Last updated: 28 October 2026
This policy explains how PROIDOLS POWERED MERCH SL («N*SOCIETY») processes your personal data when you visit thensociety.com, sign up for our communications or buy from our online store. It is written under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller: PROIDOLS POWERED MERCH SL, Tax ID B13661616
- Address: Avenida Doctor Nicasio Benlloch 128, Urban Offices U1, 46015 Valencia (Spain)
- Privacy contact: support@thensociety.com
2. What data we process, why, and on what legal basis
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Landing sign-up («Join the 1%») | Email, sign-up date and time, language, proof of consent | Sending you N*SOCIETY news, the launch announcement and our own marketing emails | Your consent, given by ticking the box (Art. 6.1.a GDPR; Art. 21 LSSI-CE) | Until you unsubscribe or withdraw consent. After that, kept blocked only for the statutory limitation periods |
| Online store orders | Name, address, email, phone, order and payment details (the payment provider processes payments; we don’t store full card numbers) | Processing, shipping, billing, returns and warranty | Performance of a contract (Art. 6.1.b GDPR) | For the duration of the relationship, then for the statutory periods (e.g. 6 years for tax and commercial records) |
| Customer account (optional) | Account details and order history | Giving you access to your account | Contract / consent | Until you delete the account |
| Customer service | Whatever you send us | Answering your request | Consent / legitimate interest (Art. 6.1.f GDPR) | As long as needed, plus the statutory periods |
| Legal compliance | Invoicing and accounting data | Tax and accounting obligations | Legal obligation (Art. 6.1.c GDPR) | The statutory periods |
| Cookies | See our Cookie Policy | — | — | — |
We don’t make automated decisions or build profiles that have legal effects on you.
3. Minimum age
You must be at least 14 to sign up for our communications (Art. 7 LOPDGDD). To place orders, you must be of legal age or have permission from a parent or guardian.
4. Recipients and processors
We don’t share your data with third parties unless the law requires it. We use service providers that process data on our behalf under Art. 28 GDPR agreements:
- Shopify International Limited (Ireland), as our processor: online store platform and customer management; it stores the landing sign-ups (newsletter and early access) and lets us send you our email communications.
- Payment providers: the payment gateways shown at checkout, to process payments.
- Carriers and logistics providers: to deliver orders.
- Web hosting and security: GoDaddy (hosting of thensociety.com and the landing sign-up form) and Cloudflare, Inc. (CDN and security).
- Accounting and tax advisers: to meet our accounting and tax obligations.
5. International transfers
Some providers, such as Shopify, GoDaddy and Cloudflare, may process data outside the European Economic Area, for example in Canada or the US. For Shopify, data may be transferred to Shopify Inc. (Canada) and its service providers in the US. These transfers rely on a European Commission adequacy decision (such as the one for Canada, or the EU-US Data Privacy Framework) or on the Commission’s Standard Contractual Clauses.
6. Your rights
You can request access, rectification, erasure, objection, restriction and data portability. You can withdraw your consent at any time; this doesn’t affect processing carried out before you withdrew it. Write to support@thensociety.com and say which right you want to exercise. If we have reasonable doubts about your identity, we may ask you to prove it. Every marketing email includes an unsubscribe link. You can also file a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.
8. Changes
We’ll publish any update here. If a change is significant, we’ll let you know.
9. Cookies
How we use cookies is explained in our Cookie Policy.