Last updated: 28 October 2026

This policy explains how PROIDOLS POWERED MERCH SL («N*SOCIETY») processes your personal data when you visit thensociety.com, sign up for our communications or buy from our online store. It is written under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

  • Controller: PROIDOLS POWERED MERCH SL, Tax ID B13661616
  • Address: Avenida Doctor Nicasio Benlloch 128, Urban Offices U1, 46015 Valencia (Spain)
  • Privacy contact: support@thensociety.com

2. What data we process, why, and on what legal basis

ProcessingDataPurposeLegal basisRetention
Landing sign-up («Join the 1%»)Email, sign-up date and time, language, proof of consentSending you N*SOCIETY news, the launch announcement and our own marketing emailsYour consent, given by ticking the box (Art. 6.1.a GDPR; Art. 21 LSSI-CE)Until you unsubscribe or withdraw consent. After that, kept blocked only for the statutory limitation periods
Online store ordersName, address, email, phone, order and payment details (the payment provider processes payments; we don’t store full card numbers)Processing, shipping, billing, returns and warrantyPerformance of a contract (Art. 6.1.b GDPR)For the duration of the relationship, then for the statutory periods (e.g. 6 years for tax and commercial records)
Customer account (optional)Account details and order historyGiving you access to your accountContract / consentUntil you delete the account
Customer serviceWhatever you send usAnswering your requestConsent / legitimate interest (Art. 6.1.f GDPR)As long as needed, plus the statutory periods
Legal complianceInvoicing and accounting dataTax and accounting obligationsLegal obligation (Art. 6.1.c GDPR)The statutory periods
CookiesSee our Cookie Policy———

We don’t make automated decisions or build profiles that have legal effects on you.

3. Minimum age

You must be at least 14 to sign up for our communications (Art. 7 LOPDGDD). To place orders, you must be of legal age or have permission from a parent or guardian.

4. Recipients and processors

We don’t share your data with third parties unless the law requires it. We use service providers that process data on our behalf under Art. 28 GDPR agreements:

  • Shopify International Limited (Ireland), as our processor: online store platform and customer management; it stores the landing sign-ups (newsletter and early access) and lets us send you our email communications.
  • Payment providers: the payment gateways shown at checkout, to process payments.
  • Carriers and logistics providers: to deliver orders.
  • Web hosting and security: GoDaddy (hosting of thensociety.com and the landing sign-up form) and Cloudflare, Inc. (CDN and security).
  • Accounting and tax advisers: to meet our accounting and tax obligations.

5. International transfers

Some providers, such as Shopify, GoDaddy and Cloudflare, may process data outside the European Economic Area, for example in Canada or the US. For Shopify, data may be transferred to Shopify Inc. (Canada) and its service providers in the US. These transfers rely on a European Commission adequacy decision (such as the one for Canada, or the EU-US Data Privacy Framework) or on the Commission’s Standard Contractual Clauses.

6. Your rights

You can request access, rectification, erasure, objection, restriction and data portability. You can withdraw your consent at any time; this doesn’t affect processing carried out before you withdrew it. Write to support@thensociety.com and say which right you want to exercise. If we have reasonable doubts about your identity, we may ask you to prove it. Every marketing email includes an unsubscribe link. You can also file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

8. Changes

We’ll publish any update here. If a change is significant, we’ll let you know.

9. Cookies

How we use cookies is explained in our Cookie Policy.