Privacy Policy
Updated on 17 October 2026.
Controller and contact details
The data controller is Anabela da Silva Fernandes, Portuguese tax number (NIF) 114669376, who operates the Home Made Nest brand from Praceta Dr. Vieira de Araújo, no. 2, Centro Comercial Rio Lima, Shop 29, 4990-112 Ponte de Lima, Portugal. For privacy questions, contact homemadenest.craft@gmail.com.
Data, purposes and legal bases
We process identification, contact, billing, delivery, order and communications data necessary to respond to pre-contract enquiries, fulfil purchases and provide support, on the basis of performing a contract or taking steps at the customer’s request before entering into a contract. Tax information is processed to comply with legal obligations. Personalization files are used to fulfil the order. We collect only the information necessary; without the required information, we cannot fulfil the order.
Technical data necessary for the security and operation of the store is processed on the basis of our legitimate interest in protecting the store and its customers, balanced against the rights of data subjects, or another applicable legal basis for the technologies used.
Promotional communications and optional technologies that require consent are used only where a valid legal basis and an appropriate choice exist. Consent may be withdrawn without affecting the lawfulness of processing carried out before withdrawal.
Recipients of personal data
The ecommerce platform supports the online store. Necessary data may be shared with the service providers actually used for payment, transport, hosting and tax obligations, to the extent required for each purpose and with the applicable safeguards. The payment method and delivery option selected for an order determine which service providers are involved in that transaction. Data may also be disclosed to public authorities where required by law.
For information about the specific recipients involved in an order or safeguards applicable to any international transfers, contact homemadenest.craft@gmail.com. We do not assume transfers to specific countries merely because an ecommerce platform is used.
Retention
Data is retained only for as long as necessary for the relevant purpose and applicable legal obligations. Tax documents are kept for the corresponding statutory periods. Data needed to defend legal claims may be retained for the relevant limitation periods. Enquiries are retained for as long as needed to respond, manage the relationship and defend legal claims; marketing data based on consent is processed while the consent remains valid, without prejudice to records needed to demonstrate the choice.
Files provided solely for personalization are generally deleted within 30 days after delivery or completion, except where retention is legally required and duly justified.
Rights and complaints
Under the GDPR, you may request access, rectification, erasure, restriction, portability and object to processing where applicable. You may withdraw consent at any time without affecting the lawfulness of prior processing. Send your request to homemadenest.craft@gmail.com. We respond within statutory periods, generally one month, subject to legally permitted extensions. Erasure does not remove statutory retention obligations.
You may lodge a complaint with the Portuguese Data Protection Authority (CNPD).
Cookies and choices
The store’s cookie panel lets you accept or reject optional cookies and manage your preferences. Continuing to browse or accepting the purchase Terms does not, by itself, constitute consent to optional technologies. You may also manage cookies in your browser settings, bearing in mind that blocking necessary technologies may affect how the store works.
Security and changes
Appropriate technical and organisational measures are adopted in view of the risks. This policy will be reviewed when processing activities change; the update date appears at the beginning of the page. For questions about any processing activity, contact us at the email address above.