Privacy policy

Traces of Me – Privacy Policy

Last updated: December 3, 2025

This Privacy Policy describes how tracesofmetm.com (“Traces of Me”, “we”, “us”, or “our”) collects, uses, and protects your Personal Information when you visit or make a purchase from our website (the “Site”).

1. Personal Information We Collect

We only collect data that is necessary for the functioning of our store, legitimate business interests, communication with customers, marketing (with consent), and compliance with legal obligations. “Personal Information” means any information that can identify you directly or indirectly.

1.1 Device Information

Collected automatically when you use the Site.

Examples: IP address, browser version, time zone, cookie data, pages viewed, search terms, and interactions with the Site.

Purpose: To load the Site correctly for you, perform analytics, prevent fraud, and improve the user experience.

Source: Cookies, log files, web beacons, tags, pixels, and Shopify analytics tools.

Shared with: Shopify and Klaviyo as our e-commerce and CRM/analytics providers.

1.2 Order Information

Collected when you make a purchase or attempt to make a purchase.

Examples: name, billing address, shipping address, email address, phone number, payment information (including credit card details or other payment data).

Purpose: To process your orders, take payment, arrange for shipping, provide invoices and order confirmations, communicate with you about your order, and screen orders for potential risk or fraud.

Source: Directly from you (checkout, account, email, or other forms).

Shared with: Shopify (store platform), Stripe, PayPal, Ifthenpay (payment gateways), Shiptimize and shipping carriers such as DHL/Nacex (for logistics).

1.3 Customer Support Information

Purpose: To provide customer support and answer your questions.

Source: Directly from you via email, WhatsApp, web forms, or phone.

1.4 Marketing Communications (Email, SMS, WhatsApp)

We collect your contact information when you opt in to receive newsletters, campaigns, or mobile communications.

Purpose: To send marketing campaigns, newsletters, exclusive offers, seasonal content, cart reminders, and information about our products and services.

Source: Newsletter subscription forms, pop-ups, checkout consent boxes, lead ads, or any other explicit opt-in mechanism.

Legal basis: Your consent, which you may withdraw at any time.

Shared with: Klaviyo (CRM, email, SMS and WhatsApp automation) and WhatsApp Business API providers.

2. Mobile Messaging (SMS & WhatsApp)

As part of our communications, we may send transactional or promotional messages via SMS/text and WhatsApp to the mobile phone number you provide, if you have given your consent for marketing or where messages are strictly necessary for service purposes.

Data collected: mobile phone number, message content (limited to what is required to operate the service), delivery status, read receipts, and interaction metrics.

Transactional messages may include: order confirmations, shipping updates, account or security alerts, and service notifications.

Promotional messages may include: new collections, special offers, campaign announcements, and other marketing content, only if you have opted in.

Legal basis:

  • Contractual necessity / legitimate interest for transactional and service messages directly related to your orders and account.
  • Consent for SMS/WhatsApp marketing communications.

Opt-out:

  • For SMS/Text: reply STOP to any message or use the unsubscribe link where available.
  • For WhatsApp: reply with STOP or UNSUBSCRIBE in the WhatsApp conversation, or use WhatsApp’s own tools to mute or block the channel.
  • You may also contact us at customer.service@tracesofmetm.com to request removal.

Opting out of marketing messages will not prevent us from sending essential service messages when necessary (e.g. about your orders, security or legal notices).

Processors involved: Klaviyo, WhatsApp Business API providers, and telecommunications partners, who act only on our instructions and do not use your data for their own purposes.

3. How We Use Your Personal Information

In general, we use your Personal Information to:

  • Provide, operate, and maintain our online store;
  • Process your orders and payments, and manage shipping and returns;
  • Communicate with you about orders, support requests, and updates;
  • Send marketing communications where you have given your consent;
  • Improve our products, services, and website experience;
  • Detect and prevent fraud or other unlawful activities;
  • Comply with our legal, tax, and regulatory obligations.

We do not sell your Personal Information. We only share it with trusted processors when necessary to fulfil the purposes described above.

4. Data Processors and Sharing

Traces of Me may use third-party providers (“Processors”) to process User Data on our behalf and strictly under our instructions, in accordance with this Privacy Policy and applicable law.

These Processors:

  • May not transfer your data to other entities without our prior written authorization;
  • May not engage other sub-processors without our permission;
  • Are contractually required to implement appropriate technical and organizational measures to protect your data.

Examples of Processors we use include:

  • Shopify – store platform and analytics;
  • Klaviyo – CRM, email, SMS and WhatsApp automation;
  • Stripe, PayPal, Ifthenpay – payment processing;
  • Shiptimize, DHL, Nacex – logistics and shipping;
  • WhatsApp Business API providers – delivery of WhatsApp messages.

5. Data Collection Channels

We may collect data through:

  • Direct collection: via the Site, email, WhatsApp, phone, or in-person interactions;
  • Indirect collection: via partners, group companies, marketing platforms, or official entities.

6. Legal Basis for Processing (GDPR)

Traces of Me only processes Personal Information where a legal basis exists under the GDPR, including:

  • Your consent for one or more specific purposes (e.g., newsletters, SMS/WhatsApp marketing);
  • Processing that is necessary for the performance of a contract (e.g., order fulfilment);
  • Processing that is necessary for compliance with a legal obligation;
  • Processing that is necessary to protect vital interests of you or another person;
  • Processing that is necessary for legitimate interests pursued by Traces of Me or by a third party, except where overridden by your rights and freedoms.

When we rely on your consent, you may withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

7. Data Retention

We retain Personal Information only for as long as necessary to fulfil the purposes described in this Policy or as required by law (for example, tax and accounting requirements).

Retention periods may vary depending on the type of data and purpose, but in general:

  • Order and billing data are kept as long as required by applicable law;
  • Customer account data is kept while your account remains active or until you request deletion;
  • Marketing data (email, SMS, WhatsApp) is kept until you withdraw your consent or we consider it inactive;
  • Messaging logs are kept for a limited period necessary for security, operational and compliance purposes.

After the applicable retention period, data is securely deleted or anonymized.

8. Security Measures

We implement appropriate technical and organizational measures to protect your Personal Information against unauthorized access, alteration, disclosure, or destruction.

These measures include, among others:

  • Encryption and pseudonymization where appropriate;
  • Access control and staff training on data protection;
  • Regular security audits and monitoring;
  • Use of secure hosting and infrastructure via Shopify;
  • Backups and disaster recovery mechanisms.

9. International Transfers

Personal Information may be transferred outside the European Economic Area (EEA), for example when processed by Shopify or other providers located in third countries.

When we transfer your data outside the EEA, we ensure that adequate safeguards are in place, such as:

  • Adequacy decisions by the European Commission;
  • Standard Contractual Clauses (SCCs);
  • Other mechanisms approved under the GDPR.

For more information on how data transfers comply with the GDPR, you can refer to Shopify’s GDPR resources.

10. Your Rights (GDPR)

If you are a resident of the EEA, you have the right to:

  • Access the Personal Information we hold about you;
  • Request the correction or update of inaccurate or incomplete data;
  • Request the erasure of your Personal Information in certain circumstances;
  • Request restriction of processing;
  • Object to processing based on legitimate interests or direct marketing;
  • Request data portability to another service provider;
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us at customer.service@tracesofmetm.com.

11. Cookies

A cookie is a small text file placed on your device when you visit our Site. We use cookies to remember your preferences, keep your session active, understand how you use the Site, and improve our services.

Cookies used on our Site may include:

  • Functional cookies (necessary for the functioning of the store);
  • Performance and analytics cookies (Shopify, Klaviyo, etc.);
  • Advertising and social media cookies.

You can manage cookies through your browser settings. Blocking or deleting cookies may affect the functioning of some parts of the Site.

For more detailed information about cookies and tracking technologies used by Shopify, please refer to Shopify’s cookie documentation or the cookie banner/settings on our Site.

12. Do Not Track

There is currently no consistent industry standard regarding how to respond to “Do Not Track” (DNT) signals, so we do not modify our data collection or usage practices when we detect such a signal.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates the most recent revision.

If changes are substantial, we will provide a notice on the Site or via email where appropriate.

14. Contact

For more information about our privacy practices, or if you have questions or complaints, please contact us:

Email: customer.service@tracesofmetm.com
Address: Avenida do Brasil 723, 2750-309 Cascais, Portugal