This Privacy Policy describes how personal data is collected, used, and securely processed when you access, browse, or make a purchase from the official website www.staxfoldbasket.com (hereinafter referred to as the “Website”), which is owned and operated by Practiline, Lda.

1. Data Controller

The legally responsible data controller for the processing of your personal data under European data protection legislation is:

  • Company Name: Practiline, Lda
  • Brand: Staxfoldbasket
  • Registered Office & Operational Hub: Zona Industrial de Castelo Branco, Rua D, Lote 119, 6000-459 Castelo Branco, Portugal
  • Corporate Registration Number (NIPC): 508165610
  • European VAT Number: PT508165610
  • Official Email: foldable@staxfoldbasket.com
  • Telephone: +351 272 349 010

2. Personal Data Collected

To effectively facilitate your browsing experience and manage the commercial sale of our home organisation products, we process the following categories of personal data:

  • Identification and Contact Information: Your full name, delivery address, billing address, email address, and telephone number (when voluntarily provided during checkout or via communications).
  • Order and Fulfilment Details: Transactional history, product selections, and specific communication logs submitted through formal web contact forms or direct email.
  • Transaction-Related Data: Information strictly required for billing, identity verification, and financial clearing.
  • Technical and Usage Data: Information collected automatically via standard, non-invasive analytical tools, including internet protocol (IP) addresses, browser types, localized time-zone settings, operating systems, and website interaction metrics.

3. Purpose of Processing

Your personal data is collected and processed strictly for legitimate commercial and legal purposes, including:

  • Reviewing, responding to, and managing customer enquiries and support requests.
  • Processing financial transactions, managing commercial order fulfilment, and organizing product deliveries across Europe.
  • Optimizing website infrastructure, security, and the overall user experience.
  • Commplying with applicable legal, fiscal, accounting, and anti-fraud regulatory obligations established under Portuguese corporate law and European Union directives.

4. Payment Processing & Security Standards

All payment transactions executed on this Website are safely handled by our external, fully certified payment gateway provider: Stripe.

Stripe collects and processes financial data independently in accordance with its strict privacy regulations and security frameworks. In full alignment with international payment security standards, Practiline, Lda never handles, stores, or has access to your full raw credit/debit card numbers. All transaction data is transferred securely via industry-standard encrypted channels and tokenisation technology managed by Stripe to prevent unauthorized access.

5. Data Retention

Personal data is retained only for as long as functionally necessary to fulfil the operational purposes for which it was originally gathered, specifically:

  • Transaction and Order-Related Records: Securely stored for up to 6 years to comply with standard accounting, fiscal transparency, and statutory tax obligations governed by Portuguese commercial law.
  • Communication and Support Records: Retained for a maximum period of 24 months to effectively manage customer relations, follow-up enquiries, and historical communication continuity.
  • Technical Analytics and Usage Logs: Retained for a brief operational duration required solely for system security and technical analysis.

Where extended storage durations are mandated by specific statutory regulations or direct legal enforcement, data will be archived for the legally required period.

6. Legal Basis for Processing

In compliance with Article 6 of the GDPR, our processing of your personal data relies on the following established legal bases:

  • Performance of a Contract: To process, manufacture, and deliver orders for Staxfoldbasket products, or execute necessary pre-contractual requests.
  • Compliance with Legal Obligations: To meet strict corporate tax, anti-money laundering, and regulatory reporting duties.
  • Legitimate Interests: To maintain secure website operations, prevent fraudulent activities, and provide efficient customer support channels.

7. Data Sharing & Third-Party Disclosures

Your personal data is never sold, traded, rented, or unlawfully shared with third parties for unrelated marketing or commercial purposes. Data is disclosed strictly to authorized external service providers that directly facilitate our core business operations:

  • Our primary payment processing gateway (Stripe).
  • Integrated logistics partners and courier networks handling product delivery across European regions.
  • Secure hosting, technical infrastructure, and data analytic providers.

All such third parties are contractually bound to implement stringent organizational safeguards and process data in absolute compliance with European data protection laws.

8. Data Subject Rights

Under the General Data Protection Regulation (GDPR), European citizens possess comprehensive rights regarding their personal data, including:

  • Right of Access: The right to request copies of your personal records.
  • Right to Rectification: The right to correct inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”): The right to request deletion of data under specific legal conditions.
  • Right to Restriction of Processing: The right to limit how your data is utilized.
  • Right to Data Portability: The right to transfer your information to another entity.
  • Right to Object: The right to contest data processing based on legitimate interests.

To exercise any of these statutory rights, please submit a formal request to our dedicated support team using the corporate contact details provided herein. Furthermore, you possess the lawful right to lodge an official complaint with a national supervisory authority, such as the National Data Protection Commission (Comissão Nacional de Proteção de Dados — CNPD) in Portugal.

9. Data Security

Practiline, Lda employs robust technical and organizational security measures designed to protect your personal data against unauthorized access, accidental alteration, unlawful disclosure, or destruction. While no internet-based transmission can be guaranteed as entirely immune to risk, we constantly review and update our protection workflows in alignment with reasonable commercial best practices.

10. Updates to This Privacy Policy

This Privacy Policy may be modified periodically to reflect updates in legal frameworks, technical systems, or our day-to-day corporate operations. Any updated policy will be uploaded immediately to the Website with a revised effective date displayed at the top of the page.

11. Contact & Enquiries

For any specific questions, standard regulatory compliance enquiries, or data requests relating to this Privacy Policy, please contact our operational headquarters directly:

  • Company Name: Practiline, Lda
  • Postal Address: Zona Industrial de Castelo Branco, Rua D, Lote 119, 6000-459 Castelo Branco, Portugal
  • Official Email: foldable@staxfoldbasket.com
  • Corporate Telephone: +351 272 349 010