Privacy Policy

DATA CONTROLLER INFORMATION

Business Name: Kashi
Owner: Ana Isabel Oliveira Lisboa
Tax ID: 231290802
Contact: ana@kashi.pt

INTRODUCTION

Kashi respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR).

PERSONAL DATA WE COLLECT

1. IDENTIFICATION AND CONTACT DATA

  • Full name
  • Email address
  • Phone number
  • Delivery and billing address

2. ORDER DATA

  • Order history
  • Product preferences
  • Customization specifications
  • Images provided for customization

3. PAYMENT DATA

  • Transaction ID
  • Payment status
  • Payment method used
  • We do not store complete credit card data

4. TECHNICAL AND BROWSING DATA

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited on website
  • Products viewed
  • Products added to cart
  • Checkout and purchase actions
  • Cookies and session data
  • Device identifiers
  • Date and time of visits
  • Referral URLs

PURPOSES OF DATA PROCESSING

1. ORDER PROCESSING

  • Order and delivery management
  • Communication about order status
  • Creation of personalized products
  • Payment processing

2. LEGAL OBLIGATIONS

  • Invoice issuance
  • Tax obligation compliance
  • Accounting document archiving

3. MARKETING AND COMMUNICATION

  • Newsletter sending (with consent)
  • Promotional communications
  • Satisfaction surveys
  • Personalized advertising on Facebook and Instagram
  • Remarketing to remind you of viewed products or abandoned carts
  • Advertising campaign effectiveness analysis
  • Creation of custom and lookalike audiences

4. SERVICE IMPROVEMENT

  • Website usage analysis
  • User experience optimization
  • New product development
  • Conversion and sales optimization

LEGAL BASIS FOR PROCESSING

  • Contract performance: Order processing and service provision
  • Legal obligation: Tax and accounting obligations compliance
  • Consent: Marketing and promotional communications, marketing cookies, and Facebook Pixel
  • Legitimate interest: Service improvement and security

DATA SHARING WITH THIRD PARTIES

1. SERVICE PROVIDERS

  • CTT (Portuguese Postal Service): Delivery data for order shipping
  • Payment processors: Stripe, MB Way, Revolut
  • Meta Platforms (Facebook/Instagram): Behavioral data through Facebook Pixel for advertising and analytics

2. COMPETENT AUTHORITIES

  • Tax Authority (when legally required)
  • Other authorities by legal obligation

INTERNATIONAL TRANSFERS

Some of our service providers may be located outside the European Union. We ensure that all transfers are made with adequate data protection safeguards.

Facebook Pixel: Facebook Pixel may transfer data to Meta Platforms servers located outside the European Union, including the United States. These transfers are carried out under Standard Contractual Clauses approved by the European Commission.

For more information about how Facebook processes your data:

COOKIES AND SIMILAR TECHNOLOGIES

1. ESSENTIAL COOKIES (Always Active)

  • Shopping cart
  • User session
  • Language preferences
  • Website security

These cookies are necessary for the website to function and cannot be disabled.

2. ANALYTICAL COOKIES

  • Website usage statistics

3. MARKETING COOKIES (Require Your Consent)

Facebook Pixel (Meta Platforms)

  • Purpose: Track your behavior on our website to show you relevant ads on Facebook and Instagram, measure campaign effectiveness, and optimize conversions
  • Events tracked:
    • Page views (PageView): Pages you visit on the website
    • Content views (ViewContent): Products you view
    • Add to cart (AddToCart): Products you add to cart
    • Initiate checkout (InitiateCheckout): When you start the checkout process
    • Purchase (Purchase): When you complete a purchase
  • Data collected: IP address, browser type, device identifiers, browsing behavior, cookies and unique identifiers
  • Duration: Up to 2 years
  • More information: Facebook Privacy Policy

MANAGING YOUR COOKIE PREFERENCES

You can manage your cookie preferences through:

  • The cookie banner that appears on your first visit to the website
  • Your browser settings
  • Facebook ad preferences: https://www.facebook.com/ads/preferences
  • "Facebook Pixel Blocker" browser extension
  • Contacting us: ana@kashi.pt

Note: If you reject marketing cookies, you will still see ads, but they will be less relevant to your interests.

DATA RETENTION PERIOD

  • Tax and accounting data: 10 years (legal obligation)
  • Customer data: Until deletion request
  • Marketing data (including Facebook Pixel): Until consent withdrawal or deletion request
  • Design files: As needed for service
  • Cookies: Up to 2 years, as defined in cookie preferences

YOUR RIGHTS

Under GDPR, you have the following rights:

  • Right of access: Know what data we have about you
  • Right of rectification: Correct incorrect data
  • Right of erasure: Delete your data ("right to be forgotten")
  • Right of restriction: Restrict processing
  • Right of portability: Receive your data in a structured format
  • Right of objection: Object to processing, especially for marketing purposes
  • Right to withdraw consent: For consent-based processing (including marketing cookies and Facebook Pixel)

To exercise your rights, contact us at the indicated email: ana@kashi.pt

DATA SECURITY

We implement adequate technical and organizational measures to protect your personal data against:

  • Unauthorized access
  • Improper alteration
  • Unauthorized disclosure
  • Accidental destruction

MINORS

Our services are not intended for minors under 16 years. We do not intentionally collect personal data from minors without parental consent.

PRIVACY POLICY CHANGES

This policy may be updated periodically. Changes will be communicated through the website and, when applicable, by email.

COMPLAINTS

If you consider that your data is not being processed adequately, you can file a complaint with the Portuguese National Data Protection Commission (CNPD) at www.cnpd.pt.

CNPD Contact Information:

  • Website: www.cnpd.pt
  • Email: geral@cnpd.pt
  • Phone: +351 213 928 400

CONTACTS

For data protection related questions, contact us:
Email: ana@kashi.pt

Last update date: October 23, 2025