Privacy policy

Last updated: 3 July 2026


Protecting your privacy and personal data is a priority for Bonabebe. This Privacy Policy explains how we collect, use, retain and protect your personal data when you use the Bonabebe website, make purchases in our online shop or contact us.


This Policy has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), Law No. 58/2019 and other applicable Portuguese legislation.

1. Data Controller


The controller responsible for processing your personal data is:


Bonissa Bebé Unipessoal, Lda.


NIPC: 514 148 055


Address: Rua Projectada à Matinha, Armazém F, 1950-327 Lisboa


E-mail: info@bonissa.pt


Phone: (+351) 929 013 051 (national mobile network call)


Should you have any questions relating to your personal data, you may contact us through the means indicated above.

2. Personal data we collect


Depending on how you use our website, we may collect the following categories of personal data:


Identification data

  • First name
  • Surname
  • E-mail address
  • Telephone number

Billing data

  • Address
  • Postcode
  • Town/City
  • Country
  • Tax Identification Number (NIF), when requested

Delivery data

  • Recipient's name
  • Delivery address
  • Contact telephone number

Order data

  • Products purchased
  • Purchase history
  • Order value
  • Payment methods used
  • Order status

Technical data

  • IP address
  • Browser type
  • Operating system
  • Device used
  • Language
  • Date and time of access
  • Technical logs

Browsing data

  • Products viewed
  • Products added to the basket
  • Wishlist (where applicable)
  • Browsing preferences
  • Cookies and similar technologies

Communications data


When you contact us through the contact form, e-mail, telephone or social media, we may process the data contained in those communications.

3. Purposes and legal basis for processing


Your personal data is only processed where there is a legal basis for doing so.


Purpose

Legal Basis

Management of the customer account

Performance of the contract

Order processing

Performance of the contract

Delivery of products

Performance of the contract

Invoicing

Compliance with a legal obligation

Management of returns and refunds

Performance of the contract

Customer support

Performance of the contract and legitimate interest

Fraud prevention

Legitimate interest

Accounting and tax management

Legal obligation

Compliance with legal obligations

Legal obligation

Service improvement

Legitimate interest

Direct marketing

Consent or legitimate interest, where legally permitted

Sending newsletters

Consent

Statistical studies

Legitimate interest

4. Marketing


If you have given your consent, we may use your e-mail address or other contact details to send you:


  • News;
  • Promotions;
  • Commercial campaigns;
  • New product launches;
  • Relevant information about Bonabebe.


You may withdraw your consent at any time via the link included in all newsletters or by contacting us at info@bonissa.pt.


Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Personalisation and recommendations


We may analyse your purchase history, browsing preferences and interests shown on our website in order to recommend products that may be of interest to you.


These operations are intended exclusively to personalise the user experience and do not produce any legal effects or involve solely automated decisions that significantly affect customers.


You may object to this processing at any time.

6. Sharing of personal data


Your data may only be disclosed where necessary for the provision of our services.


The following, among others, may have access to your data:


  • Shopify platform;
  • Hosting service providers;
  • Logistics operators and carriers;
  • Payment service providers;
  • Invoicing software;
  • Accountant;
  • Legal advisers;
  • Technology service providers;
  • E-mail marketing platforms;
  • Public authorities, where required by law.


All these providers are contractually bound to comply with the GDPR and to process the data only in accordance with our instructions.

7. Shopify platform


Our online shop uses the Shopify platform to host the website and manage orders, customer accounts and other features necessary for the shop's operation.


Shopify acts as a processor of personal data, implementing technical and organisational measures appropriate to data protection.


You can view Shopify's privacy policy at:


https://www.shopify.com/legal/privacy

8. Payments


Payments may be processed through specialised providers, namely:


  • Stripe
  • PayPal
  • MB WAY
  • Multibanco
  • Klarna
  • Other payment methods made available in the shop


When you use one of these payment methods, some of your personal data is transmitted directly to the relevant provider, solely for the purpose of processing the transaction.


Bonabebe does not store the complete bank card details used in payments.

9. International transfers


Some of our service providers, including Shopify, may process personal data outside the European Economic Area.


Whenever this occurs, we ensure that such transfers are only carried out where mechanisms legally recognised by the GDPR exist, namely:


  • Standard Contractual Clauses approved by the European Commission;
  • Adequacy decisions;
  • Other legally provided mechanisms.

10. Data retention


We retain data only for the period necessary to fulfil the purposes for which it was collected.


In general, the following periods apply:


Category

Period

Billing data

10 years

Orders

10 years

Customer account

For as long as the account remains active

Customer support requests

Up to 3 years

Marketing data

Until consent is withdrawn

Cookies

As set out in the Cookie Policy


Once the respective periods have elapsed, the data will be deleted or anonymised.

11. Security


Bonabebe implements appropriate technical and organisational measures to protect personal data against:


  • unauthorised access;
  • loss;
  • destruction;
  • alteration;
  • improper disclosure.


Among other measures, we use:


  • secure connections (HTTPS/TLS);
  • access controls;
  • authentication;
  • monitoring systems;
  • backups;
  • regular system updates.

12. Cookies


Our website uses cookies and similar technologies to:


  • ensure the website functions correctly;
  • remember preferences;
  • analyse website usage;
  • improve the user experience;
  • display personalised content and advertising, where consent has been given.


For more information, please see our Cookie Policy.

13. Rights of data subjects


Under applicable law, you may exercise the following rights:


  • Right of access;
  • Right to rectification;
  • Right to erasure;
  • Right to restriction of processing;
  • Right to object;
  • Right to data portability;
  • Right to withdraw consent;
  • Right not to be subject to solely automated decisions, where applicable.


You may exercise any of these rights via e-mail:


info@bonissa.pt

14. Complaints


If you consider that your rights have not been respected, you may lodge a complaint with:


Comissão Nacional de Proteção de Dados (CNPD – National Data Protection Commission)


Rua de São Bento n.º 148, 3.º


1200-821 Lisboa


Website: https://www.cnpd.pt

15. Minors


Our online shop does not intentionally collect personal data from children under the age of 16 without the authorisation of their legal representatives.

16. Changes to the Privacy Policy


Bonabebe may update this Privacy Policy whenever necessary, in particular to reflect legislative, technological or operational changes.


Whenever relevant changes are made, the updated version will be published on the website together with the corresponding update date.


We recommend that you review this Privacy Policy periodically.