Privacy Policy

1. Who We Are

This website is operated by CRUMB ORIGEN LDA (trading as “MindfulCrumb”), a company registered in Portugal with VAT number 518 237 560, with registered office at Rua Santa Anastacia 20, 4150-664 Porto, Portugal.

For any questions regarding this policy or your personal data, contact us at hello@mindfulcrumb.com.

2. Data We Collect

We collect and process the following categories of personal data:

• Identity data: first name, last name.
• Contact data: email address, phone number, delivery address.
• Transaction data: order details, payment confirmation, purchase history (processed via Shopify).
• Technical data: IP address, browser type and version, device type, operating system, time zone, referring URL.
• Usage data: pages visited, time on site, click patterns, scroll behaviour (collected via Google Analytics and Meta Pixel, subject to your cookie consent).
• Communication data: messages sent via our contact form, chat interactions, newsletter subscription.

3. How We Use Your Data

We use your personal data for the following purposes:

• Order fulfilment: to process, deliver, and manage your orders (legal basis: contract performance).
• Customer support: to respond to enquiries via contact form, email, or live chat (legal basis: legitimate interest).
• Marketing: to send newsletters and promotional communications if you have opted in (legal basis: consent). You can unsubscribe at any time.
• Analytics: to understand how visitors use our site and improve our services (legal basis: consent, via cookie banner).
• Legal obligations: to comply with tax, accounting, and other regulatory requirements (legal basis: legal obligation).

4. Cookies & Tracking

We use cookies and similar technologies on our website. When you first visit, a cookie consent banner allows you to accept or decline non-essential cookies.

• Essential cookies: required for the site to function (cart, session, locale preference). These do not require consent.
• Analytics cookies: Google Analytics 4 (GA4) — used to measure site performance and visitor behaviour. Only loaded with your consent.
• Marketing cookies: Meta Pixel — used for ad measurement and retargeting on Facebook/Instagram. Only loaded with your consent.

You can change your cookie preferences at any time by clicking “Cookie Settings” in the footer of our website.

5. Data Sharing

We share your personal data with the following third-party service providers, solely for the purposes described above:

• Shopify Inc. — e-commerce platform, order processing, and payment handling.
• Google LLC — analytics (Google Analytics 4).
• Meta Platforms Inc. — advertising and measurement (Meta Pixel).
• Vercel Inc. — website hosting.
• Supabase Inc. — database services for chat functionality.

Some of these providers are located outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Order data is retained for 5 years to comply with Portuguese tax and accounting requirements. Marketing data is retained until you withdraw consent. Analytics data is retained for 14 months (Google Analytics default).

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data (“right to be forgotten”).
• Restriction — restrict the processing of your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests or direct marketing.
• Withdraw consent — where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at hello@mindfulcrumb.com. We will respond within 30 days.

8. Supervisory Authority

If you are unsatisfied with our handling of your data, you have the right to lodge a complaint with the Portuguese data protection authority: Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.