Privacy policy

Privacy Policy

Last updated: May 2026

VESSEL022 ("we", "us", "our") is committed to protecting your privacy. 
This policy explains what information we collect, how we use it, 
and your rights regarding your personal data.

We are based in Porto, Portugal and operate under the General Data 
Protection Regulation (GDPR) and applicable Portuguese law.

---

1. Information We Collect

When you place an order or browse our store, we may collect:

- Name, email address, shipping address, and phone number
- Payment information (processed securely by Shopify Payments — 
  we do not store card details)
- Order history and purchase details
- Device and browsing information (via cookies)
- Communications sent to us by email

---

2. How We Use Your Information

We use your information to:

- Process and fulfil your orders
- Communicate with you about your order or enquiries
- Send notifications about upcoming releases, if you have opted in
- Improve our store and customer experience
- Comply with legal obligations

We do not sell, rent, or share your personal data with third parties 
for marketing purposes.

---

3. Email Marketing

If you subscribe to our mailing list, you will receive notifications 
about new releases and updates from VESSEL022. You can unsubscribe 
at any time by clicking the unsubscribe link in any email, or by 
contacting us at hello@vessel022.com.

We use Klaviyo to manage our mailing list. Your email address is 
stored securely on their platform. Klaviyo's privacy policy is 
available at klaviyo.com/legal/privacy.

---

4. Cookies

Our store uses cookies to maintain your shopping session, remember 
your preferences, and understand how visitors use our site. By 
continuing to browse vessel022.com, you consent to the use of cookies.

You can disable cookies in your browser settings, though this may 
affect the functionality of the store.

---

5. Third-Party Services

We use the following services which may process your data:

- Shopify — e-commerce platform and payment processing
- Klaviyo — email marketing
- Calendly — appointment booking
- Instagram — social media (subject to Meta's privacy policy)

Each of these services operates under their own privacy policies, 
which we encourage you to review.

---

6. Data Retention

We retain your personal data for as long as necessary to fulfil 
your order, comply with legal obligations, and resolve any disputes. 
Order records are kept for a minimum of 5 years as required by 
Portuguese fiscal law.

---

7. Your Rights (GDPR)

Under GDPR, you have the right to:

- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict processing of your data
- Request a copy of your data in a portable format
- Lodge a complaint with the Portuguese data protection authority 
  (CNPD — cnpd.pt)

To exercise any of these rights, contact us at hello@vessel022.com.

---

8. Data Security

We take reasonable measures to protect your personal information. 
All transactions are encrypted via SSL. Payment data is handled 
exclusively by Shopify Payments and is never stored on our systems.

---

9. Contact

For any privacy-related questions or requests:

VESSEL022
Porto, Portugal
support@vessel022.com
instagram.com/vessel022

---

This policy may be updated periodically. The date at the top of 
this page reflects the most recent revision.