PRIVACY POLICY

PRIVACY POLICY

Last updated: October 16, 2026

This Privacy Policy explains how Obliquebubble Design & Development, Unipessoal, LDA, operating the Goouup brand, collects, uses, stores and protects personal data when you visit our website or purchase our digital products.

Data controller

Obliquebubble Design & Development, Unipessoal, LDA
Registered in Portugal
VAT/NIPC number: [VAT/NIPC number]
Registered address: Rua Carlos de Oliveira, 56, Aroeira
Contact email: obliquebubble@gmail.com

1. PERSONAL DATA WE COLLECT

Depending on how you use our website, we may collect the following categories of personal data:

  • Contact information: such as your name and email address.

  • Order information: such as products purchased, order history and transaction details.

  • Billing information: information required to process and document your purchase.

  • Technical and usage information: such as IP address, browser type, device information, pages visited and interactions with the website.

  • Communication data: information you provide when contacting customer support or sending us a request.

  • Marketing preferences: whether you have consented to receive marketing communications, where applicable.

Payment card details are processed by the payment provider used at checkout. We do not intentionally store full payment card details on our own systems.

2. HOW WE USE YOUR DATA

We use personal data for the following purposes:

  • To process purchases and provide access to digital products.

  • To send order confirmations and essential service communications.

  • To respond to enquiries and provide customer support.

  • To maintain the security and functionality of our website.

  • To meet applicable accounting, tax and other legal obligations.

  • To understand website performance and improve our services, where permitted.

  • To send marketing communications where we have a valid legal basis, including consent where required.

We do not use personal data for purposes incompatible with those described in this Policy.

3. LEGAL BASES FOR PROCESSING

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases, as applicable:

  • Contract: to process orders and provide purchased products.

  • Legal obligation: to comply with applicable accounting, tax and other legal requirements.

  • Legitimate interests: to protect our website, prevent misuse, respond to certain enquiries and improve our services, where these interests do not override your rights.

  • Consent: for activities that require consent, such as certain non-essential cookies and marketing communications.

Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect processing that took place lawfully before the withdrawal.

4. THIRD-PARTY SERVICE PROVIDERS

We use third-party providers where necessary to operate our website and business. Depending on the services enabled, these may include:

  • Squarespace: website hosting, online store functionality, order management and related website services.

  • Stripe and/or other payment providers enabled at checkout: payment processing and transaction security.

  • Analytics providers: to understand website traffic and performance, if enabled.

  • Email or customer support providers: to deliver transactional communications and respond to enquiries, where used.

These providers process personal data according to their respective roles, contractual arrangements and applicable privacy policies.

We do not sell personal data to third parties.

5. INTERNATIONAL DATA TRANSFERS

Some service providers may process or store personal data outside the European Economic Area.

Where personal data is transferred internationally, we rely on an applicable legal transfer mechanism and safeguards required by data protection law.

Further information about a particular transfer may be requested using the contact details provided below.

6. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including fulfilling orders, providing customer support, resolving disputes and complying with legal obligations.

Certain transaction and accounting records may need to be retained for the periods required by applicable law.

Where data is no longer needed, we will delete it or otherwise handle it in accordance with applicable data protection requirements.

7. YOUR DATA PROTECTION RIGHTS

Subject to the conditions and limitations established by applicable law, you may have the right to:

  • Access your personal data.

  • Request correction of inaccurate data.

  • Request erasure of your data.

  • Request restriction of processing.

  • Receive certain data in a portable format.

  • Object to certain processing activities.

  • Withdraw consent where processing is based on consent.

  • Lodge a complaint with the competent data protection authority.

In Portugal, the competent supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).

To exercise your rights, contact us at [Privacy contact email]. We may need to verify your identity before responding.

8. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies that are necessary for its operation. Depending on your preferences and our configuration, additional cookies may be used for analytics or other purposes.

Where required, non-essential cookies will only be used after you have provided the relevant consent through our cookie banner.

For more information, please read our Cookie Policy.

9. SECURITY

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes to our business, website, service providers or applicable law. The latest version will be published on this page with its updated date.

11. CONTACT

For questions about this Privacy Policy or to exercise your data protection rights, contact:

Obliquebubble Design & Development, Unipessoal, LDA
Operating the Goouup brand
Email: obliquebubble@gmail.com
Registered address: Rua Carlos de Oliveira, 56, Aroeira