Privacy Policy
At Spiteful August, your privacy is our priority. Whether you're shopping, browsing, or just saying hi, you can trust us to handle your personal information with care and integrity.
This privacy notice breaks down how we protect your data and your rights under the General Data Protection Regulation (GDPR) and Spanish Data Protection Laws. Let's keep it simple. Grab a coffee, and let's walk you through it.
Last updated: June 2026
Who we are.
When we say "we," "us," or "our," we're talking about Spiteful August, a fragrance house operated by FOX & WOLF, located at Flamenca Beach Centro Comercial, Local 33, C. Niagara 63, Dehesa de Campoamor, 03189, Spain. We're responsible for how your data is collected, stored, and used.
When we say "you," we mean our customers, visitors, or anyone using our website, www.myspitefulaugust.com (our "Site").
Spiteful August is a fragrance brand operated by FOX & WOLF. Both brands share the same legal entity, registered Spanish address, and VAT registration. Your transactions with Spiteful August are processed by FOX & WOLF as the data controller. Any rights, requests, or queries under this policy apply equally across both brands.
What we collect, and why.
We collect personal info to:
- Deliver your orders and services.
- Answer questions or messages.
- Personalise your experience and keep things running smoothly.
What might we collect?
- Your name, date of birth, phone number, and contact details.
- Info you share when creating an account, filling out forms, or chatting with us.
- Details from your social media profiles if you link them to your account.
No sneaky business here, just honest, transparent data use.
When we collect your info.
We collect your info when you:
- Register or log in to your account.
- Send us a message or place an order.
- Accept cookies while browsing our site.
- Show interest in working or collaborating with us.
We only ask for what we need, and nothing more.
How we use your info.
Here's why we use your personal data:
- To fulfil your orders and requests.
- To communicate updates and ensure smooth service.
- To improve and personalise your experience.
- To handle payments and invoicing.
No info, no service. It's as simple as that.
Marketing & feedback.
We love staying in touch. If you've given us permission, we'll send you updates about products, events, and offers. Not feeling it? Opt out anytime, no hard feelings.
We might also ask for your feedback via surveys (totally voluntary) to keep improving for you.
Your data, your rules.
Under the GDPR (and Spain's LOPDGDD), you have the following rights over your personal data, at any time, free of charge:
- Access (Art. 15): ask for a copy of the data we hold on you.
- Rectification (Art. 16): ask us to correct anything that's wrong or out of date.
- Erasure (Art. 17): the "right to be forgotten". Ask us to delete your data when there's no good reason for us to keep it.
- Restriction (Art. 18): ask us to pause processing while we work something out.
- Portability (Art. 20): receive your data in a structured, machine-readable format so you can take it elsewhere.
- Object (Art. 21): say no to processing based on legitimate interests or direct marketing.
- Withdraw consent: wherever processing relies on consent, you can withdraw it any time.
- Not be subject to automated decisions (Art. 22): we don't do profiling that legally affects you. If we ever did, you could opt out.
To exercise any of these, write to Loading…. We'll respond within 30 days (sometimes faster: depends on the question).
If you're not happy with how we handle your data, you can lodge a complaint with Spain's data protection authority: Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, aepd.es.
We'll hold your data only as long as it's needed for legal or service reasons. After that? It's securely deleted.
Sharing your info.
We only share your info when absolutely necessary, such as:
- To process orders (think shipping and payment providers).
- When required by law.
- With third parties, but only if you've given us the go-ahead.
Our partners share our commitment to keeping your data safe.
Cookies, and your say in them.
Cookies are small files, and similar data, that a website keeps in your browser. We use the ones our shop needs to work. Everything else waits for your yes, which you give or refuse in the bar at the foot of the page and can change whenever you like.
Necessary, always on
- sa-cart (this site, kept until you empty your cart or clear your browser data): what is in your cart.
- sa-inv-cache-v1 (this site, until you close the tab): stock levels, so the shop loads faster.
- sa-recent (this site): the products you looked at, shown in your cart. It never leaves your browser.
- sa-consent (this site, 12 months): your cookie choices.
- __kla_off (this site, until you close the browser): set only while Marketing is off, it tells Klaviyo not to track you while it shows product reviews.
- sa-lang-choice and sa-lang-suggested (this site): the language you chose, and whether and how often we have suggested one.
- sa-uk-banner-dismissed (this site, until you close the tab): you closed the shipping notice.
- Checkout: our checkout runs on Shopify at checkout.myspitefulaugust.com, which sets the cookies it needs to take your order. See Shopify's privacy policy.
Live chat, only with your yes or when you open the chat
- Sondu (fox-and-wolf.sondu.app): loads our live chat and remembers your conversation. If Live chat is off, it loads only when you open the chat, because you asked for it.
Marketing, only with your yes
- Meta Pixel (Meta Platforms Ireland Ltd.): cookies _fbp and, if you arrive from one of our ads, _fbc, usually kept for 90 days. They measure how our Instagram and Facebook ads perform and help us reach people like you. Meta may process this data in the United States. Meta's privacy policy.
- Klaviyo (Klaviyo, Inc.): cookie __kla_id, kept for up to 2 years. It connects what you browse here with our email list if you are subscribed, so our emails fit. Klaviyo may process this data in the United States. Klaviyo's privacy policy.
Not cookies, but worth knowing
- Google Fonts: our typefaces load from Google's servers, so your browser shares your IP address with Google when a page opens.
- Shopify: when you add something to your cart, your browser talks to Shopify, which runs our shop, to keep your cart.
- Klaviyo reviews: product pages show customer reviews and ratings through Klaviyo's script, which can also show our email sign up forms. Until you accept Marketing, the script loads with Klaviyo's tracker switched off by the __kla_off cookie, and we remove any __kla_id cookie each time a page opens.
- Netlify: Netlify, which hosts this site, adds a small script that measures how quickly our pages load and respond. Netlify says it uses no cookies for this.
You can change your choice at any time with the Cookie settings button above or the Cookies link in the site footer. Withdrawing consent removes the marketing cookies these partners set on our domain. Your browser settings can also block or delete cookies.
Keeping your info secure.
Your privacy is backed by robust security measures. While no system is 100% foolproof, we do everything possible to keep your info safe from unauthorised access.
Updates to this notice.
We'll update this policy as needed to keep you informed about how your data is handled. If we make any big changes, you'll hear it from us.
We're here for you.
Your privacy is always in good hands. If you've got questions about your data, want to exercise any of the rights above, or just want to say hello, reach out any way that suits you.
Contact the studio
- Email Loading…
- Address
- Flamenca Beach Centro Comercial, Local 33,
C. Niagara 63, Dehesa de Campoamor,
03189, Spain