Privacy Policy

Last updated: July 20, 2026

This Privacy Policy explains how Klevuno collects, uses, stores, and shares personal data when you visit our store, make a purchase, create an account, subscribe to communications, or contact us.

1. Data Controller

The data controller for personal data is:

Merchant name: Pedro Farias
Trade name: Klevuno
Tax ID: 326943223
Address: Rua Nery Delgado 7 Lisboa-PT
Email: contato@klevuno.pt
Phone: +351 913 477 769

The website and online store are provided through the Shopify platform.

2. Personal Data We May Collect

Depending on how you use the store, we may collect the following categories of data:

Identification and Contact Data

• name;
• email address;
• phone number;
• billing address;
• delivery address.

Order-related Data

• products purchased;
• variants and quantities;
• purchase value;
• discounts applied;
• shipping method;
• order status;
• returns, complaints, and refunds history.

Payment Data

Payments are processed through Shopify and the payment providers presented at checkout.

Klevuno does not directly store full credit card details. We may receive limited information, such as payment confirmation, method used, transaction status, and the last digits of the card, when provided by the provider.

Technical and Browsing Data

We may automatically collect:

• IP address;
• device type;
• browser and operating system;
• language and time zone;
• pages and products viewed;
• actions performed on the website;
• origin of visit;
• cookie identifiers;
• information related to errors and security.

Communications

When you contact us, we may process:

• message content;
• data provided in the form;
• order number;
• photos or videos sent;
• communication history.

Marketing

When you give consent, we may process your email address and information about your preferences to send news, campaigns, products, and offers.

3. How We Collect Data

Data may be collected:

• directly from the customer;
• during checkout;
• through account creation;
• through website forms;
• through cookies and similar technologies;
• through Shopify and the providers necessary for store operation;
• through communications with customer support.

4. Purposes and Legal Basis

We process personal data for the following purposes:

Process and Deliver Orders

We use the data to confirm payments, prepare orders, arrange deliveries, send confirmations, and provide information about the purchase status.

Legal Basis: performance of the contract entered into with the customer.

Manage Returns, Refunds, and Warranties

We use the data to analyze return requests, damaged products, defects, exchanges, refunds, and warranty rights.

Legal Basis: performance of the contract and compliance with legal obligations.

Comply with Tax and Legal Obligations

We may store and use billing, order, and transaction data to comply with accounting, tax, consumer protection, and other legal requirements.

Legal Basis: compliance with legal obligation.

Prevent Fraud and Ensure Security

We may use technical information, transaction data, and risk indicators to protect customers, payments, accounts, and store operations.

Legal Basis: legitimate interest in preventing fraud and ensuring system security, without prejudice to data subjects' rights and freedoms.

Provide Customer Support

We use the provided data to respond to questions, requests, complaints, and communications.

Legal Basis: performance of the contract, pre-contractual measures, or legitimate interest in providing support.

Improve the Store

We may analyze website usage to correct errors, understand page performance, and improve customer experience.

When this analysis depends on non-essential cookies, processing will only be carried out after user consent.

Legal Basis: consent or legitimate interest, depending on the type of processing and technology used.

Send Marketing Communications

We will only send promotional communications when there is a valid legal basis, namely the data subject's consent.

Consent can be withdrawn at any time through the unsubscribe option in the messages or by contacting Klevuno.

Legal Basis: consent.

5. Sharing Personal Data

We may share data only to the extent necessary with:

• Shopify, responsible for the e-commerce platform;
• payment providers;
• suppliers responsible for order preparation;
• shipping companies and logistics partners;
• hosting, security, and technical support providers;
• analytics or advertising tools, when enabled and authorized;
• accountants, consultants, and professional providers;
• public, judicial, tax, or police authorities, when there is a legal obligation.

Recipients only receive the data necessary to provide their respective services.

For certain services directed directly to the consumer, such as Shop or Shop Pay, Shopify may process data as an independent controller, in accordance with its own Consumer Privacy Policy.

6. Shopify

The store uses Shopify for hosting, order processing, checkout, customer management, fraud prevention, and other functionalities necessary for e-commerce.

As a merchant, Klevuno is generally responsible for deciding how its customers' data is processed. Shopify acts as a data processor for various processing activities and may act as an independent controller for certain specific services it provides to the consumer.

7. International Transfers

Some providers may process data outside the European Economic Area.

When an international transfer occurs, we seek to ensure that legally recognized safeguards are used, such as:

• adequacy decisions;
• standard contractual clauses approved by the European Commission;
• data processing agreements;
• other safeguards provided for in applicable legislation.

Shopify states that it uses, where applicable, the adequacy decision relating to Canada and standard contractual clauses to protect international transfers.

8. Data Retention

We retain data only for the period necessary for the purposes for which it was collected.

In particular:

• order and billing data are retained for the periods required by accounting and tax legislation;
• support communications are retained as long as necessary to resolve the request and defend legal rights;
• data related to warranties is retained for the period necessary to manage consumer rights;
• marketing data is retained until consent is withdrawn or the subscription is cancelled;
• technical and security data are retained for the period necessary for fraud prevention, security, and incident resolution;
• cookie preferences are retained for the period indicated by the consent mechanism.

When data is no longer needed, it will be deleted or anonymized, unless there is a legal obligation to retain it.

9. Data Subject Rights

Under the GDPR, the data subject may, where applicable:

• request access to their data;
• request the rectification of inaccurate or incomplete data;
• request the erasure of data;
• request restriction of processing;
• object to certain processing activities;
• request data portability;
• withdraw consent;
• lodge a complaint with a supervisory authority;
• request human intervention when there is an exclusively automated decision with legal or significant effects.

The exercise of these rights is free of charge, except for manifestly unfounded or excessive requests.

To exercise a right, please contact us via the email or form indicated in this policy. We may request strictly necessary information to confirm the applicant's identity.

We will endeavor to respond within the applicable legal timeframe. The rights of access, rectification, erasure, restriction, portability, and objection are recognized and explained by the CNPD.

10. Complaints about Personal Data

If you believe that your data has not been processed correctly, we kindly ask that you first contact Klevuno so that we can try to resolve the situation.

The data subject retains the right to lodge a complaint with the:

CNPD — National Data Protection Commission (Comissão Nacional de Proteção de Dados)

The CNPD's updated contact details are available on its official website.

11. Automated Decisions and Fraud Prevention

Klevuno does not intend to make exclusively automated decisions that produce legal effects or significantly affect the customer.

Shopify and payment providers may use automated systems to identify risks, suspicious payments, or fraud attempts.

If a legitimate transaction is refused or flagged, the customer can contact us to request clarification and analysis of the situation.

12. Cookies and similar technologies

We use cookies and similar technologies to:

• enable the technical operation of the store;
• maintain the shopping cart;
• process checkout;
• save preferences;
• protect accounts and payments;
• measure website performance;
• present personalized marketing, when authorized.

Strictly necessary cookies can function without consent, as they are indispensable for services requested by the user, such as the shopping cart and checkout.

Non-essential analytical, advertising, personalization or tracking cookies should only be used after the visitor's consent.

The user can accept, refuse or change their preferences via the banner or the privacy settings available on the website. Withdrawing consent should be as simple as giving it.

The exact list and duration of cookies may change when applications are installed, removed or updated. For this reason, the information presented in the banner and in the store's privacy settings must be kept up to date.

13. Security

We adopt technical and organizational measures designed to protect data against:

• unauthorized access;
• misuse;
• loss;
• alteration;
• improper disclosure;
• destruction.

Despite these measures, no Internet-connected system can guarantee absolute security.

14. Minors

The store is not intended for minors under 18 who wish to make purchases without authorization from their legal guardian.

We do not intentionally collect data from children. If a guardian believes that a minor has provided personal data improperly, they should contact us for analysis and eventual deletion.

15. External links

The website may include links to third-party services or pages.

Klevuno does not control the privacy practices of these pages. We recommend that the user consult their respective policies before providing personal data.

16. Changes to the Privacy Policy

This policy may be updated to reflect changes:

• legal;
• technical;
• operational;
• in the providers used;
• in the forms of data processing.

The updated version will be published on this page with an indication of the date of the last update.

17. Contact

To clarify doubts, exercise rights or submit a question related to personal data, contact:

Klevuno
Email: contato@klevuno.pt
Address: Rua Nery Delgado 7 Lisbon-PT
Form: available on the Contact page.