1. Who is responsible
The controller of the personal data described here is the trader operating this store under the name Cordoal, with registered office at Viela de Montezelo 85, 4610-336 Friande, Felgueiras, Porto, Portugal. Full legal identification is on the legal information page.
For anything to do with your data, write to support@loccalcado.baby. We answer within two business days and, for a formal request under the rights below, within one month.
2. What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Name, email, phone, delivery address | To process, ship and confirm an order, and to answer questions about it | Performance of the contract |
| Order contents, sizes, lasts, order reference | To fulfil the order, to handle a return, an exchange or a guarantee claim | Performance of the contract; legal obligation |
| Details entered at checkout before payment completes | To send you a payment link and to answer questions about an attempt that did not finish | Legitimate interest in completing a started order |
| Message content from the contact form | To answer your message | Consent, given by the checkbox on that form |
| Foot length and width, notes about your feet | To recommend a size and a last | Consent, given by the checkbox on that form |
| Email address for marketing | Occasional email about new patterns and care guidance | Separate consent, ticked independently of the order and withdrawable at any time |
| Invoicing and accounting records | To meet tax and accounting obligations | Legal obligation |
Consent for marketing is asked for separately from the consent needed to process an order. Refusing marketing has no effect on the order, and withdrawing it later does not affect the lawfulness of what was sent before.
We do not build profiles, we do not take automated decisions with legal effects, and we do not sell or rent data to anyone.
3. Foot measurements
A foot length and a width across the ball describe your body, so we treat them with more care than an address:
- they are collected only where you choose to send them;
- they are used only to recommend a size and a last;
- they are kept for at most 12 months from the request, then deleted;
- they are never used for marketing and never shared for it;
- you can ask us to delete them earlier and we do so without asking why.
4. How long we keep it
| Data | Kept for |
|---|---|
| Invoicing and accounting records | The period Portuguese tax and accounting law requires |
| Order and delivery records | 3 years from delivery, matching the legal guarantee, so a claim can be handled |
| Unfinished checkout details | 6 months, then deleted |
| Contact form messages | 24 months from the last exchange |
| Foot measurements | 12 months maximum |
| Marketing email address | Until you withdraw consent, then removed |
5. Who else sees it
Only those who need it to do a specific job for us:
- The carrier delivering your order — name, address, phone and the parcel reference.
- Our payment provider — it processes the payment and we never receive your full card details. It acts as a controller in its own right for the payment data it holds.
- Our email and hosting providers — under contracts that bind them to process data only on our instructions.
- Our accountant, for invoicing records, and public authorities where the law requires disclosure.
6. Transfers outside the EU
Data is processed inside the European Economic Area wherever possible. Where a provider processes data outside it, the transfer relies on an adequacy decision of the European Commission or on the standard contractual clauses, with supplementary measures where they are needed. Write to support@loccalcado.baby for the detail on a specific provider.
7. Your rights
Under the GDPR you may ask us to:
- confirm whether we hold data about you, and give you a copy;
- correct anything inaccurate or incomplete;
- erase data, where we no longer need it and no legal obligation requires us to keep it;
- restrict processing while a dispute about accuracy is resolved;
- receive the data you gave us in a structured, machine-readable format, or send it to another controller;
- object to processing based on our legitimate interest, explaining your situation;
- withdraw a consent at any time, with effect for the future.
Write to support@loccalcado.baby. We reply within one month, and we do not charge for it. We may ask you to confirm your identity where a request would otherwise let someone else see your data.
8. Complaining to the CNPD
If you believe we have handled your data unlawfully, you have the right to complain to the Portuguese supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD) — Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal.
You may also complain to the supervisory authority of the EU member state where you live or work. Complaining to an authority does not require you to raise it with us first, though we would rather have the chance to fix it.
9. Children
This store is not directed at children. We do not knowingly collect data from anyone under 13, and orders may not be placed by anyone under 13. A person aged 13 to 17 must give a parent or guardian's email at checkout so consent can be confirmed before the order is processed. If you believe a child has given us data, write to support@loccalcado.baby and we will delete it.
10. Security
The site is served over an encrypted connection. Access to order data is limited to the people who handle orders and support. Card details never reach our systems. Where a breach is likely to result in a high risk to your rights, we notify you and the CNPD within the periods the GDPR sets.
This site sets no advertising or analytics cookies. See the cookie policy for what is stored in your browser and why.