Privacy policy

Last updated: 15 July 2026.

1. Who we are

This shop is operated by the sole trader identified on our Company information page (the “controller” for the purposes of the EU General Data Protection Regulation — GDPR — and Portuguese Law no. 58/2019). Contact details for any privacy matter are on that page.

2. What data we collect and why

Order data — name, email address, phone number, delivery address, chosen collection point (if any), optional VAT number, and the contents of your order. Legal basis: performance of a contract (GDPR art. 6(1)(b)) and compliance with legal obligations, namely invoicing and tax rules (art. 6(1)(c)).

Gift card data — recipient name and email, optional sender email and message. Legal basis: performance of a contract.

Messages — if you email us, we keep the correspondence to answer you. Legal basis: our legitimate interest in responding (art. 6(1)(f)).

Account data — if you create an account: your email, name and any delivery addresses you save, plus the contents of your cart while you are signed in (so you find it on your next visit). Legal basis: performance of a contract (GDPR art. 6(1)(b)).

Technical data — essential first-party cookies only: a cart identifier, your language preference and an anonymous visitor identifier used for basic, aggregate statistics (page views, carts). We also estimate your approximate country from your IP address, via our content-delivery network, to open the site in your language, pre-select your delivery country and count visits by country in aggregate — we do not store your IP address and we do not profile you. We do not use advertising or third-party tracking cookies. The full list is in our Cookie policy.

3. Who we share data with

Carriers (e.g. CTT, DHL, InPost / Mondial Relay) receive the name, address and phone number needed to deliver your order. Online payments are processed by Stripe or PayPal — your card or account details are handled directly by them and never reach our servers. If you sign in with Google, Google confirms your email address to us. Our email is processed by Google (Gmail) under its EU data-processing terms. We never sell personal data.

4. How long we keep data

Order and invoicing records: 10 years, as required by Portuguese tax law. Gift card records: until redeemed plus the statutory warranty/complaint periods. Email correspondence: up to 2 years after the matter is closed. Visit statistics are anonymous and kept in aggregate form.

5. Your rights

Under GDPR arts. 15–22 you may request access to, rectification or erasure of your data, restriction of or objection to its processing, and data portability. Write to the email on the Company information page. You may also lodge a complaint with the Portuguese supervisory authority, CNPD, or use the European Commission’s Online Dispute Resolution platform.

6. International transfers

Data is stored in the EU. Where a provider (e.g. Google) may process data outside the EEA, it does so under the European Commission’s adequacy decisions or standard contractual clauses.

7. Changes

We will update this page whenever our practices change and revise the date at the top.