Date last updated: October 1st, 2025
Date of entry into force: October 1st, 2025

1. introduction
Abelhinhas do Digital, Lda, operating under the brand name Baby Kangaroo, with registered offices at Estrada da Penha, nº 150C, 8005-138 Faro, Portugal, tax number 516 691 775, is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website or use our services.
This policy complies with the European Union's General Data Protection Regulation (GDPR) and applicable Portuguese legislation.

2. Data Controller
Abelhinhas do Digital, Lda. (operating under the brand Baby Kangaroo)
Address: Estrada da Penha, nº 150C, 8005-138 Faro, Portugal
Email: geral@babykangaroo.pt
Phone: +351 910 027 244
NIF: 516 691 775

3. Personal Data We Collect

3.1 Data provided directly by you
When you use our services, we may collect the following personal data that you provide voluntarily:

Registration and Account Data:

• Full name

• Email address

• Password (encrypted)

• Date of birth (optional)

• Phone number

Billing and shipping data:

• Full name

• Billing address

• Shipping address

• Postal code

• City and country

• Phone number

• TIN (if requested)

Payment details:

• Credit/debit card information (processed by secure third parties)

• Transaction history

• Payment preferences

Communication data:

• Messages sent via the contact form

• Online chat conversations

• Emails exchanged

• Product reviews and comments

3.2 Automatically Collected Data

Navigation data:

• IP address

• Browser type and version

• Operating system

• Pages visited on our website

• Time spent on pages

• Date and time of visits

• Referrer website

Cookies and Similar Technologies:

• Session and persistent cookies

• Tracking pixels

• Web beacons

• Website analysis data

4. Purposes of data processing
We use your personal data for the following purposes:

4.1 Execution of contracts

• Processing and managing your orders

• Delivering products

• Processing payments and refunds

• Providing customer support

• Manage your user account

4.2 Legitimate interests

• Improving the user experience on the website

• Carry out statistical and market analysis

• Preventing fraud and illegal activities

• Ensuring website security

• Optimize technical performance

4.3 Consent

• Sending newsletters and promotional communications

• Personalize content and offers

• Direct marketing

• Using non-essential cookies

4.4 Compliance with Legal Obligations

• Keeping accounting records

• Complying with tax obligations

• Responding to requests from competent authorities

• Retain data for auditing purposes

5. Legal Basis for Treatment
The processing of your personal data is based on the following legal grounds:

• Execution of contract: To process orders and provide services

• Consent: For marketing and non-essential cookies

• Legitimate interest: To improve services and prevent fraud

• Legal obligation: To meet tax and accounting requirements

6. Sharing Data with Third Parties
We may share your personal data with the following categories of third parties:

6.1 Service providers

• Carriers: CTT, DPD, MRW (for parcel delivery)

• Payment processors: Stripe, PayPal, Multibanco

• Hosting providers: For website hosting

• Email services: For sending communications

• Analysis tools: Google Analytics, Facebook Pixel

6.2 Competent Authorities
When legally required or to protect our legitimate rights.

6.3 Business partners
Only with your explicit consent and for specific purposes.

7. International data transfers
Some of our service providers may be located outside the European Economic Area (EEA). In these cases, we guarantee that:

• There are adequacy decisions by the European Commission

• Appropriate safeguards are implemented (standard contractual clauses)

• Your explicit consent is obtained when necessary

8. Data Retention Period
We only keep your personal data for as long as is necessary for the purposes for which it was collected:

• Account details: Until you request account deletion

• Order data: 7 years (legal accounting obligation)

• Marketing data: Until consent is withdrawn

• Browsing data: 26 months (analytical cookies)

• Customer support data: 3 years after the last interaction

9. Your Rights
You have the following rights with regard to your personal data:

9.1 Right of Access - You can request information about the personal data we process about you.
9.2 Right of rectification - You can request the correction of inaccurate or incomplete personal data.
9.3 Right to erasure - You can request the deletion of your personal data in certain circumstances.
9.4 Right to Restriction of Processing - You can request the restriction of the processing of your data in certain situations.
9.5 Portability rights - You can request the transfer of your data to another data controller.
9.6 Right of Opposition - You can object to the processing of your data for direct marketing purposes.
9.7 Right to Withdraw Consent - You can withdraw your consent at any time, without affecting the lawfulness of the previous processing.
9.8 How to exercise your rights - To exercise any of these rights, please contact us at:

• Email: geral@babykangaroo.pt

• Contact form on the website

• Postal mail to our address
  We will reply within 30 days.

10. Security measures
We implement appropriate technical and organizational measures to protect your personal data:

10.1 Technical measures

• SSL/TLS encryption for data transmission

• Encryption of sensitive data at rest

• Firewalls and intrusion detection systems

• Secure and regular backups

• Regular security updates

10.2 Organizational measures

• Regular training for staff on data protection

• Internal security policies

• Need-based access control

• Confidentiality agreements with employees

• Regular safety audits

11. Cookies
We use cookies and similar technologies to improve your experience on our website. For detailed information, please see our [Cookie Policy].

11.1 Types of Cookies

• Essential cookies: Necessary for the functioning of the website

• Performance cookies: For analysis and optimization

• Functionality cookies: To personalize the experience

• Marketing cookies: For targeted advertising

11.2 Cookie management
You can manage your cookie preferences via your browser settings or our preference center.

12. Minors
Our services are not intended for minors under the age of 16. We do not knowingly collect personal data from minors without the consent of their parents or legal guardians.
If you become aware that we have collected data from a minor without proper consent, please contact us immediately so that we can delete it.

13. Changes to this Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via:

• Notice on the website

• Email for registered users

• Notification when you next visit the website
  The updated version will come into force on the date indicated at the top of this policy.

14. Complaints
If you consider that the processing of your personal data violates the applicable legislation, you can lodge a complaint with the competent supervisory authority:
National Data Protection Commission (CNPD)
Rua de São Bento, 148-3º
1200-821 Lisbon
Phone: 213 928 400
Email: geral@cnpd.pt
Website: www.cnpd.pt

15. Contact
For questions related to data protection or to exercise your rights, please contact us:
Email: geral@babykangaroo.pt
Phone: +351 910 027 244
Address: Estrada da Penha, nº 150C, 8005-138 Faro, Portugal
Hours: Monday to Friday, 9 a.m. to 6 p.m.

This Privacy Policy has been drawn up in accordance with the GDPR and applicable Portuguese legislation. For further information, please do not hesitate to contact us.