Last updated: June 2026

We take your privacy seriously. This policy explains what personal data we collect, how we use it, and your rights as a customer. By shopping with us, you agree to the terms outlined below.

Who we are

We are a vintage clothing shop based in Portugal. For any privacy-related questions, you can contact us directly through our contact page. References to “we”, “us”, or “our” throughout this policy refer to our shop and its owner.

What data we collect

When you place an order or create an account, we may collect:

  • Your name, email address, and delivery address
  • Payment information (processed securely — we never store card details)
  • Order history and communication records
  • Device and browsing data through cookies (see below)

How we use your data

We use your personal data only to:

  • Process and fulfil your orders
  • Send order confirmations and shipping updates
  • Respond to your enquiries or support requests
  • Comply with legal and tax obligations
  • Send occasional marketing emails, only if you have opted in

We will never sell, rent, or share your personal data with third parties for their own marketing purposes.

Who we share your data with

To fulfil your order, we may share relevant data with trusted third parties, including:

  • Shipping and courier services (your name and delivery address)
  • Payment processors such as Stripe or PayPal (payment data only)
  • Our website platform and hosting provider (WooCommerce / WordPress)

All third parties we work with are required to handle your data securely and in compliance with applicable data protection laws.

Cookies

Our website uses cookies to keep your shopping cart active, remember your preferences, and understand how visitors use our site. You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect your shopping experience.

How long we keep your data

We retain your order and account data for up to 7 years to comply with Portuguese and EU tax and accounting regulations. If you request deletion of your account, we will remove your personal data except where retention is legally required.

Your rights (GDPR)

As an EU resident, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Object to or restrict how we process your data
  • Withdraw consent for marketing communications at any time
  • Lodge a complaint with the Portuguese data protection authority (CNPD) at cnpd.pt

To exercise any of these rights, please contact us through our contact page and we will respond within 30 days.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date at the top. We encourage you to review this page periodically.