Data controller

Soraia Simões (Lucky Baby Bow), R. D. João V, Centro Comercial Miravila, Loja 2, 8125-207 Quarteira, Portugal. For any question about your data: luckybabybow@gmail.com.

What we receive

• Your name and contact details (phone, email or Instagram account), when you get in touch.
• Your delivery address, when we ship your order.
• Your tax number (NIF), if you ask for it on the invoice.
• Photographs, names, dates and text to personalise your item, sometimes of babies and children. If you send us someone else’s details, you confirm you are entitled to do so.

What we use them for

• Replying to you, agreeing your order and preparing the proof.
• Making, handing over or shipping your order.
• Issuing the invoice, as the law requires.
• Handling guarantee claims and complaints.

The legal basis is carrying out your order and the steps you ask for before it (Article 6(1)(b) GDPR) and complying with legal obligations such as invoicing (Article 6(1)(c)). We send no marketing, sell no data and make no automated decisions.

Where they are kept and who sees them

• In the conversation on the channel you chose (WhatsApp Business, Instagram or email) and on the shop’s phone or computer.
• Invoice details are held on the Portuguese tax portal (Portal das Finanças).
• For shipped orders, CTT receives the name, address and phone number needed for delivery.
• WhatsApp, Instagram and the email provider have their own privacy policies and may process data outside the European Economic Area, with the safeguards the GDPR requires.

How long we keep them

• Photographs and files for personalisation: we delete them once the order has been delivered.
• Messages: they stay on the channel you used to talk to us. You can ask us to delete them once the order is complete.
• Invoices: for as long as tax law requires.

Photographs of our work

We only publish photographs of our work on Instagram and on this website with the customer’s permission (Article 6(1)(a) GDPR). You can withdraw your permission at any time by writing to us, and we will take the photograph down.

Your rights

You can ask to access, correct, delete, restrict or port your data, or object to its use, by writing to luckybabybow@gmail.com. We reply within one month. You can also complain to the Portuguese data protection authority, CNPD (cnpd.pt).

This website

• It uses no cookies, forms or accounts, and collects no personal data.
• It is hosted by Cloudflare, which processes technical data such as your IP address to serve the pages and protect the site.
• We may measure visits with Cloudflare Web Analytics, which counts visits in aggregate, without cookies and without identifying visitors.
• Links to WhatsApp, Instagram and Google Maps take you to those services, which have their own policies.