Last updated: 14 May 2026 This Privacy Policy describes how Caramba Mamba ("we," "us," or "our") collects, uses, and protects your personal data when you visit our website or make a purchase from us. We comply with the EU General Data Protection Regulation (GDPR) and applicable Portuguese data protection laws. 1. Who we are Caramba Mamba is operated by Emily Isamej Vasquez Gomez, an independent professional (trabalhadora independente) based in Lisbon, Portugal. Contact email: hello@carambamamba.com NIF: 303825278 2. Website hosting This website is hosted by Squarespace. Squarespace collects personal information when you visit this website, including: Information about your browser, network, and device Web pages you visited prior to coming to this website Web pages you view while on this website Your IP address Squarespace needs this data to run this website and to protect and improve its platform and services. You can read more about how Squarespace uses your data in their Privacy Policy. 3. Analytics This website collects personal information to power our site analytics, including: Information about your browser, network, and device Web pages you visited prior to coming to this website Your IP address This information may also include details about your use of this website, including clicks, internal links, pages visited, scrolling, searches, and timestamps. We provide this information to Squarespace, our website analytics provider, to learn about site traffic and activity. 4. Cookies This website uses cookies and similar technologies — small files or pieces of text that download to a device when a visitor accesses a website. Necessary and required cookies are always used to allow Squarespace, our hosting platform, to securely serve this website to you. Analytics and performance cookies are used on this website only when you acknowledge our cookie banner. These are used to view site traffic, activity, and other data. For full details, see our Cookie Policy. 5. When you place an order When you buy something on this website, we collect personal information to fulfill the order, including: Your name Billing and shipping address Email address Phone number Details relating to your purchase (for example, your shirt size) We provide this information to Squarespace, our online store hosting provider, so they can provide website services to us. We also share this information with our shipping carrier, CTT — Correios de Portugal, so we can deliver your order. You can read their privacy policy at www.ctt.pt. As you go through checkout, this site may auto-complete your shipping and billing address by sharing what you type with the Google Places API and returning suggestions to improve your checkout experience. 6. Payments When you make a purchase from us on this website, we use Squarespace Payments as our payment solution. Squarespace Payments is a fully integrated payment solution provided by Squarespace. It makes use of the following third-party service providers, which will also receive your personal information and process it in accordance with their privacy policies: Stripe — payment processing services. Privacy policy: stripe.com/privacy Sift — fraud monitoring and detection services. Privacy policy: sift.com/service-privacy We never see or store your full card details. 7. Form submissions When you submit information to this website via a webform (for example, a contact form), we collect the data requested in the form in order to track and respond to your submissions. We provide this information to Squarespace, our website hosting provider, so they can provide website services to us and help us manage our relationship with you. 8. Emails we may send you Order and account emails. We may email you with messages about your order, such as a purchase confirmation or shipping update. It's not possible to unsubscribe from these messages. We provide your contact information to Squarespace, our website hosting provider, so they can send these emails on our behalf. Marketing emails. We may send you marketing emails only if you have opted in. You can unsubscribe at any time by clicking the link at the bottom of the email. Abandoned cart emails. You may receive an automated email within 24 hours after you abandon your shopping cart if you entered your email address or were logged into your customer account. You can unsubscribe from these messages at the bottom of the email. 9. Fonts This website serves font files from and renders fonts using Google Fonts and Adobe Fonts. To properly display this site to you, these third parties may receive personal information about you, including information about your browser, network, or device, information about this site and the page you're viewing, and your IP address. 10. Legal basis for processing your data We process your data based on: The performance of a contract (when you place an order) Your consent (e.g., newsletter subscriptions, non-essential cookies) Our legitimate interests (e.g., preventing fraud, improving our shop) Legal obligations (e.g., keeping records for Portuguese tax authorities) 11. How long we keep your data We keep your data only as long as necessary: Order data: 10 years (as required by Portuguese tax and commercial law) Newsletter data: until you unsubscribe Contact form messages: up to 2 years 12. Your rights Under GDPR, you have the right to: Access the personal data we hold about you Correct any inaccurate data Request deletion of your data Object to or restrict processing Request your data in a portable format Withdraw consent at any time To exercise any of these rights, email us at hello@carambamamba.com. 13. Complaints If you believe we have not handled your data properly, you have the right to file a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt. 14. Changes to this policy We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect any changes.