Privacy Policy

This Privacy Policy explains how CardStage (by Bak Bak K-Store) (“we”, “us”) collects, uses, and shares your personal information when you visit or make a purchase from our website.

1) Who we are (Data Controller)
Store name: CardStage (by Bak Bak K-Store)
Company/legal name: Quental & Martins, Lda
Address: Rua José António Cruz 171, Braga, Portugal
Email: team@cardstage.market

2) What personal data we collect
Depending on how you use the site, we may collect:
• Contact details (name, email, phone)
• Shipping/billing address
• Order information (items purchased, order history)
• Payment confirmation details (payments are processed by payment providers; we do not store full card details)
• Customer support messages
• Device and usage data (IP address, browser type, pages viewed) via cookies/analytics (if enabled)

3) Why we use your data (purposes)
We use personal data to:
• Process and fulfill your orders
• Provide customer support and updates about your purchase
• Prevent fraud and improve site security
• Improve our store experience and performance
• Send marketing emails only if you opt in (you can unsubscribe at any time)

4) Legal bases (GDPR)
We process your data under one or more of the following:
• Contract performance (to fulfill your order)
• Legal obligations (e.g., accounting/tax requirements)
• Legitimate interests (fraud prevention, improving services)
• Consent (marketing emails/certain cookies)

5) Sharing your data
We share personal data only as needed to run the store, including with:
• Shopify (our ecommerce platform)
• Payment processors (to handle payments)
• Shipping carriers and logistics partners (to deliver your order)
• Analytics providers (if enabled)

6) International transfers
Some service providers may process data outside the EU/EEA. Where applicable, we rely on recognized safeguards (such as Standard Contractual Clauses) to protect your data.

7) Data retention
We keep order and account information as long as needed to provide services and comply with legal obligations. You can request deletion where applicable.

8) Your rights
Depending on your location, you may have rights to:
• Access your personal data
• Correct inaccurate data
• Request deletion
• Restrict or object to processing
• Data portability
• Withdraw consent (for consent-based processing)

To exercise these rights, contact us at: [privacy email]

9) Cookies
We use cookies to operate the store and (if enabled) measure performance and marketing. You can manage cookie preferences via your browser settings and any cookie banner on the site.

10) Complaints
If you believe your data protection rights have been infringed, you can contact the Portuguese supervisory authority (CNPD) or your local EU authority.