Privacy Policy

Effective date: July 25th, 2025

Last updated: July 25th, 2025

Welcome to Monostate, the online fashion platform operated by SOA STATE OF ALL HOLDING S.L,  registered in Spain, with VAT number ESB55483085, and registered address at C. JORGE JUAN 30, 28001, MADRID, MADRID, ESPAÑA. This Privacy & Cookie Policy describes how we collect, use and protect your personal data when you visit our website or use our services.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection laws.

What personal data we collect

We may collect and process the following types of personal data:

  • Identity Data. Name, email address, shipping/billing address, phone number
  • Account Data. Username, password (encrypted), order history
  • Payment Data. Processed securely via third parties (we don’t store card info)
  • Usage Data. IP address, browser type, visit duration, clicks, pages visited
  • Marketing Data. Newsletter opt-ins, communication preferences.

Why we process your data

We use your data to:

  • Process and deliver your orders
  • Provide customer service and support
  • Manage your account
  • Send order confirmations and service updates
  • Improve the website and user experience
  • Prevent fraud or abuse
  • Send promotional content (with your consent).

Legal basis for processing

We process your personal data based on the following legal grounds:

  • Performance of a contract. For processing orders and services
  • Consent. For email marketing and non-essential cookies
  • Legitimate interests. To improve our services and protect our platform
  • Legal obligation. For tax, accounting, or fraud prevention compliance.

Sharing your data

We only share your data with trusted third parties, including:

  • Payment processors 
  • Delivery partners 
  • Analytics & marketing platforms
  • CRM and communication tools. 

All third parties are contractually obligated to comply with data protection regulations.

Data retention

We retain your personal data only for as long as necessary.

Type of data-retention period

  • Orders & invoicing: 6–10 years (legal obligation)
  • Account data. Until deletion request
  • Marketing preferences. Until withdrawal of consent.