Last updated: 21 August 2026
This policy explains what personal data OurMoment collects, why we collect it, and what rights you have over it. We are the data controller.
We sell to customers in Europe and the United States. The core of this policy applies to everyone; the sections marked Europe and United States set out the extra rights you have depending on where you live.
Controller: Lucas Fabricio Alves de Freitas, trading as OurMoment Address: Rua da Costeira, Mire de Tibães, 4700 Braga, Portugal Email: ourmoment.shop@gmail.com VAT / Tax ID: 267888354
What we collect
When you place an order: your name, email address, billing address, shipping address, phone number, and the contents of your order.
When you personalize a product: the names, dates, and text you enter, and any photographs you upload. These are personal data, and in the case of photographs of people, they may reveal information about others too. Only upload photographs you have the right to use.
When you contact us: your name, email address, and the content of your message.
When you browse: your IP address, browser type, pages visited, and cookie data. See our cookie banner for the full list and to manage your choices.
We do not see or store your full payment card details. Payments are processed by Stripe, who receive them directly.
Why we collect it
| Purpose | Why we are allowed to |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Sending order and shipping confirmations | Performance of a contract |
| Sending your design to our print partner | Performance of a contract |
| Preventing fraud and abuse | Legitimate interest |
| Analytics and improving the site | Consent |
| Marketing emails | Consent, which you may withdraw at any time |
| Keeping accounting and tax records | Legal obligation |
Europe. The right-hand column is our lawful basis under Article 6 GDPR.
Who we share it with
We share only what is necessary, with:
- Printful and its fulfillment centers — your name, shipping address, and your design files, so the item can be printed and shipped to you.
- Customily — your personalization data and uploaded images, to generate the print file.
- Stripe — payment processing.
- EasyWP (Namecheap) — website hosting.
- Brevo — order and account emails, and marketing emails where you have consented. Brevo is an EU company and stores data in the EU.
- Google Analytics — usage statistics, only with your consent.
We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
Where your data goes
We fulfil orders from facilities on both sides of the Atlantic, so your data may be processed in the United States and in the European Union, depending on where your order is printed and shipped from.
Europe. Where your data is transferred outside the EEA, the transfer is covered by an adequacy decision or by Standard Contractual Clauses.
How long we keep it
- Order and invoice records: 10 years, as Portuguese tax law requires.
- Uploaded photographs and design files: 90 days after your order ships, so we can reprint if something goes wrong. Then deleted.
- Contact form messages: 2 years.
- Marketing consent: until you withdraw it.
- Analytics data: 14 months.
Your rights — everyone
Wherever you live, you can ask us to:
- Access the personal data we hold about you
- Correct data that is inaccurate or incomplete
- Delete your data, where we have no overriding legal obligation to keep it
- Withdraw consent at any time, where processing is based on consent
- Stop marketing emails, via the unsubscribe link or by emailing us
Email ourmoment.shop@gmail.com to exercise any of these. We will not treat you differently for asking.
Your rights — Europe
Under the GDPR you additionally have the right to:
- Restrict or object to our processing
- Portability — receive your data in a machine-readable format
- Lodge a complaint with your national data protection authority
We will respond to any request within one month.
If you believe we have mishandled your data, you may complain to the supervisory authority in your country of residence, or to ours: the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt
Your rights — United States
If you are a resident of California (and, in substance, of other states with comparable privacy laws), you additionally have the right to:
- Know what personal information we collect, use and disclose
- Delete the personal information we hold about you
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information — we do not sell or share it, so there is nothing to opt out of
- Non-discrimination — we will not deny you service, charge you a different price, or give you a lower quality of service for exercising any of these rights
We will respond to a verifiable request within 45 days, and may extend once where the request is complex.
Cookies
We use cookies that are strictly necessary for the site and the cart to work, and — only with your consent — cookies for analytics. You can manage your choices at any time through the cookie banner.
Europe. Non-essential cookies are set only after you opt in.
United States. Our banner is configured for opt-out, as US law allows; you may decline non-essential cookies at any time.
Children
Our store is not directed at children. We do not knowingly collect data from children under 16 (Europe) or under 13 (United States). If you believe a child has given us personal data, email us and we will delete it.
Changes
We may update this policy. The “last updated” date at the top will always tell you when. Material changes will be announced on the site.