Privacy & cookies

Last updated: 15 October 2026

Who is responsible for your data

The controller of your personal data is Marcel de Jong, trading as TADOPO, [adres], Portugal, NIF [NIF]. For any question about your privacy, e-mail info@tadopo.com.

What data we use and why

  • Orders: your name, delivery and billing address, e-mail address, phone number (if you give it), the products you order and the payment status. We need these to perform our contract with you: to process, ship and invoice your order and to handle returns (Article 6(1)(b) GDPR).
  • Invoices and accounting: we are required by law to issue invoices and keep our records (Article 6(1)(c) GDPR).
  • Customer account: if you create an account, we keep your details so you can follow your orders and check out faster.
  • Messages: when you contact us, we use your message and contact details to answer you.
  • Newsletter: only if you sign up (consent, Article 6(1)(a) GDPR). Every newsletter contains an unsubscribe link.
  • Security: technical data such as your IP address and browser type, to keep the website secure and prevent fraud (legitimate interest, Article 6(1)(f) GDPR).

Who receives your data

We only share what is needed, with these partners:

  • Stripe processes your payment. Your card details go straight to Stripe; we never see or store them.
  • CJ Dropshipping, our fulfilment partner, receives your name, delivery address, phone number (if given) and the items you ordered, so it can pack and ship your order. Its warehouses and the carriers it works with receive the delivery details they need.
  • Carriers receive your name and address, and sometimes your e-mail address or phone number for delivery notifications.
  • Moloni, our invoicing software certified by the Portuguese Tax and Customs Authority, receives the data needed for your invoice.
  • Our hosting and e-mail providers store the website data and our correspondence on our behalf.
  • Google Analytics, only if you accept statistics cookies (see below).

Some of these partners, including Stripe, CJ Dropshipping and Google, may process data outside the European Economic Area. In that case the transfer is protected by appropriate safeguards, such as an adequacy decision or the standard contractual clauses of the European Commission. We never sell your data.

Cookies

  • Functional cookies are needed for the shop to work: your shopping bag, your language, your login session and your cookie choice. They do not require consent.
  • Statistics cookies (Google Analytics) are only placed after you click Accept. They help us understand how the shop is used so we can improve it. Advertising personalisation is switched off.

Your choice is remembered for 180 days. You can change it at any time via “Cookie settings” at the bottom of every page.

How long we keep your data

  • Order and invoice data: 10 years, as required by Portuguese tax law.
  • Customer account: until you ask us to delete it, except for data we must keep for tax purposes.
  • Messages to customer service: up to 2 years after our last contact.
  • Newsletter: until you unsubscribe.
  • Technical security logs: a few months at most.

Your rights

You have the right to access, correct or delete your data, to restrict or object to its processing, to data portability and to withdraw your consent at any time. Send your request to info@tadopo.com; we reply within one month. If you believe we handle your data incorrectly, you can lodge a complaint with the Portuguese data protection authority, the CNPD (www.cnpd.pt), or with the authority in your own country.

Children

Many of our products are made for children, but orders must be placed by adults. We do not knowingly collect personal data from children.

Changes

We may update this policy, for example when we add a new service. The date at the top shows the current version.