Privacy policy


At eShopBrainiac we are committed to ensuring that your personal data is protected and is not used for purposes other than those indicated in this Privacy Policy. For this reason, in this section we inform users and interested parties of everything concerning the processing of their personal data, thus complying with the data protection regulations applicable in our country: General Data Protection Regulation (EU) 2016/679, of 27 April on the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter, GDPR) and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (hereinafter, LOPDGDDD).

This Privacy Policy is applicable to the processing of data that ESHOPBRAINIAC, S.L.(eShopBrainiac) carries out through the website: (hereinafter, the Website) and/or any others that may be indicated.

We recommend that you read it carefully before using the Website or any of the services to which this Privacy Policy applies, as well as before providing your data through them. You can ask us any questions you may have by sending an email to:


In this Policy you will find all the information relating to the processing of your personal data and the rights you can exercise to maintain control over them. In this regard, you will find information on:

0. Terms and definitions
1. Who is the data controller for the processing of your data.
2. What requirements you must meet in order to provide us with your personal data.
3. What data processing we carry out through the website and what their main characteristics are, explaining to you:

  • What data we collect and how we collect it.
  • For what purposes we collect the data we request from you.
  • What is the legitimacy for its processing.
  • How long we keep them.

4. To which recipients your data is communicated.
5. Existence of international transfers of your data.
6. What your rights are and how you can exercise them.
7. How we protect your personal information.
8. Changes to this policy.


  • Personal Data is any information about an identified or identifiable natural person (the Data Subject).
  • Usage Data is data collected automatically, about how you use or interact with our Website or with respect to our services. It may be collected through cookies or other tracking tools (e.g. time spent on each section of the Website, etc.).
  • Cookies: as defined in the Cookies Policy.
  • Data Controller or Controllermeans the natural or legal person, public authority, service or other body which, alone or jointly with others, determines the purposes and means of the processing. For the purposes of this Privacy Policy, eShopBrainiac is the Controller of your Personal Data.
  • Processormeans any natural or legal person who processes Personal Data on behalf of and for the account of the Controller.
  • Service(s)are the functionalities or tools contracted to eShopBrainiac by you.


Your personal data will be processed by the company ESHOPBRAINIAC, S.L. (**eShopBrainiac**), the Controller, with NIF B-44800704 and whose contact details are as follows:

  • Registered Office: Calle Agricultura 24 (local), 08320 Masnou, Barcelona (Spain).
  • Contact email:


2.1. Minimum age. In order to provide us with your personal data, according to the regulations, you must be at least 14 years of age and/or, where applicable, have sufficient legal capacity to use the Website or the App. In this regard, please note that our services are aimed at adults, therefore, you must be 18 years old to use our App (more information in section 3.2.).

2.2. Truthfulness. When you provide us with your data to use our services, you guarantee that the data and information provided is real, truthful, updated and also belongs to you and not to third parties.

Furthermore, you must notify us of any modification that may occur in the data provided, and you are responsible in any case for the truthfulness and accuracy of the data provided at all times.

2.3. Age and Veracity Control. eShopBrainiac reserves the right to verify your age and identifying information at any time, if necessary, including by requiring you to provide official proof of age or equivalent procedure and, in the event of fraud detection that proves or is suspected that you are under the age indicated, to delete, temporarily disable and/or cancel your account.


Below, we explain how we treat your personal information and provide you, in detail, with all relevant information regarding your privacy:

3.1. When you contact us through our channels (contact form, email or WhatsApp):

What are the data collection routes? ● Contact form
● WhatsApp
● Sending e-mails to or other eShopBrainiac e-mail addresses.
What data do we collect? Identifying and contact information. We collect your identifying information (name and surname), e-mail address, telephone number, as well as any other information that you voluntarily include in the communications you send us.

We may request additional information from you if necessary to comply with your request or requirement.
What are the purposes of the processing of your personal data? To answer your requests. The main purpose of the processing of this data will be to answer your requests, resolve your queries and/or provide you with the required information, as well as, where appropriate, to follow up on your requests.

Improving customer service. All the information derived from the doubts, queries, and advice offered to interested parties, as well as the way in which requests are resolved, allows us to know how we provide our own customer service, enabling us to improve its quality.
Likewise, all the information collected, once the retention period indicated below has expired, is anonymised and used for the purposes of analysing the most frequently asked questions via the chat and automating the most frequently asked questions, creating FAQS or being kept for statistical purposes in order to develop commercial strategies.

Sending of publications and commercial communications related to our products/services: When you tick the corresponding optional box, we may send you, by electronic means, our newsletter and other commercial communications related to our products, activities, services and other information of interest.
What is the basis of legitimacy that allows us to process your data? Is the provision of this data obligatory? Consent. The data provided will be processed on the basis of your consent when: (i) you voluntarily contact us through the means made available to you to request information or make a request; (ii) you tick the acceptance box to receive our newsletter or commercial communications related to our products and services.
Legitimate interest. Statistical and customer service quality improvement purposes are based on our legitimate interests, which have been weighted in relation to the interests, rights and freedoms of the Data Subject. For more details on the balancing of interests carried out by eShopBrainiac in relation to this (these) purpose(s), please write to us at

The information that you are required to provide will be indicated by an asterisk or similar. Without this information it will not be possible to deal with your enquiries or requests.
How long do we keep your information? 1) In the case of your applications, we will process all your personal information for the duration of the processing of your application and, if necessary, to follow up on your application.
2) Regarding the receipt of commercial communications: we will store your information for as long as you have subscribed to receive them.
Once you unsubscribe or your requests are resolved, eShopBrainiac will keep this information, blocked, for the periods provided for by law in order to meet any liabilities and to demonstrate compliance with our obligations.
From now on, eShopBrainiac will only process the information in an anonymised form for the statistical purposes indicated, so it will not be possible to link the statistical information to the specific users to whom it refers.
Who do we give your personal information to? We do not make any additional transfers to carry out this processing other than those indicated, in general terms, in point 4. To whom do we transfer your personal information? In this regard, some of the channels through which you can contact us are managed by service providers, who act as Processors. You will find more information about how these service providers operate in section 4 above.#

3.2. When you install our application and enter into a contractual relationship with us (provision of services)

Our application called eShopBrainiac (the App), allows you, as a Shopify merchant, to optimise your shop through the best information, allowing you to stay connected to make the best decisions and increase conversions by giving you information about what happens in your shop or how your audience interacts when they visit your website. In addition, you can perform focused and meaningful analytics to make decisions.

In this section we explain how we process your personal data when you install the App.

What are the data collection routes? Installation of the App through Shopify's App Store (
Shopify will automatically share your personal data with us, as the owner of the online shop.
What data do we collect? Data we access when you install our app: we can automatically access certain personal data linked to your shop such as the owner's identifying information (first and last name) and email address, where this has been included in the settings. We will also receive first name, last name and email address of users you have within Shopify.
Invoicing when installing our application: we do not have any economic or financial data as the payment is made through Shopify's tools, Shopify acting as our payment service provider and sending you the invoice on our behalf.
Usage Data. When you install the App and access the services, information is collected about your use of the App, including: the actions you take or the choices you make within the App. Within the Usage Data, you will find the following data: URL you visit, cookies, IP and user ID.

Data included in the App: The operation of the App may involve the processing of personal data by eShopBrainiac, as data processor. Such access and processing of data by eShopBrainiac is regulated in the data processing agreement included in our General Terms and Conditions.
What are the purposes of the processing of your personal data? Allow you to use the application and manage your account: we process your data to identify you as a user of the application and give you access to the different functionalities and services.
In your account you will have access to your contracting history.

Execute and maintain the contractual relationship between the Parties. maintain and execute the contractual relationship between the Parties, which includes: provision of the Services, administrative, fiscal, legal, accounting and commercial management. Attention of queries and complaints via web or electronic means. Management of payments through the Shopify tool. Sending notifications about changes in the terms of service or security alerts.
This will also include diagnosing, troubleshooting and correcting problems with the service.
To send you electronic commercial communications. We may send you commercial communications from us or related to our services.

To evaluate and develop new features, content and improve the Service. We may do this by collecting Usage Data, which allows us to test users' use of the Services in order to make improvements to the Service, content or functionality.
To prevent, detect and take action against activities that are unlawful or contrary to the App's terms of use. We may process the data to monitor and prevent any form of abuse of our services, such as fraudulent activities, denial of service attacks, sending spam, unauthorised access to our users' accounts, as well as any other practice that is contrary to the General Terms and Conditions of Use or jeopardises the security of the information or the integrity of the App itself.

Sending pop-up notifications to inform you about the chosen price plan, we can inform you if you have reached the limit of the plan, but still have extra amount left, recommend you to change to a higher plan or if you have used the limit and the extra amount, we will show you the different options you have available.
What is the basis of legitimacy that allows us to process your data? Is the provision of this data obligatory? Execution of the contract. The processing of your data for the above purposes is, except with regard to the processing indicated below, necessary for the performance of the contract that is entered into between the parties when you download the App and purchase the payment plan, in accordance with the terms of the contract. General Terms and Conditions of Contract.

All data requested and processed for the above purposes are necessary to fulfil the stated purposes. If they are not provided, it will not be possible to execute the contract that binds us or to carry out the administrative tasks linked to it.

Legitimate interest: Processing carried out by us for the purposes of our legitimate interest will be processed on the basis of our legitimate interest:

(i) service improvement so that we can ensure the provision of useful and satisfactory services to our customers;
(ii) the prevention of illegal activities and other activities related to the security of the App to ensure the security of the network and information to prevent events that could compromise the availability, authenticity, integrity and confidentiality of personal data or the platform itself.
(iii) sending information about the App and our services on the basis of the contractual relationship in accordance with the regulations applicable to commercial communications (LSSI).

For further details on the weighting of interests carried out by eShopBrainiac in relation to this (these) purpose(s), please write to us at
How long do we keep your information? All personal information will be processed by us for the duration of the contractual relationship between the parties. We will process your data for as long as you are registered on our Website and our contractual relationship remains in force. Once this period is over and when you decide to unsubscribe as a registered user, we will keep your information blocked for the periods provided for in the legislation to meet possible liabilities and to demonstrate compliance with our obligations and, subsequently, it will be deleted.

In relation to Usage Data, Usage Data is processed for as long as the account is active, unless the information is processed for a shorter period of time, as per our Cookie Policy, where applicable.
Who do we give your personal information to? We do not make any additional transfers to carry out this processing other than those indicated, in general terms, in point 4. To whom do we transfer your personal information? In this regard, we may use service providers for the provision of certain ancillary services (e.g. management software), who act as Processors. You will find more information on how these service providers operate in point 4 above.

3.3. Website navigation (cookies)

We use cookies or other tracking and tracing tools on this Website to collect information about how users use the Website.

For more information on how we treat you through these tracking tools, please visit our Cookie Policy.

3.4. eShopBrainiac profiles on social networks.

eShopBrainiac has a profile on the main social networks, such as Facebook, Instagram, LinkedIn and YouTube.

When you become a follower of any of our pages on social networks, the processing of data will be governed by the terms of use, privacy policies and access regulations belonging to the corresponding social network and previously accepted by the user.

eShopBrainiac, in this sense, will process your data for the purposes of correctly managing its presence on the social network, informing you of activities, products or services, as well as for any other purpose that the regulations of the social networks allow.

Please note that we have no influence over the information that the social network collects or how it processes it, so we recommend that you keep yourself informed of the purpose and extent of the collection of information through these social networks.


In general, eShopBrainiac will not communicate your data to third parties. However, in addition to the transfers that we specifically indicate in the section in which we explain the characteristics of the different operations (point 3), we inform you of the communications that we can make, in general, and that affect all the previous treatments and their legitimate basis.

  • i. Providers of essential services to carry out the service we offer you (for example, computer hosting companies or platforms for sending commercial communications). Notwithstanding the above, these entities have signed the corresponding confidentiality agreements and will only process your data in accordance with our instructions, and may not use them for their own purposes or for purposes other than the service they provide us with.
  • ii. Public bodies. We may disclose to the competent public authorities the data and any other information in our possession or accessible through our systems when there is a legal obligation to do so, as well as when required, for example, when the purpose is to prevent or prosecute abuse of the services or fraudulent activities through our Website or web page. In such cases, the personal data you provide to us will be retained and made available to administrative or judicial authorities.
  • iii. In the event of a corporate transaction: In the event of a merger, acquisition, sale of all or part of its assets or any other type of corporate transaction involving a third party, we may share, disclose or transfer user data to the successor entity (including during the pre-transaction phase).
  • iv. To third parties after aggregation or anonymisation: we may disclose or use aggregated or anonymised data (i.e. data which cannot be linked to an identified or identifiable natural person) for any purpose.
  • v. To third parties with your consent or other legitimate basis: In the event that we wish to share data with third parties outside the scope of this Privacy Policy, we will always seek your consent or inform you of your consent and legitimate basis.

We also inform you that this Privacy Policy only relates to the collection, processing and use of information (relating to personal data) by us through your interaction with our Website. Access to third party websites that you may access through links from the Website have their own privacy policies over which we have no control. Therefore, before you provide them with any personal information, we recommend that you inform yourself about their privacy policies.


Some of our service providers are located in countries outside the European Economic Area (EEA).

The location of these companies outside the EEA implies the existence of an international transfer of your personal data, which could lead to a lower level of protection than that provided for in European legislation. However, eShopBrainiac has implemented measures to ensure that such transfers do not result in a lower level of protection of your personal data.

In this regard, service providers outside the EEA have a valid mechanism to be able to carry out international transfers: (i) either they have signed the corresponding standard contractual clauses approved by the European Commission (SCC), an agreement signed between both entities by which the non-EU company guarantees that it applies European data protection standards or, (ii) when they are US companies, alternatively to the STCs, they may be certified by the new EU-US Data Privacy Framework (DPF) compliance decision, or (iii) when they are US companies, they may be certified by the new EU-US Data Privacy Framework (DPF) compliance decision. _Data Privacy Framework _(DPF).

Therefore, the use of these providers does not result in a lower level of protection of your personal data than the use of providers located in the European Union.

You can consult the content of the TCHs and the Decision on compliance with the EU-US Data Privacy Framework. You can find the content of the TCHs and the EU-US Data Privacy Framework Adequacy Decision at the following links:

Here are the international transfers that we make from eShopBrainiac:

Name Country Transfer mechanism
Amazon Web Services, Inc. United States Data Privacy Framework
Shopify International Ltd. Canada / United States Standard Contractual Clauses (SCC)
Freshworks, Inc. United States Data Privacy Framework
Zapier Inc. United States Data Privacy Framework
The Rocket Science Group LLC (Mailchimp) United States Data Privacy Framework


If you are a European resident, you can exercise the rights guaranteed to you by law in relation to the processing of your personal data by contacting us by email at

Any rights request we receive will be dealt with as soon as possible and in any event within the maximum period of time prescribed by law from the time we receive it. In some cases, we may need to ask you for a copy of your identity card or other identification document if we need to verify your identity.

Your rights as a stakeholder are as follows:

i. Right to withdraw consent

You may withdraw your consent in relation to all processing based on your consent at any time. However, withdrawal of consent will not affect the lawfulness of the processing based on the consent prior to its withdrawal.

ii. Right of access

You have the right to know what data is being processed, if any, and, if so, to obtain a copy of it, as well as to obtain information relating to:

  • the origin and recipients of the data;
  • the purposes for which they are processed;
  • whether there is an automated decision-making process, including profiling;
  • the data retention period; and
  • the rights provided for in the regulations.

iii. Right of rectification

You have the right to obtain the rectification of your personal data or to complete them when they are incomplete.

iv. Right of erasure

You have the right to request the deletion of your personal data if they are no longer necessary for the purpose for which they were collected or, as the case may be, if we are no longer authorised to process them.

v. Right to data portability

You have the right to request data portability in the case of processing of your data that is based on your consent or the performance of a contract, provided that the processing has been carried out by automated means. In case of exercise of this right, you will receive your personal data in a structured format, commonly used and readable by any electronic device. However, you may also request, where possible, that your data be transferred directly to another company.

vi. Right to restrict the processing of your personal data

You have the right to limit the processing of your data in the following cases:

  • a) When you have requested the rectification of your personal data during the period in which we verify the accuracy of your personal data.
  • b) When you believe that we are not authorised to process your data. In this case, you can ask us to limit its use instead of requesting its deletion.
  • c) When you consider that it is no longer necessary for us to continue processing your data and you want us to keep it for the purpose of exercising or defending claims.
  • d) Where there is processing based on our legitimate interest and you have exercised your right to object to such processing, you may ask us to restrict the use of your data during the verification of the prevalence of those interests over your interests.

vii. Right to object

You have the right to object at any time to the processing of your personal data on the basis of our legitimate interest, including profiling.

Unsubscribe from commercial communications: Remember that at any time you can object to receiving this type of communication by sending an email to You may also opt out of this service by following the instructions indicated at the bottom of the body of each of the electronic communications we send you.

viii. Right to lodge a complaint with the Supervisory Authority

Remember that, at any time, and in the event that you consider that we have infringed your right to the protection of your data, you may contact the corresponding Control Authority, in the case of Spain, the Spanish Data Protection Agency (


The security of your personal data is a priority for us. Therefore, eShopBrainiac has implemented all the necessary security measures to ensure the effective use and processing of personal data provided by the user, safeguarding the privacy, confidentiality and integrity of the same and makes use of the necessary technical means to prevent the alteration, loss, unauthorised access or processing of your data, according to the state of technology at all times.

Consequently, we comply with the security standards recommended to protect them. However, it is impossible to fully guarantee their security due to the nature of the Internet and because there may be malicious acts by third parties beyond our control.

We undertake to act promptly and diligently in the event that data security is compromised or compromised, and to inform you if relevant.


From eShopBrainiac we can modify the content of this Privacy Policy at any time, especially when there are changes in legislation, case law or interpretation of the competent authorities that affect the data processing carried out by eShopBrainiac through this Website. Any new version of this Privacy Policy shall enter into force on the published effective date.

If the revised version includes a material change that affects the processing of your data, we will notify you at least 30 days in advance by posting a notice on our website or app. Notwithstanding the foregoing, we encourage you to periodically review this Privacy Policy to stay informed about how your personal data is processed and protected, as well as your rights.

This Privacy Policy was updated in January 2024.

Cookies policy


On this Website, (the Website) we use cookies or other tracking and tracing tools to collect information about how users use the Website.

A cookie is a file that is placed on your device's browser (computer, mobile, etc.) for the purpose of storing and retrieving data. Other tracking technologies such as beacons, tags and scripts are also used to collect and track information and to improve and analyse our Service.

Cookies can have a multitude of purposes, depending on the purpose for which they have been configured: for example, to save preferences, collect usage statistics, enable technical functionalities, among others.


The Data Controller for processing the information collected through cookies is ESHOPBRAINIAC, S.L. (eShopBrainiac), with Tax ID number B-44800704 and address at Calle Agricultura 24 (local), 08320 Masnou, Barcelona (Spain).

If you have any questions regarding the use of cookies, please email and we will respond as soon as possible.


When you access the Website, even if you have not registered, the following information is collected through cookies: - Device Information: In the course of using the Website, we collect information about the mobile device from which you access the Website. The information we collect is the device model, operating system and version, unique device identifier and network.
- Information about your location: We also obtain your IP address, time zone and which mobile service provider, if any, allows us to obtain a general location.
- User browsing information: We collect information about your use of the Website. In particular, the frequency of use, the sections you visit, use of specific functions, etc.


Depending on their purpose, cookies can be classified as follows:

a. Technical cookies: These cookies are strictly necessary for browsing the Website and allow basic functions such as browsing from one section to another. They are responsible for technical aspects such as identifying profiles or sessions and managing tool preferences in the use, interaction and location of access to content. Also belonging to this category, due to their technical nature, are those cookies that allow the management, in the most efficient way possible, of the advertising spaces included on the Website, without collecting user information for other purposes, such as personalising this advertising content or other content.

b. Statistical cookies: These cookies measure and collect statistical information relating to the user's use of the Website, such as the time spent on the Website, the number of visits or the content visited. This information allows us to understand how users interact with the Website, to evaluate the performance of the site, which pages or sections of the Website are the most or least visited, including the quantification of the impact of advertisements placed on the Website (if any). By having this information, errors can be fixed, the design of the Website or the content offered through the Website can be improved.

c. Preference or personalisation cookies: Preference cookies allow the Website to remember user information so that the user accesses the service with certain features that may differentiate their experience from that of other users. For example, your preferred language or the region from which you access, the number of results to display when the user performs a search, the appearance or content of the service depending on the type of device from which the user accesses the service.

d. Behavioural advertising cookies: These cookies allow the management of advertising spaces that, where appropriate, have been included on the Website. However, the management of advertising spaces is based on the user's browsing profile. These cookies store information on the browsing habits of users obtained through continuous observation of their browsing habits, developing a specific user profile, so that the advertisements that appear in these spaces will be personalised for the user according to these habits.

Depending on the entity managing them:

a. Own cookies: are those that are sent to the user's device from a computer or domain managed by the party responsible for the website, in this case, eShopBrainiac, and from which the service requested by the user is provided.

b. Third-party cookies: these are those that are sent to the user's device from a computer or domain that is not managed by the party responsible for the Website, but by another entity that processes the data obtained through the cookies.

Depending on how long they remain activated:

Depending on the length of time they remain activated in the device, we can distinguish:

i. Session Cookies: These are designed to collect and store data during the time the user is browsing the Website and are deactivated at the end of browsing.

ii. Persistent cookies: These store data and can be accessed and processed for a period defined by the party responsible for the cookie, which can range from a few minutes to several years.


We use the following cookies on our website:


Name Type Owner Description/Purpose Expiration
shopify_app_session Technical eShopBrainiac Application session. 6 months
cc_cookie Technical eShopBrainiac Save the cookie acceptance consent. Session


Name Type Owner Description/Purpose Expiration
_ga Statistical Google (Use - Share data) It is used to distinguish visitors and establish anonymous traffic statistics. 2 years
ga* Statistical Google (Use - Share data) It is used to distinguish visitors and establish anonymous traffic statistics. 1 year
_grecaptcha Technical Google (Use - Share data) Provide protection against spam. 6 months

We use the following cookies on our platform:


Name Type Owner Description/Purpose Expiration
shopify_app_session Technical eShopBrainiac Application session. 6 months


The processing of information collected with cookies and other tracking devices that are not necessaryis based on your consent, which we ask you for when you access the Website via an informative pop-up.

The processing of the information we collect through the necessary cookies does not require consent, as it is based on the legitimate interest of eShopBrainiac.

Cookies whose purpose is strictly limited to the exclusive measurement of the Website's audience, carried out on behalf of the publisher only(by the publisher itself or a supplier, not third parties) and used to produce anonymous statistical data only (no identifiers are collected) will also not require consent (and will therefore be based on legitimate interest).

Where applicable, you may withdraw your consent at any time as explained in the section on withdrawal of consent.

Technical or necessary cookies cannot be disabled, otherwise the proper functioning of the Website would be compromised. They are generally only set in response to actions taken when you request services from us, such as setting your preferences in relation to the cookies themselves, logging in or completing forms. In the event of deactivation, this may result in the limited use of some of the Website's services by not being able to access certain functionalities and therefore your experience will be less satisfactory.


We use some third-party cookies, which are those cookies collected and managed by a third party, so these entities will receive your personal data collected through cookies for the purposes indicated for each cookie. These types of cookies are indicated in the table in section 5, as Third Party Cookies. This table identifies the third party that manages each cookie. There are cases where some first party cookie service providers may also collect your data for their own purposes, such as improving their tool. In these cases, we will also identify them as third party cookies in the table in section 5.

You can find out about the transfers to third countries that, where applicable, are made by the third parties identified in this cookie policy in their corresponding policies.

When you access our Website for the first time, you will be shown a window in which you can indicate whether you accept cookies or whether you wish to configure or reject them, except for those that are strictly necessary. You can also withdraw your previously granted consent at any time.

If you would like to withdraw your consent at any time in relation to the Cookies Policy, you have two options: (i) withdraw your consent through the buttons enabled for this purpose in this Cookies Policy; or (ii) delete the cookies stored on your device through the settings and configurations of your Internet browser.

Please note that if you accept third-party cookies, you must delete them from your browser options or from the system offered by the third party itself.

You can find more information on how to disable cookies, depending on your browser, at the following links:


The rights that you have as a data subject in relation to the protection of your personal data are indicated in the section What rights can you exercise as a data subject within the Privacy Policy.


We may update the Cookies Policy of our Website from time to time. Therefore, we recommend that you review this policy each time you access our Website in order to be properly informed about how and for what purpose we use Cookies.