Privacy Policy

At HSN, we are committed to protecting your privacy. We want to be transparent about the data we collect, how we use it, and the rights you have to control your data.

Depending on the user's interaction with HSN and the services, forms or features they use, we may process the following categories of personal data:

• Identification data: first name, surname(s), DNI/NIF (Spanish identification or tax identification number) or equivalent identification document.
• Contact details: postal address, email address and telephone number.
• Billing and payment data: information required to manage invoicing, payments and financial transactions associated with purchases or business relationships.
• Commercial and transaction data: order history, purchases, returns, preferences, discounts, points earned or redeemed, comments and reviews.
• Browsing data: IP address, device identifiers, activity logs, cookies and similar technologies.
• Academic and professional data of job applicants: education, professional experience, CV, position applied for and any other information voluntarily provided during a recruitment process.
• Professional and business data: company or professional activity, NIF/CIF/VAT number, registered business address, job title, type of business, website, profession, specialisation, professional accreditation or registration with a professional association, and any other information required to manage collaboration requests or professional relationships.
• Data relating to online profiles and digital presence: websites, social media profiles or channels, approximate number of followers, subject matter and type of content, previous collaborations and any other information provided to assess applications for affiliate programmes, content creation or other collaborations.
• Data from conversations with the virtual assistant: content of the messages written by the user and the responses generated, as well as any order or contact details provided by the user during the conversation.
• Other data voluntarily provided by the user in forms, communications, collaboration requests or recruitment processes.

Personal data will be retained for the following periods:

• For as long as a contractual, commercial or professional relationship with the user exists.
• Until the user requests its erasure or withdraws their consent, where consent is the applicable legal basis.
• Thereafter, the data will be retained in a restricted form for the periods necessary to address potential legal liabilities, in accordance with applicable legislation.
• Data processed for commercial or marketing purposes will be retained until the user withdraws their consent.
• Data relating to the loyalty programme and points will be retained for as long as the user maintains an active account or participates in the programme and, subsequently, for the periods necessary to address potential liabilities.
• Data relating to collaboration requests will be retained for the time necessary to assess and manage the request. Where a professional or commercial relationship is established, the data will be retained for the duration of that relationship and for any subsequent applicable statutory retention periods.
• Job applicants' data will be retained for a maximum period of 1 year from receipt of the CV or the most recent update to the application, unless the data subject requests its erasure earlier. Where data is retained for future recruitment processes, this will be based on the data subject's consent.
• Conversations with the virtual assistant will be retained for a maximum period of 60 days after the conversation ends. If a conversation results in a complaint or incident, the information necessary to manage it will be retained for the duration of its handling and, subsequently, will be retained in a restricted form for the legally applicable periods to address potential liabilities.

Once the data is no longer necessary for the purposes for which it was collected and the legally required retention periods have expired, it will be securely deleted, ensuring its confidentiality.

The legal bases for the processing of personal data carried out by HSN are:

• Performance of a contract: for purchasing products, managing orders, providing after-sales support, managing user accounts, participating in loyalty and points programmes, and responding to enquiries related to a purchase, including those submitted through the virtual assistant.
• Taking steps prior to entering into a contract: to respond to enquiries regarding a potential contractual relationship, including those submitted through the virtual assistant, assess job applications, and manage and evaluate applications for collaborations, affiliate programmes, reseller partnerships, content creation, healthcare professionals or other professional or commercial relationships.
• Consent of the data subject: for sending marketing communications, newsletters, participating in promotions and any specific processing activities requiring the data subject's consent.
• Legitimate interests: to respond to general enquiries related to HSN's business activities, including through the virtual assistant, improve services and ensure website security.
• Compliance with a legal obligation: to comply with tax, accounting, consumer protection and other legally applicable obligations.

Personal data may be disclosed or made available to the following recipients:

• Transport and courier companies, acting as independent data controllers, responsible for delivering orders to customers and processing data in accordance with their own privacy policies.
• Financial institutions and payment gateways, also acting as data controllers, for processing payments and managing financial transactions.
• Technology, hosting and IT maintenance service providers, acting as data processors in accordance with Article 28 of the GDPR.
• Digital marketing, CRM and communications platforms, also acting as data processors.
• Accounting, tax and legal advisers, where necessary to comply with legal or contractual obligations.
• In the case of the "Work with us" section, data may be processed internally by HSN staff responsible for recruitment processes and, where applicable, by recruitment agencies or human resources consultancies providing services to HSN and acting as data processors.
• In the case of applications for collaborations, affiliate programmes, reseller partnerships, content creators, healthcare professionals and other professional or commercial collaborations, data will be processed by HSN staff or departments responsible for assessing and managing such applications and, where necessary, by service providers involved in their management, acting as data processors.
• Artificial intelligence service providers supplying the technology for the virtual assistant, particularly ElevenLabs, which will process data on behalf of HSN as data processors or, where they operate through another service provider contracted by HSN, as sub-processors, in accordance with Article 28 of the GDPR. Other sub-processors necessary to provide the service may also be involved, subject to the corresponding contractual safeguards.

In all cases, HSN guarantees that third parties accessing personal data on behalf of HSN will provide sufficient guarantees of compliance with the GDPR and the LOPDGDD.

Some of our technology service providers, including those providing services related to the virtual assistant, may process data outside the European Economic Area, particularly in the United States.

These transfers will be carried out with the safeguards provided for in Articles 44 et seq. of the GDPR. In the case of the United States, transfers may be based on the adequacy decision concerning the EU-U.S. Data Privacy Framework, provided that the recipient organisation holds a valid certification and the processing falls within its scope.

Where an adequacy decision does not apply, the Standard Contractual Clauses approved by the European Commission or other valid safeguards under the GDPR will be used, together with any necessary supplementary measures.

You may request additional information about the transfers applicable to your data and a copy of the relevant safeguards by contacting soporte@hsnstore.com

 As a data subject, you may request to exercise any of the following rights regarding the protection of your personal data at any time: 

• Access: find out what data we process and for what purposes.
• Rectification: request the correction of inaccurate or incomplete data.
• Erasure: request the deletion of your data when it is no longer necessary.
• Restriction of processing: request that the processing of your data be restricted in the circumstances provided for by law.
• Data portability: receive your data in a structured, commonly used and machine-readable format and, where applicable, transmit it to another data controller.
• Objection: object to the processing of your data on grounds relating to your particular situation where permitted by the applicable legal basis.
• Withdrawal of consent: withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, you may send a request to:

• Postal address: Avenida Andalucía, 2, 18210 Peligros, Granada, Spain.
• Email address: soporte@hsnstore.com 

You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe that your rights have not been adequately addressed.

HSN has implemented the necessary technical and organisational measures to ensure the security and integrity of personal data, preventing its loss, alteration, unauthorised processing or access.

These measures include: SSL encryption (HTTPS), access controls, backups and regular security audits.

We provide a virtual customer service assistant on our website. You are interacting with an artificial intelligence system, not a person.

• What data we process: the content of your messages and the responses generated, as well as any order or contact details you choose to provide, such as your order number or email address.
• Purpose of processing: to respond to your enquiries about products, orders, deliveries and returns. Processing is based on the performance of a contract or taking steps prior to entering into a contract when the enquiry relates to a purchase or potential contractual relationship, and on HSN's legitimate interests in responding to other general enquiries concerning its business activities.
• Who is involved: the assistant's technology is provided by ElevenLabs, which may process data in the United States subject to the safeguards described in the international data transfers section.
• Data retention: conversations will be retained for a maximum of 60 days after they end, except for information necessary to manage complaints or incidents and address potential liabilities, in accordance with the data retention section of this policy.
• Automated decision-making: the assistant does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you. Decisions regarding complaints, returns or refunds are reviewed by our customer service team.
• Human assistance: you can request assistance from a member of our team at any time through https://www.hsnstore.eu/contact
• Recommendation: do not include payment card details, payment information or health-related information in the conversation. The assistant does not need this information to assist you.

If you subscribe to newsletters or mailing lists, you may unsubscribe at any time using the link included in each communication or by sending an email to soporte@hsnstore.com

The processing of this data will be based on the consent of the data subject.

This website uses cookies and similar technologies to optimise browsing, analyse website usage and personalise the user experience.

For more information about the use of cookies and how to manage them, please refer to our Cookie Policy.

HSN may amend this Privacy Policy to reflect changes in legislation or new data processing activities.

The updated version will always be available in this section, indicating the date of the last update: October 2026.

By ticking the corresponding boxes and entering data in the fields of the forms provided on the website, Users acknowledge that they have been informed about the processing of their personal data in accordance with this Privacy Policy.

Fields marked as mandatory are necessary to process the request, manage the service, process the purchase, assess the job application or collaboration request, or manage the corresponding relationship. Completion of the remaining fields is voluntary.

When interacting with the virtual assistant, users should only provide the data necessary to respond to their enquiry. If they do not provide the information required to identify an order or manage an issue, it may not be possible to resolve it through this channel.

The User guarantees that the personal data provided to the data controller is truthful, accurate and up to date, and undertakes to communicate any changes to such data.

Where the User provides personal data relating to third parties, they must ensure that they are legally entitled to disclose such data to HSN and that they have previously provided those individuals with the necessary information regarding the processing of their data.

Failure to provide the required data may prevent HSN from properly processing the request or providing the corresponding service.