Privacy policy

Privacy Policy

Your privacy matters to us.

Last updated: April 25, 2026

Pocketpiano SL (hereinafter referred to as “Pocket Piano”, “we”, “us”, or “our”) is a Spanish limited liability company registered under CIF B66977513, incorporated on April 7, 2017, and engaged in the research, development, manufacturing, distribution, and commercialization of electronic musical instruments and applications (CNAE 3220).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit pocketpiano.com, purchase our products, or interact with our services.

Please read this document carefully. If you do not agree with its terms, please discontinue the use of our website and services.

1. Data Controller

Company: Pocketpiano SL
CIF: B66977513
Legal form: Sociedad Limitada (S.L.)
Registered in: Spain
Activity: CNAE 3220 – Manufacture of musical instruments
Registered address: Av. les Garrigues, 46, Planta 1, 08820 El Prat de Llobregat, Barcelona, Spain
Website: pocketpiano.com
Contact email: team@pocketpiano.com

2. Personal Data We Collect

Depending on how you interact with Pocket Piano, we may collect the following categories of personal data:

  • Identity data: Full name, username, or similar identifier.
  • Contact data: Email address, shipping address, billing address, and telephone number.
  • Transaction data: Details of products purchased, order history, and payment method references. We do not store full payment card numbers.
  • Technical data: IP address, browser type and version, time zone, operating system, device identifiers, and other technology on the devices you use to access our website.
  • Usage data: Information about how you use our website, products, and services.
  • Marketing and communications data: Your preferences for receiving marketing communications and your communication preferences.
  • Support data: Information you provide when contacting our customer support team.

We do not intentionally collect sensitive personal data, such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data. If you voluntarily provide such data, we will handle it in accordance with applicable law.

3. How We Collect Your Data

We collect personal data through the following means:

  • Direct interactions: When you create an account, place an order, subscribe to our newsletter, complete a contact form, or communicate with us.
  • Automated technologies: As you navigate our website, we automatically collect technical and usage data through cookies, server logs, and similar technologies. Please refer to our Cookie Policy for further information.
  • Third parties: We may receive data from analytics providers, payment processors, shipping carriers, advertising networks, and other service providers.

4. Legal Basis for Processing

We process your personal data only when we have a valid legal basis under Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (“LOPDGDD”).

The legal bases on which we rely include:

  • Performance of a contract: To process your orders, manage your account, and deliver our products and services.
  • Legal obligation: To comply with applicable laws and regulations, including tax, accounting, commercial, and consumer protection obligations.
  • Legitimate interests: To improve our website and services, prevent fraud, maintain security, and conduct direct marketing to existing customers where permitted by law.
  • Consent: To send marketing communications to new subscribers, place non-essential cookies, and carry out other processing activities for which we request your consent.

You may withdraw your consent at any time.

5. Purposes of Processing

We may use your personal data for the following purposes:

  • To register you as a customer and manage your account.
  • To process and deliver your orders, including payments, shipping, returns, and refunds.
  • To manage our relationship with you, including notifying you about changes to our policies, products, or services.
  • To respond to enquiries and provide customer support.
  • To send promotional communications where you have opted in or where we have a legitimate interest and are legally permitted to do so.
  • To administer and protect our business and website, including troubleshooting, fraud prevention, data analysis, testing, system maintenance, support, reporting, and hosting.
  • To deliver relevant website content and advertising and measure the effectiveness of our communications and advertising campaigns.
  • To use analytics to improve our website, products, services, marketing, and customer relationships.
  • To comply with applicable legal and regulatory requirements.

6. Disclosure of Your Personal Data

We do not sell your personal data.

We may share your personal data with the following categories of recipients, solely for the purposes described in this Privacy Policy and subject to appropriate safeguards:

  • Service providers: Providers of hosting, IT services, payment processing, logistics, shipping, email marketing, analytics, advertising, and customer support tools that process personal data on our behalf.
  • Professional advisers: Lawyers, bankers, auditors, accountants, consultants, and insurers that provide professional services to us.
  • Regulators and public authorities: Tax authorities, law enforcement agencies, courts, supervisory authorities, or other public bodies when required by law or necessary to protect our legal rights.
  • Business transfers: Potential buyers, investors, or other parties involved in a merger, acquisition, restructuring, financing, or sale of all or part of our business or assets.

7. International Data Transfers

Some of our service providers may be located outside the European Economic Area (“EEA”).

Whenever we transfer your personal data outside the EEA, we take appropriate steps to ensure that your data receives a level of protection substantially equivalent to that provided within the European Union.

These safeguards may include adequacy decisions adopted by the European Commission, Standard Contractual Clauses approved by the European Commission, binding corporate rules, or other legally recognised transfer mechanisms.

You may contact us for further information about the safeguards used for international data transfers.

8. Data Retention

We retain your personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, tax, accounting, or reporting requirements.

In general:

  • Customer account data: Retained for the duration of our relationship with you and, where appropriate, for up to five years after the account is closed.
  • Transaction and accounting data: Retained for at least six years, or for any longer period required under applicable Spanish tax, accounting, or commercial legislation.
  • Marketing data: Retained until you unsubscribe, withdraw your consent, or object to receiving marketing communications.
  • Technical and usage data: Retained for the periods specified in our Cookie Policy or the settings of the corresponding analytics and advertising tools.
  • Customer support data: Retained for as long as necessary to resolve your request and comply with applicable legal obligations.

When personal data is no longer required, we securely delete or anonymise it.

9. Your Data Protection Rights

Under the GDPR and the LOPDGDD, you may exercise the following rights in relation to your personal data:

  • Right of access: Request confirmation as to whether we process your personal data and obtain a copy of that data.
  • Right to rectification: Request the correction of inaccurate or incomplete personal data.
  • Right to erasure: Request the deletion of your personal data where there is no valid reason for us to continue processing it.
  • Right to restrict processing: Request that we limit the processing of your personal data in certain circumstances.
  • Right to data portability: Receive personal data you have provided to us in a structured, commonly used, and machine-readable format and request that it be transmitted to another controller, where technically feasible.
  • Right to object: Object to processing based on legitimate interests or to the processing of your personal data for direct marketing purposes.
  • Right to withdraw consent: Withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
  • Right not to be subject to automated decisions: Request not to be subject to a decision based solely on automated processing where such a decision produces legal or similarly significant effects.
  • Right to lodge a complaint: Submit a complaint to the Spanish Data Protection Authority, the Agencia Española de Protección de Datos (“AEPD”), through www.aepd.es.

To exercise any of these rights, please send a written request to team@pocketpiano.com.

Please indicate the right you wish to exercise and provide sufficient information for us to identify you and process your request. We may need to request additional information to verify your identity.

We will respond within one month of receiving your request. This period may be extended by a further two months where necessary, taking into account the complexity and number of requests. If an extension is required, we will inform you accordingly.

10. Data Security

We have implemented appropriate technical and organisational security measures designed to protect your personal data against accidental or unlawful loss, destruction, alteration, unauthorised disclosure, or unauthorised access.

These measures may include SSL/TLS encryption for data in transit, access controls, secure systems, restricted permissions, monitoring, and periodic security assessments.

Although no method of transmission or electronic storage is completely secure, we use commercially reasonable measures to protect your personal data.

11. Minors

Our website and services are not directed at children under the age of 14, and we do not knowingly collect personal data from children under 14.

If you believe that we have inadvertently collected personal data from a child under 14, please contact us at team@pocketpiano.com. We will take reasonable steps to delete the information promptly.

12. Cookies and Similar Technologies

Our website uses cookies and similar technologies to provide essential functionality, remember your preferences, understand how visitors use our website, and, where permitted, deliver personalised advertising.

Non-essential cookies will only be used where you have provided the required consent. You can manage or withdraw your cookie preferences through the cookie settings available on our website.

For further information, please review our Cookie Policy.

13. Third-Party Links

Our website may contain links to third-party websites, applications, plug-ins, or services.

Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party services and are not responsible for their privacy practices.

We recommend reviewing the privacy policy of every third-party website or service you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology, legal requirements, or other relevant factors.

We will publish the updated Privacy Policy on our website and indicate the date on which it was last updated. Where required by law, we will provide additional notice or request your consent.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we process your personal data, please contact us:

Pocketpiano SL
CIF: B66977513
Av. les Garrigues, 46, Planta 1
08820 El Prat de Llobregat
Barcelona, Spain

Email: team@pocketpiano.com
Website: pocketpiano.com

This Privacy Policy was last reviewed and updated on April 25, 2026.