Legal
Privacy policy
Last updated: July 17, 2026
1. Introduction
Gas Mercaful (hereinafter, the “Provider”) recognizes the importance of protecting the privacy and security of the personal information of its customers and users.
This Privacy Policy describes how we collect, use, store, protect and manage the personal data of the people who access, use or interact with our digital platform, mobile applications, website, support channels, purchase and delivery services and the programs associated with the sale and swap of gas cylinders.
By registering, using the platform, making a purchase, requesting a delivery or providing personal information, the user accepts the practices described in this Privacy Policy.
2. Data controller
The controller of the personal data collected through the platform is:
Gas Mercaful.
The Provider determines the purposes and means by which the personal information needed to provide its services is collected and used.
3. Information we collect
To provide our services we may collect different categories of information, including:
3.1 Identification data
- First and last name.
- Identity document or other identifying information when required.
- Date of birth, when necessary.
- Contact details.
3.2 Contact data
- Phone number.
- Email address.
- Physical address for delivery.
- Information needed to communicate with the customer.
3.3 Data related to orders and services
- Purchase history.
- Delivery requests.
- Information about cylinders purchased or exchanged.
- Data related to swap programs.
- Payment information and transaction receipts.
3.4 Technical and usage data
When the user uses the platform we may collect:
- IP address.
- Device type.
- Operating system.
- Browser information.
- Date and time of access.
- Activity logs within the platform.
3.5 Location data
When necessary to provide the service, we may request location information to:
- Coordinate deliveries.
- Help locate the customer’s address.
- Optimize distribution routes.
- Improve the user experience.
The user can manage location permissions from their device settings.
4. Purposes of data processing
Gas Mercaful will use the personal data collected for the following purposes:
4.1 Service provision
- Create and manage user accounts.
- Process purchases.
- Manage delivery requests.
- Coordinate cylinder distribution.
- Manage swaps or participation in swap programs.
- Track orders.
4.2 Security and operational control
- Verify user identity.
- Prevent fraud, misuse or unauthorized activity.
- Keep records of operations.
- Ensure the traceability of the cylinders sold.
4.3 Customer support
- Respond to inquiries.
- Handle complaints.
- Resolve issues related to purchases or deliveries.
- Provide technical support.
4.4 Communications
With the user’s authorization, we may send:
- Order confirmations.
- Delivery notices.
- Information about promotions.
- Service updates.
- Communications related to the platform.
5. Legal basis for processing
Personal data will be processed when:
- It is necessary to carry out a purchase or provide a service requested by the user.
- The user has given their consent.
- It is necessary to comply with legal or regulatory obligations.
- There is a legitimate interest related to the operation, security and improvement of the service.
6. Sharing of information
Gas Mercaful may share personal information only when necessary to provide the service or comply with obligations.
Data may be shared with:
- Authorized Gas Mercaful personnel.
- Couriers or logistics providers in charge of deliveries.
- Technology providers that supply hosting, maintenance or support services.
- Public bodies or authorities when there is a legal obligation.
Gas Mercaful will not sell, rent or trade its users’ personal data.
7. Protection and security of information
Gas Mercaful implements technical and organizational measures designed to protect personal information against:
- Unauthorized access.
- Accidental loss.
- Improper alteration.
- Unauthorized disclosure.
- Fraudulent use.
These measures may include access controls, authentication, activity logging, database protection and IT security mechanisms.
However, no electronic system can guarantee absolute security.
8. Data retention
Personal data will be kept for as long as necessary to:
- Maintain the commercial relationship with the user.
- Comply with legal obligations.
- Resolve claims.
- Keep operational and security records.
When data is no longer necessary, it may be deleted or anonymized in accordance with the applicable internal procedures.
9. User rights
The user may request, in accordance with applicable law:
- Access to their personal data.
- Correction of incorrect or outdated information.
- Updating of their data.
- Deletion where appropriate.
- Withdrawal of consent when processing depends on it.
- Information about the use of their data.
To exercise these rights, the user may contact Gas Mercaful through the official channels.
10. Use of cookies and similar technologies
The platform may use cookies or other similar technologies to:
- Keep the user’s session active.
- Remember preferences.
- Analyze how the service performs.
- Improve the browsing experience.
The user can configure their browser or device to limit or block these technologies, although this may affect certain features.
11. Data of minors
The platform is not directed at minors without the authorization of their legal guardians.
If the accidental collection of a minor’s personal data without the corresponding authorization is detected, Gas Mercaful may proceed to delete it.
12. Changes to this Privacy Policy
Gas Mercaful may update this Privacy Policy when necessary to reflect changes in:
- The services offered.
- Internal processes.
- Applicable regulations.
- The technologies used.
Changes will be published through the platform’s official channels.
13. Contact
For inquiries related to privacy, personal data protection or the exercise of rights, the user may contact Gas Mercaful through the official channels available on the platform.
By using the platform, creating an account, making a purchase or requesting a service, the user declares that they have read and understood this Privacy Policy.