Privacy Policy
We collect only what we need to complete your order and run the business responsibly. We never sell your data.
Who we are
This site is operated by Spotted Lisbon, based in Lisbon, Portugal. For any privacy-related request, contact geral@spottedlisbon.com.
What we collect
- Order information: name, email, billing and shipping address, phone number, and payment details (processed directly by our payment providers — we never see your card number).
- Account information: if you create an account, the email and password you choose.
- Communication: messages you send us via the contact form or email.
- Analytics: anonymised data about how you use the site (pages visited, device type).
How we use it
- To process and ship your order.
- To reply to your questions.
- To send order confirmations and (if you opt in) marketing emails you can unsubscribe from at any time.
- To comply with Portuguese tax, consumer protection and anti-fraud law.
Who we share it with
Only the parties required to run the shop: Shopify (our e-commerce platform), our payment processors, our shipping carriers, and our authentication partner (LegitGrails). We do not sell your data to anyone.
Your rights (GDPR)
You have the right to access, rectify, delete, or export the personal data we hold about you. Email geral@spottedlisbon.com with your request and we will respond within 30 days.
Cookies
We use essential cookies to make the shop work (cart, login) and optional analytics cookies to understand traffic. You can disable non-essential cookies in your browser.
Retention
We keep order data for as long as required by Portuguese tax law (currently 10 years). Marketing data is kept only while you remain subscribed.
Updates to this policy
If we update this policy, the change will appear here with a new effective date. Material changes will be notified by email to customers with an active account.