Privacy policy

Last updated: 9 March 2026

Kaafu respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use and protect your personal data when you visit our website, make a purchase or interact with us through our online store.

By using this website and our services, you confirm that you have read and understood this Privacy Policy.

1. Data Controller

The controller responsible for processing your personal data is:

Kaafu
Cascais, Portugal

Email: hello@kaafuswimwear.com

2. Personal Data We Collect

We may collect different types of personal data depending on how you interact with our website and services.

This may include:

Identification Data

  • Name

  • Email address

  • Billing and shipping address

  • Telephone number

Transaction Data

  • Purchased products

  • Purchase value

  • Payment method

  • Order history

Technical and Browsing Data

  • IP address

  • Device type

  • Browser information

  • Pages visited on the website

  • Interactions with the website

Marketing Data

  • Subscription preferences

  • Interactions with marketing campaigns or newsletters

3. How We Collect Your Data

Your personal data may be collected in several ways:

Directly from You

  • When you create an account

  • When you place an order

  • When you subscribe to our newsletter

  • When you contact us

Automatically

  • Through cookies and similar technologies when you browse our website

Through Service Providers

  • Payment providers

  • Analytics and marketing tools

  • E-commerce platform providers

4. How We Use Your Data

We use your personal data for the following purposes:

Order Processing

  • Processing payments

  • Preparing and shipping orders

  • Managing returns and exchanges

Customer Relationship Management

  • Responding to customer support requests

  • Communicating about orders or accounts

Improving Website Experience

  • Analysing website usage

  • Personalising content and recommendations

Marketing and Communications

  • Sending newsletters, promotions or marketing campaigns (only with your consent)

Legal Compliance

  • Invoicing

  • Compliance with legal, tax and accounting obligations

5. Sharing Data with Third Parties

Your personal data may be shared with third parties only where necessary for the operation of our store, including:

  • Shopify, the platform that powers our online store

  • Payment service providers (Shopify Payments, processed by Stripe)

  • Shipping carriers responsible for delivering orders

  • Analytics and marketing platforms (such as Google or Meta), where applicable

These providers process your personal data only to the extent necessary to provide their services and in accordance with applicable data protection laws.

6. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include secure payment processing systems, protected communications and access controls.

However, no method of data transmission or storage can be guaranteed to be completely secure.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, tax and accounting obligations.

For example, invoicing data may be retained for up to 10 years, as required by Portuguese tax legislation.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to improve the browsing experience, analyse website usage and personalise content.

The use of non-essential cookies depends on your consent, which can be given or withdrawn at any time through the cookie management tool available on our website.

For more information, please see our Cookie Policy.

10. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access your personal data

  • Request the correction of inaccurate or outdated data

  • Request the deletion of your personal data

  • Request data portability

  • Restrict or object to the processing of your personal data

  • Withdraw consent for marketing communications at any time

To exercise any of these rights, please contact us at:

hello@kaafuswimwear.com

If you believe that your personal data is not being processed in accordance with applicable law, you have the right to lodge a complaint with the relevant data protection authority.

11. Changes to this Privacy Policy

We may update this Privacy Policy whenever necessary to reflect changes to our practices or for legal and regulatory reasons.

We recommend reviewing this page periodically to stay informed about how we protect your personal data.