Privacy policy

Privacy Policy — Chic Carry

Chic Carry ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share and protect your personal data when you visit our website, make a purchase, or otherwise interact with us, and explains your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR), where applicable.

1. Who we are

Chic Carry is operated by:

Trading name: Chic Carry
Legal owner: Kelly Nayara Pereira de Campos
Tax ID (NIF): 335190340
Registered address: Avenida de Fernão de Magalhães, 394, 5º Andar Esq, 4300-189 Porto, Portugal
Contact phone: +351 929 003 454
Contact email: support@chiccarry.co

We are the "data controller" responsible for your personal data. Although our business is registered in Portugal, we sell to customers in the United Kingdom, and we comply with UK data protection law in respect of our UK customers, in addition to EU GDPR.

2. What personal data we collect

We may collect and process the following categories of personal data:

Identity data: name, title, date of birth (only if relevant to a purchase).
Contact data: billing address, delivery address, email address, phone number.
Order data: products purchased, order value, payment method (we do not store full card details — these are processed by our payment provider).
Technical data: IP address, browser type, device information, cookies and similar technologies.
Marketing data: your preferences in receiving marketing from us and your communication preferences.
Usage data: information about how you use our website.

3. How we collect your data

Directly from you, when you create an account, place an order, subscribe to our newsletter, or contact customer support.
Automatically, through cookies and similar technologies as you browse our website.
From third parties, such as payment processors, shipping carriers, and analytics or advertising partners (e.g. Google, Meta).

4. How we use your personal data and legal basis

Purpose	Legal basis
To process and deliver your order	Performance of a contract
To manage your account	Performance of a contract
To send order updates and customer service communications	Performance of a contract / Legitimate interest
To send marketing communications (with consent)	Consent
To improve our website and services	Legitimate interest
To prevent fraud	Legitimate interest / Legal obligation
To comply with tax, customs and accounting obligations	Legal obligation

5. Sharing your data

We may share your personal data with:

Payment processors, to securely process your payment.
Shipping and logistics partners, to deliver your order, including customs authorities where required for international shipping.
IT and marketing service providers (e.g. email platform, advertising platforms such as Google Ads and Meta Ads), acting under our instructions.
Tax and regulatory authorities, where legally required.

We do not sell your personal data to third parties.

6. International data transfers

As our business is based in Portugal (European Union) and we sell to customers in the United Kingdom, your data may be transferred between the UK and the EU/EEA. The UK has an adequacy decision in place with the EU (and vice versa), meaning such transfers are permitted without additional safeguards. Where we use service providers outside the UK/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

7. Data retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, and generally for up to 6 years after your last interaction with us, in line with UK tax and accounting record-keeping requirements.

8. Your rights

Depending on your location, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request erasure of your data ("right to be forgotten").
Object to or restrict certain processing.
Request data portability.
Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at support@chiccarry.co.

UK customers: You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk.

EU customers: You have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

9. Cookies

Our website uses cookies and similar technologies to improve your browsing experience, analyse site traffic, and personalise content and ads. When you visit our Site, you can accept, decline, or manage your cookie preferences through our cookie consent banner. You can also manage or disable cookies at any time through your browser settings. Disabling certain cookies may affect the functionality of the Site.

10. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.