Privacy policy
Last updated: 24 October 2026. Drawn up in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data controller
Hugo Silva (Pawsoleil), NIF (tax no.) 253850819, address Bandonagens S/N, 3680-280 São Vicente de Lafões, Portugal, email for privacy matters: suporte@pawsoleil.com.
2. Data we collect
- Identification and contact: name, email, phone number, delivery and billing addresses.
- Orders: products, amounts, history, communications with customer support.
- Payment: processed by the payment providers; we do not store full card details.
- Browsing: IP address, device, cookies (Shopify cookie banner and Shopify Analytics; marketing cookies only with consent).
- Personalisation: the photo and name of your pet that you upload to create the product (see section 4).
3. Purposes and legal bases (Art. 6 GDPR)
| Purpose | Legal basis |
|---|---|
| Processing and delivering orders, customer support, returns | Performance of the contract |
| Invoicing and tax obligations | Legal obligation |
| Fraud prevention, security | Legitimate interest |
| Newsletter and marketing | Consent |
| Non-essential cookies | Consent |
4. Customer-uploaded photos (personalised products)
- Purpose: we use your pet's photo and name only to make the product you ordered and its preview.
- Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
- Processors: we create the portrait ourselves using an AI image tool provided by AIMLAPI (Boiler Labs FZ-LLC, United Arab Emirates). Your photos may therefore be processed outside the European Union.; the design is sent to Printful, Printify or Gelato, who produce and ship the product. These providers may process data outside the EU/EEA; in that case, transfers are made under the European Commission's standard contractual clauses.
- No AI training or marketing: your photos are not used to train AI models, or in advertising, social media or other marketing, without your explicit consent.
- Retention: photos and designs are deleted up to 90 days after delivery, unless a complaint is open, in which case they are kept until it is resolved.
- Your rights: you can ask for access to or deletion of your photo at any time by emailing suporte@pawsoleil.com (if the product is already in production, deletion may prevent its completion). You can also lodge a complaint with the CNPD (www.cnpd.pt).
- Only upload photos you have the right to use; if a photo shows people, make sure they agree.
5. Data sharing
We share only what is necessary with:
- Platforms: Shopify and the marketplaces where we sell.
- Print-on-demand suppliers (Printful, Printify, Gelato) that produce and ship the orders.
- The AI image tool provider (AIMLAPI (Boiler Labs FZ-LLC, United Arab Emirates)), to create the portrait.
- Carriers: partner carriers (e.g. DPD, GLS, national postal services), with the tracking number sent by email.
- Payments: Shopify Payments and PayPal.
- Email/marketing and analytics: Shopify Email and Shopify Analytics.
- Our accountant and the authorities, where required by law.
6. Transfers outside the EEA
Shopify, the print-on-demand suppliers and the AI tool provider may process data outside the EEA. In such cases, transfers are made with appropriate safeguards (European Commission standard contractual clauses).
7. Retention periods
- Order and invoicing data: 10 years (tax obligation in Portugal).
- Customer account: until deleted by the customer.
- Pet photos and designs: up to 90 days after delivery (longer only while a complaint is open).
- Marketing: until consent is withdrawn.
- Cookies: in accordance with Shopify's cookie policy.
8. Your rights
Access, rectification, erasure, restriction, portability, objection and withdrawal of consent at any time. To exercise your rights, write to suporte@pawsoleil.com. We reply within one month. You also have the right to lodge a complaint with the CNPD (www.cnpd.pt) or with the supervisory authority of your country.
9. Security
We apply appropriate technical and organisational measures. The platforms we use rely on encrypted connections (HTTPS).
10. Cookies
See the store's cookie banner and Shopify's cookie policy (https://www.shopify.com/legal/cookies). Marketing cookies are only used with your consent.
11. Changes
We may update this policy; the date of the update will be shown at the top.