Privacy Policy

Version of 12 October 2026

We collect only what we need to make, send and look after your order, and we do not sell your data or use it for advertising.

1. Controller

CONFECÇÕES GOMES FARIA, LDA (trading as KEEPSELLE), Rua do Recreio, n.º 130, 4570-353 Laundos, Póvoa de Varzim, Portugal. Email: support@keepselle.shop, telephone +351 914 227 593. We have not appointed a data protection officer, as we are not required to; write to the address above for anything about your data.

2. What we collect and why

Data	Purpose	Legal basis (GDPR)
Name, billing and delivery address, email, telephone, order contents including your stitched line	Taking, making, delivering and invoicing your order; customer service; refunds and withdrawals	Contract, art. 6(1)(b)
Payment status and transaction reference (not your card number)	Taking and refunding payment, preventing fraud	Contract, art. 6(1)(b); legitimate interest in preventing fraud, art. 6(1)(f)
Invoices and order records	Tax and accounting obligations	Legal obligation, art. 6(1)(c)
Messages you send us (contact form, email, withdrawal form)	Answering you; keeping a record of withdrawals	Contract or pre-contract steps, art. 6(1)(b); legal obligation, art. 6(1)(c)
Account login (if you create one)	Letting you see past orders and addresses	Contract, art. 6(1)(b)
Technical data: IP address, browser, pages requested	Delivering the website securely, protecting it against attacks	Legitimate interest in a secure website, art. 6(1)(f)
Language, currency and bag contents (cookies)	Making the shop work	Strictly necessary, Lei n.º 41/2004, art. 5

We do not use analytics, advertising or social media tracking, and we do not send marketing emails. We do not make decisions about you by automated means.

3. Who receives your data

• Hosting: Hostinger International Ltd. (Cyprus), which hosts this website and its database.
• Payments: Stripe Payments Europe, Limited (Ireland) for cards, and PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) if you choose PayPal. They act as independent controllers for their own legal obligations (for example anti-money-laundering checks).
• Carriers: the postal or courier company that delivers your parcel receives your name, delivery address and, where needed for delivery, your telephone number and email. Outside the EU, customs authorities receive the information required on the customs declaration.
• Email: our email service provider, which sends order confirmations and our replies.
• Accountants and authorities where we are legally obliged, for example the Portuguese Tax Authority.

Our processors act only on our instructions under data processing agreements.

4. Transfers outside the EEA

Stripe and PayPal may process data in the United States, and carriers deliver to countries outside the EEA. Transfers to the United States rely on the EU–US Data Privacy Framework where the recipient is certified, or on the European Commission’s Standard Contractual Clauses. Transfers needed to deliver your order to a country outside the EEA are necessary for the performance of the contract (GDPR art. 49(1)(b)).

5. How long we keep it

• Order and invoice records: 10 years, as Portuguese tax law requires.
• Customer service messages and withdrawal declarations: up to 3 years after the order, the length of the legal guarantee.
• Contact form messages not linked to an order: up to 24 months.
• Your account: until you delete it or ask us to; orders stay in our records for the periods above.
• Server logs: up to 30 days.

6. Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability and to object to processing based on our legitimate interests. Write to support@keepselle.shop or use our contact form (topic “privacy request”); you do not need an account. We answer within one month.

You also have the right to lodge a complaint with a supervisory authority, in particular the Portuguese Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt, or the authority of the EU country where you live.

7. Do you have to give us your data?

Name, address, email and payment are needed to conclude and deliver a purchase; without them we cannot accept the order. A telephone number is optional except where a carrier needs it for delivery.

8. Security

The whole website is served over HTTPS. Card details are entered on the secure forms of our payment providers, which are certified to PCI DSS; we never see or store your full card number. Access to order data is limited to the people who need it to serve you.

9. Children

Our shop is meant for adults. We do not knowingly collect data from children under 16.

10. Cookies

We only use cookies that are strictly necessary for the shop to work. See Cookies.

11. Changes

If we change this policy we will publish the new version here with a new date.

Applicable law: Regulation (EU) 2016/679 (GDPR) and Lei n.º 58/2019.