Privacy Policy

Last Updated: 30 September 2026

Welcome to DoriBoop. We operate the website www.doriboop.com, which is hosted by Squarespace.

We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have regarding your information.

1. Information We Collect

We collect information that you voluntarily provide to us, as well as data collected automatically when you visit our website.

  • Information You Provide: This includes information you enter into forms on our website, such as your name, email address, telephone number, and the message you send when using our Contact Form.

  • Automatically Collected Information (Squarespace Analytics & Cookies): When you visit our website, Squarespace automatically collects certain functional and analytical data. This includes your IP address, browser type, operating system, the pages you visit, the date and time of your visit, and referring URLs. This data is collected through cookies and similar tracking technologies.

2. How We Use Your Information

We process your personal data based on your consent, our legitimate business interests, or the performance of a contract with you. Specifically, we use your data to:

  • Provide, operate, and maintain our website.

  • Respond to your comments, questions, and customer support requests.

  • Send newsletters, marketing communications, or updates [Only if you have given your consent or opted in to receive them].

  • Analyse website traffic and user behaviour to improve our website design and services.

  • Monitor and prevent fraudulent transactions or unauthorised access.

3. How We Share Your Information

We do not sell your personal data. We only share your data with trusted third parties that help us operate our website and business:

  • Squarespace: As our website hosting provider, Squarespace hosts our data and provides us with website analytics. You can read Squarespace's Privacy Policy here: squarespace.com.

  • Legal Obligations: We may disclose your information if required by law or in response to valid requests from public authorities.

4. Cookies and Tracking Technologies

Our website uses cookies to function correctly and analyse website traffic.

  • Functional Cookies: These are necessary for the website to operate securely and correctly.

  • Analytical/Performance Cookies: These help us understand how visitors interact with our website.

You can manage your cookie preferences through the Cookie Banner displayed on our website or by adjusting your internet browser settings to refuse cookies.

5. Data Retention and Legal Bases for Processing

We will only retain your personal data for as long as strictly necessary to fulfil the purposes for which it was collected, including meeting any legal, accounting, or tax reporting requirements.

How and Why We Use Your Information (Legal Basis for Processing)

  • Invoicing and Tax Compliance (Legal Obligation): We process your billing information to comply with local tax laws. Specifically, this information is required to issue official electronic invoices (Recibos Verdes) through the Portuguese Tax and Customs Authority's portal. Under Article 6(1)(c) of the GDPR, this processing is strictly necessary to fulfil our legal tax obligations.

  • Contractual Performance: We use your data to manage contracts, process service requests, and handle IRS withholding tax where required by Portuguese tax legislation.

  • Government and Tax Authorities: We share your billing name, address, and tax identification number (NIF/VAT number) with the Portuguese Tax Authority (Portal das Finanças) strictly for the legally required issuance of invoices and tax compliance checks.

  • Retention of Financial Records: Please note that tax-related invoices containing your information must legally be retained for the mandatory retention period required under Portuguese tax law (normally 10 years). After this period, they will be deleted or securely disposed of.

6. Your Rights Under the GDPR

If you are a resident of the European Union (EU) or the European Economic Area (EEA), you have the following rights under the GDPR:

  • Right of Access: You can request copies of your personal data.

  • Right to Rectification: You can request the correction of any information you believe is inaccurate.

  • Right to Erasure (The Right to Be Forgotten): You can request the deletion of your personal data under certain conditions.

  • Right to Restrict or Object to Processing: You can object to the processing of your data or ask us to limit how we use it.

  • Right to Data Portability: You can request that the data we have collected be transferred to another organisation or directly to you.

  • Right to Withdraw Consent: If we rely on your consent to process your data, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details below.

7. Contact Us

If you have any questions about this Privacy Policy or wish to make a request regarding your personal data, please contact us using the following details:

  • Name/Business: DoriBoop

  • Email: hellobaby@doriboop.com