loss or damage caused by giving us false, inaccurate or out-of-date data.

17. Changes to this privacy policy

We may update this privacy policy to reflect changes in the law, guidance from supervisory authorities or changes in how the website works. We will publish any significant change visibly on this page.

18. Last updated

Last updated: 7 November 2026