Privacy Policy

Last updated: September 2026

1. Data Controller

This Privacy Policy describes how Kids R collects, uses, and protects the personal data of website users and customers.

The data controller is:

Kids R, Lda.
NIPC (Tax ID): 516 656 856
Headquarters: Rua Joaquim Gomes Alves, 5, 2665-183 Malveira, Portugal
Email: info@kidsr.pt
Phone: +351 916 871 197

2. Personal data we may collect

Depending on how you use the website and our services, we may collect data such as:

• name;
• billing and delivery address;
• email address;
• phone number;
• data related to orders and purchased products;
• information necessary for payment processing;
• communications sent to Kids R;
• marketing and newsletter preferences;
• information related to website usage, device, browser, and IP address;
• information collected through cookies and similar technologies, according to applicable consent preferences.

We do not directly store full payment card details used at checkout when payment is processed through external payment service providers.

3. Purposes of processing

Personal data may be processed for the following purposes:

Order processing
To manage purchases, payments, invoicing, preparation, shipping, and delivery of orders.

Customer support
To respond to questions, requests for information, complaints, exchanges, returns, and other contacts.

Customer account
To create and manage the customer account and provide associated functionalities.

Interior Design and proposal requests
To respond to requests related to Interior Design services, advice, and proposal preparation.

Marketing communications
To send newsletters, news, campaigns, or other commercial communications when there is an adequate legal basis, namely consent when required.

Website operation and security
To ensure proper operation, prevent fraud, protect website security, and improve our services.

Analysis and improvement
To understand website usage and improve the browsing experience, products, content, and performance, respecting applicable consent choices.

Compliance with legal obligations
To comply with tax, accounting, regulatory, and other obligations provided for in applicable legislation.

4. Legal basis

Personal data processing is carried out based on the legal grounds applicable to each situation, which may include:

• performance of a contract or pre-contractual steps;
• compliance with legal obligations;
• consent of the data subject;
• Kids R's legitimate interests, when these do not override the data subject's rights and freedoms.

When processing is based on consent, this may be withdrawn at any time, without compromising the lawfulness of processing carried out previously.

5. Shopify

The Kids R online store uses the Shopify platform for the provision and management of e-commerce.

Shopify may process certain personal data necessary for the operation of the platform, checkout, orders, security, and other associated services.

The relationship between Kids R and Shopify regarding data processing is subject to their respective terms and data protection agreements. Shopify also provides tools designed to help merchants respond to requests for access, correction, and deletion of data under the GDPR.

Shopify Consumer Privacy Policy

6. Data sharing

Kids R may share strictly necessary personal data with entities that provide essential services to the activity, including:

• Shopify and other technology providers;
• payment service providers;
• carriers and logistics operators;
• suppliers, when necessary for the execution or direct delivery of an order;
• hosting, security, and technological support service providers;
• email marketing and communication platforms;
• analytics, advertising, and marketing service providers, where applicable and in accordance with the user's consent preferences;
• accountants, consultants, and other professional service providers;
• public authorities, when there is a legal obligation.

This data will only be processed to the extent necessary for the provision of the respective services or for compliance with applicable obligations.

7. International data transfers

Some of our service providers may process or store personal data outside the European Economic Area.

When international data transfers occur, the protection mechanisms provided for in applicable legislation will be used.

The GDPR does not require all data to be stored in Europe, but it does require adequate safeguards when personal data of European residents is transferred outside the EEA.

8. Data retention

Personal data will only be retained for the period necessary for the purposes for which it was collected or for the periods required by applicable legislation.

Data relating to orders and invoicing may be retained for the periods necessary to comply with tax, accounting, and legal obligations.

Data used for marketing communications will be processed as long as the respective legal basis remains or until the data subject exercises the right to object or withdraw consent, where applicable.

9. Newsletter and commercial communications

When the user subscribes to the newsletter or agrees to receive commercial communications, Kids R may use the email address and other relevant data to send news, inspiration, launches, campaigns, and information about products or services.

The user can stop receiving these communications at any time through the unsubscribe link included in the emails or by contacting:

info@kidsr.pt

Shopify also provides specific settings for managing email/SMS marketing consent and a double opt-in option.

10. Cookies and similar technologies

The website uses cookies and similar technologies necessary for the operation of the store and may use other technologies for analysis, personalization, and marketing.

Whenever legally required, non-essential cookies and technologies will only be used after obtaining the respective consent.

The user can accept, refuse, or change their preferences through the cookie management mechanism available on the website.

Shopify allows configuring the cookie banner by region and, for markets in the European Economic Area, automatic privacy settings can manage the obtaining of consent for non-essential technologies.

11. Google, Meta, and other tools

Kids R may use analytics, advertising, and marketing services provided by third parties, such as Google and Meta, among others.

The use of these technologies will be subject to the settings implemented on the website, the user's consent preferences, and the policies of the respective providers.

In the case of Google tools used in the European Economic Area, the correct configuration of privacy choices and Google Consent Mode may be necessary for certain data to be used for personalized advertising.

12. Data subject rights

Under applicable law, the data subject may, as the case may be, exercise the following rights:

• access to their personal data;
• rectification of inaccurate or incomplete data;
• erasure of data;
• restriction of processing;
• objection to processing;
• data portability;
• withdrawal of consent, when processing is based on consent.

To exercise any of these rights, please contact:

info@kidsr.pt

We may request additional information strictly necessary to confirm the applicant's identity.

13. Data protection complaints

Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint with the competent supervisory authority.

In Portugal, the supervisory authority is the:

Comissão Nacional de Proteção de Dados — CNPD

National Commission for Data Protection

14. Security

Kids R adopts appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, disclosure, or undue destruction.

However, no information transmission or storage system can guarantee absolute security.

15. Data of minors

The Kids R store is intended for adults to purchase products and services.

We do not intentionally seek to collect personal data from children through the online store without the intervention or proper authorization of their legal representatives.

16. Links to external websites

The website may contain links to third-party websites or services.

Kids R does not control the privacy practices of these third parties, so we recommend consulting their respective privacy policies.

17. Changes to the Privacy Policy

Kids R may update this Privacy Policy whenever necessary, particularly due to legal, technological, or service changes.

The updated version will be made available on this website with an indication of the respective update date.

18. Contacts

For any questions related to privacy or personal data processing:

Kids R, Lda.
NIPC 516 656 856
Rua Joaquim Gomes Alves, 5
2665-183 Malveira, Portugal
Email: info@kidsr.pt
Phone: +351 916 871 197

Last updated: September 2026