Privacy & Cookie Policy
Last updated: August 3, 2026
At T.F.E.O.P. SL we take your privacy seriously. This policy explains what personal data we process, for what purpose and what rights you have, as well as how we use cookies on this website.
Data processing is governed by Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD); the use of cookies, by article 22.2 of Spanish Law 34/2002 (LSSI-CE).
Data controller
T.F.E.O.P. SL, the official and exclusive distributor of M Tobacco Ltd. in Spain, is the controller of your data.
- Company
- T.F.E.O.P. SL
- ceo@tfeop.com
Data we process and purposes
We only process the data needed to provide our services:
- Order and billing data (first name, last name, shipping address and email): to handle your purchase, shipping and customer support.
- Payment data: processed directly through our payment providers (Stripe and Redsys / Banco Santander). We do not store your full card details on our servers.
- Strictly necessary browsing data: language, age verification, cart contents and your cookie preference (see the cookies section).
Legal basis for processing
We process your data on the following grounds: performance of the sales contract (art. 6.1.b GDPR) to handle orders and shipping; compliance with legal obligations (art. 6.1.c) regarding tax and accounting; and our legitimate interest (art. 6.1.f) to prevent fraud and keep the site secure.
Recipients and processors
We do not sell or share your data with third parties for commercial purposes. We share data only with providers that supply necessary services, acting as data processors:
- Payment providers: Stripe Payments Europe, Ltd. and Redsys / Banco Santander, to process payments securely.
- Carriers, for the delivery of your orders.
- Our website hosting and infrastructure provider.
Some providers may process data outside the European Economic Area, always with the safeguards required by the GDPR.
Data retention
We keep your data for the duration of the business relationship and, afterwards, for the periods required by tax and commercial law (generally up to 6 years). Browsing data is kept for the periods stated in the cookie table.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, as well as withdraw any consent given. To do so, write to the email listed in the “Data controller” section.
If you believe we have not handled your request properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Cookie policy
A cookie is a small file stored on your device when you visit a website. This site uses only technical cookies necessary for its operation and for processing payments; we do not use analytics or advertising cookies. Being necessary, these cookies do not require consent, but we inform you of their use.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| _tfeop_locale | Remembers the chosen language | 1 year | Essential |
| _tfeop_adult | Stores the age verification (18+) | 1 year | Essential |
| _tfeop_cookie_ok | Stores your choice on this notice | 1 year | Essential |
| _tfeop_cart_id | Keeps your cart contents between visits | 30 days | Essential |
| __stripe_mid, __stripe_sid | Fraud prevention and payment processing | Session – 1 year | Third-party (Stripe) |
How to manage cookies
You can delete or block cookies from your browser settings. As these are necessary cookies, blocking them may cause some features (cart, language or payment) to stop working correctly.
During payment, Stripe and Redsys / Banco Santander may set their own cookies on their domains to secure the transaction.