Política de privacidade Ir para o conteúdo

Política de privacidade

Last updated: 06/02/2026

Who we are

WOVEN MIRAGE, UNIPESSOAL LDA trading as Little Battersea (“we”, “us”, “our”) is the controller of the personal data processed under this policy. Our address: Rua das Laranjeiras 67, 2 DTO, 2910‑305 Setúbal, Portugal. For privacy enquiries: privacy@littlebattersea.com.

Scope and purpose

This policy explains what personal data we collect when you use our website or buy our products, why we use it, who we share it with, how long we keep it and how you can exercise your rights under the EU General Data Protection Regulation (GDPR).

What personal data we collect (examples)

  • Contact and delivery details: name, address, telephone, email.
  • Payment and transaction details: card/bank reference, order history (payment processing is handled by Shopify Payments).
  • Communications: messages and correspondence with us.
  • Technical and usage data: IP address, device/browser data, cookies and site usage.
  • Marketing preferences and consent records.
  • Any other data you provide to us (for example warranty claims, returns).


How we obtain your data

Primarily directly from you (orders, enquiries, newsletter sign‑up) and automatically via cookies and service providers (Shopify, fulfilment/delivery partners, analytics/marketing vendors).

Why we process personal data (lawful bases)

  • Performance of contract: to process your order, take payment and deliver goods.
  • Legal obligation: to retain invoices and bookkeeping records.
  • Legitimate interests: to prevent fraud, secure our services and perform basic non‑behavioural analytics (we balance these interests against your rights).
  • Consent: for marketing communications and non‑essential cookies (you can withdraw consent at any time).


Who we share data with (examples)

We share data only with parties who need it to provide services: Shopify (platform and payments), Printful (fulfilment), Batch (delivery integration), our email provider, BrandHat/advertising partners and analytics providers (e.g. Google Analytics). These providers act as processors under contract. Where a provider acts as an independent controller this is made clear in their privacy notice. Links: Shopify privacy https://privacy.shopify.com; Google https://policies.google.com/privacy; Printful https://www.printful.com/policies/privacy.

Cookies and tracking

We use necessary cookies for the site to function. Non‑essential cookies (analytics and marketing) are set only after you give explicit consent. You can change cookie preferences at any time via the cookie settings link in the footer. We enable IP anonymisation for analytics and store consent records (timestamp + IP).

Marketing and newsletters

We only send marketing emails if you have opted in. Newsletter sign‑ups use double opt‑in; we record the IP and time of registration. You can unsubscribe using the link in every marketing email or by emailing privacy@littlebattersea.com.

International transfers

We primarily use EU‑based processors. If personal data is transferred outside the European Economic Area we rely on appropriate safeguards (e.g. Standard Contractual Clauses) and implement additional technical and organisational measures where necessary. You may request details of the safeguards applied.

How long we keep your data

  • Orders and invoices: 10 years (tax/accounting).
  • Transaction logs: 5–10 years.
  • Analytics and cookies data: 6–24 months (EU/Germany: typically 6–12 months).
  • Marketing consent records: until withdrawal.
  • Proof of delivery: at least 2 years.


Your rights

Under the GDPR you may request: access, rectification, erasure, restriction of processing, objection and portability of your personal data, and withdraw consent. To exercise your rights contact privacy@littlebattersea.com. We will verify identity where necessary and respond within one month (extensions possible for complex requests). If you remain unhappy you may complain to your national supervisory authority (for Portugal: CNPD — https://www.cnpd.pt).

Data security and breaches

We implement reasonable technical and organisational measures to protect personal data (HTTPS, access controls, encryption where supported). If we become aware of a personal data breach that risks your rights we will notify the supervisory authority and affected individuals as required by law.

Children and age limits

Our Services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact privacy@littlebattersea.com and we will take steps to delete it.

Returns, warranty and hygiene items 

Standard returns and warranty terms are on our Returns & Warranty page. Sealed hygiene items (for example opened swaddles) are non‑returnable for hygiene reasons unless faulty; unopened sealed items may be returned within 14 days.

Changes to this policy

We may update this policy from time to time. We will publish the revised policy on the website with an updated “Last updated” date. Where changes are material we will provide notice.

Contact

Data controller: WOVEN MIRAGE, UNIPESSOAL LDA (Little Battersea)
Privacy enquiries: privacy@littlebattersea.com
General enquiries: info@littlebattersea.com
Postal address: Rua das Laranjeiras 67, 2 DTO, 2910‑305 Setúbal, Portugal