Privacy policy
Last updated: April 22, 2026
- Controller
This Privacy Policy explains how André Guilherme Graça dos Santos (trading as Paws&PistonsMC™) collects and uses personal data through https://www.pawsandpistonsmc.com. The store is hosted on Shopify. When you visit the store or make a purchase, Shopify may process personal data to provide, secure, improve, and support Shopify services. Where Shopify Network Intelligence and related enhanced Shopify services are enabled, Shopify may also process relevant customer and visitor data in connection with services informed by interactions with our store, with other merchants, and with Shopify, subject to applicable law and your consent choices where consent is required.
Controller contact details: Travessa do Vale de Caminhos 54, 4605-138 Mancelos, Amarante, Porto, Portugal | support@pawsandpistonsmc.com.
- Categories of personal data we collect
We may collect the following categories of personal data:
• identification and contact data, such as name, billing address, delivery address, email address, and telephone number;
• order and transaction data, such as products purchased, order value, payment status, and delivery details;
• customer-service data, such as messages, complaints, warranty requests, and return history;
• technical and usage data, such as IP address, browser type, device identifiers, approximate location derived from IP, cookies, and website interaction data;
• marketing-preference data, such as newsletter subscription status, consent records, and campaign engagement data;
• user-generated content or customisation data that you choose to provide, such as names, text, images, or pet-related content for personalisation requests.
- Sources of personal data
We collect personal data directly from you, automatically through your use of the website, and in some cases from third parties involved in payment processing, fraud prevention, logistics, email-marketing operations, and fulfilment.
- Purposes and legal bases
We process personal data for the following purposes and legal bases:
• to take steps at your request before a contract and to process orders, payments, dispatch, delivery, returns, and customer support — contract performance;
• to comply with tax, accounting, invoicing, consumer-law, and record-keeping obligations — legal obligation;
• to prevent fraud, secure the store, manage disputes, enforce our legal position, and protect our operations — legitimate interests;
• to send marketing emails, personalise advertising where required, and place non-essential cookies or similar technologies where consent is required — consent;
• to establish, exercise, or defend legal claims — legitimate interests and, where applicable, legal obligation.
- Recipients and processors
We may share personal data, strictly on a need-to-know basis, with service providers and partners that support operation of the store, such as:
• Shopify (store platform, checkout infrastructure, hosting-related store functions, and related merchant services).
• Shopify Payments (payment processing and related anti-fraud / payment operations).
• Printful (order fulfilment, print-on-demand production, packing, and shipment coordination).
• Carrier partners appointed by Printful from time to time for the relevant destination and service level.
• Shopify Forms (newsletter and subscriber-capture forms, related consent collection, and associated storefront functionality where enabled).
• Shopify Messaging (email campaign delivery, subscriber list management, consent-status handling, and related messaging operations; SMS communications only if separately enabled by the Seller).
• Moloni (invoicing and accounting-support functions).
The store is hosted by Shopify. Depending on the services and settings enabled from time to time and, where required, your consent choices, Shopify may also process certain visitor and customer data to provide, secure, improve, and support Shopify services. Where Shopify Network Intelligence and related enhanced Shopify services are enabled, Shopify may securely use relevant customer data together with data from other merchants to generate insights and support improved products and personalisation, improved store performance, and better ad targeting. No other merchant can directly access your data through this process. We may also disclose personal data where required by law, regulatory request, court order, or where reasonably necessary to protect rights, safety, property, or legal claims.
- International transfers
Some service providers may process personal data outside the European Economic Area. Where that occurs, we aim to ensure that appropriate safeguards are in place, such as an adequacy decision, standard contractual clauses, or another lawful transfer mechanism, as applicable.
- Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including compliance, record-keeping, dispute management, and legal defence needs.
Indicative retention periods:
• order and invoice data: 10 years, or longer where applicable law or a pending dispute, claim, or audit requires longer retention
• customer-service and complaint records: up to 3 years after the matter is closed, unless a longer period is reasonably necessary for legal claims, compliance, or dispute management
• marketing-consent records: until consent is withdrawn and, thereafter, for up to 3 years where reasonably necessary to demonstrate compliance with consent obligations
• cookie and consent-preference data: for the periods identified in the cookie settings, provider configuration, or applicable platform settings, subject to ongoing review and the principle of storage limitation.
- Your rights
Subject to applicable law, you may have the right to request access to your personal data, rectification, erasure, restriction of processing, objection to processing, data portability, and withdrawal of consent where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
If Shopify Network Intelligence and related enhanced Shopify services are enabled, you can also learn more about Shopify’s processing and exercise certain privacy choices through Shopify’s Consumer Privacy Policy and Shopify’s privacy portal.
Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy | Shopify privacy portal: https://privacy.shopify.com/
- Complaints
If you believe your data has been processed unlawfully, you may contact us first at support@pawsandpistonsmc.com and you also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD).
- Whether data is required
Some personal data is necessary for us to conclude and perform the contract. If you do not provide the required information, we may be unable to accept or fulfil your order.
- Profiling and marketing
We do not use personal data for legally significant automated decision-making unless we expressly inform you otherwise.
We may use browsing, purchase, and engagement data for audience segmentation, campaign measurement, and marketing personalisation where permitted by law and based on the appropriate legal basis. Where Shopify Network Intelligence and related enhanced Shopify services are enabled, Shopify may also use relevant data, subject to applicable law and your consent choices where required, to support personalisation, store-performance improvement, and advertising-related services described by Shopify.
- Security
We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, misuse, or unlawful disclosure. No online system can be guaranteed to be completely secure.
- Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version published on the store will apply from the date of publication.
- Contact
For privacy-related requests, contact: support@pawsandpistonsmc.com.