Privacy Policy
Leash & Latte (“we”, “us”, “our”) is a trading name used by an individual operating this online store. We are committed to protecting your personal data and handling it transparently and securely, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
This Privacy Policy explains the types of personal data we collect, how we use and share that data, how long we retain it, and the rights you have under GDPR. By using our website and services, you acknowledge and agree to the terms described here.
For any questions about this Privacy Policy or your rights, you may contact us at:
Email: leashandlatte@outlook.com
Return address: provided to customers upon request or when initiating a return.
We act as the data controller for personal data collected through our website.
1. Personal Data We Collect
We collect the personal data that you provide directly when you place an order, create an account, contact us, or interact with our website. This includes your name, billing and shipping address, email address, and phone number if you choose to provide it. We also collect order and transaction details such as the products you purchase, delivery information, order history, and payment method. Full payment card details are never stored by us; they are processed securely by certified payment processors.
When you browse our website, we automatically collect certain device and usage information, including IP address, browser type, device details, pages visited, interactions, and data collected through cookies or similar technologies. We also store communications you send via email or contact forms.
2. How We Use Your Personal Data
We use your personal data to process and deliver your orders, provide customer service, communicate with you about your account or purchases, and manage returns or refunds. With your consent, we may use your data to send newsletters, promotions, and other marketing materials, and you can unsubscribe at any time.
Your data is also used to operate, maintain, and improve the website, detect and prevent fraud, and ensure technical functionality. In addition, we process personal data where necessary to comply with legal obligations including tax, accounting, auditing, and consumer protection requirements.
3. Sharing of Personal Data
We only share your data with trusted third-party service providers essential to running our online store. These include Shopify, which provides the e-commerce platform and stores data securely; fulfilment partners who manufacture, package, and ship orders on our behalf; payment processors such as Viva.com and Shopify Payments; shipping carriers; and service providers responsible for email delivery, analytics, or similar functions.
These third parties process data strictly in accordance with GDPR and only for the purposes necessary to provide their services. We never sell personal data to third parties.
4. International Data Transfers
Some of our service providers may store or process personal data outside the European Economic Area. When this occurs, we ensure that your data is protected through Standard Contractual Clauses approved by the European Commission or other equivalent GDPR-compliant safeguards.
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy. This includes completing your orders, complying with legal obligations, resolving disputes, and maintaining business records. You may request the deletion of your personal data at any time, unless we are legally required to retain certain information.
6. Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or misuse. However, no online system can be guaranteed to be entirely secure, and we cannot provide absolute assurance against all possible risks.
7. Your Rights Under GDPR
You have the right to request access to your personal data, the right to correct inaccurate information, the right to request deletion, the right to restrict certain processing activities, the right to data portability, and the right to object to processing, including for direct marketing. Where processing is based on consent, you may withdraw consent at any time. To exercise any of these rights, contact us at: leashandlatte@outlook.com
You may also file a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados) at https://www.cnpd.pt
8. Cookies
We use cookies and similar technologies to enable website functionality, analyse performance, improve user experience, and support marketing activities where applicable. You may manage or disable cookies in your browser settings. For more information, refer to our Cookie Policy.
9. Changes to This Privacy Policy
We may update this Privacy Policy to reflect legal, technical, or operational changes. Any updates will be posted on this page with a revised “Last updated” date. Continued use of the website after such updates constitutes acceptance of the updated policy.
10. Contact
Leash & Latte
Email: leashandlatte@outlook.com
Return address: provided to customers upon request or when initiating a return.