Effective Date: 09/11/2024

At Dropout, we are committed to protecting your personal data and your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal information when you use our website, make purchases, or interact with our services. This policy complies with the General Data Protection Regulation (GDPR), Portuguese law, and other applicable regulations.

1. Data Controller

The data controller responsible for your personal data is:

Company Name: DROPOUT
Business Address: 
Email: info@dropout-apparel.com
VAT Number: 247959634
Data Protection Officer: GDPR

2. Data We Collect

We collect personal data from you in several ways:

2.1. Information You Provide Voluntarily

  • Account Information: When you create an account or make a purchase, we collect your name, email address, billing and shipping addresses, phone number, and payment information.
  • Communications: If you contact us through email or our website, we collect the information you provide in those communications.
  • Subscription Information: If you subscribe to our newsletter or marketing emails, we collect your name and email address.

2.2. Information Collected Automatically

  • Cookies: We collect data via cookies to improve user experience, analyze website traffic, and tailor content. For more information, see our Cookie Policy.
  • Device Information: We may collect information about the device you use to access our website, such as your IP address, browser type, and operating system.

3. How We Use Your Data

We use your personal data for the following purposes:

  • Order Processing: To process and fulfill your orders, including shipping and payment processing.
  • Customer Support: To provide customer service and respond to inquiries or complaints.
  • Marketing: To send you promotional emails and offers, if you have opted in to receive them. You can unsubscribe at any time.
  • Website Improvements: To analyze how users interact with our website and improve our services.
  • Legal Compliance: To comply with legal obligations, including tax reporting and consumer protection laws.

4. Legal Basis for Processing Personal Data

We process your personal data under the following legal bases:

  • Contractual Necessity: To fulfill our contract with you when you make a purchase.
  • Consent: For marketing communications or other processing where you have given explicit consent.
  • Legal Obligation: To comply with legal requirements, such as tax and consumer protection laws.
  • Legitimate Interest: To improve our website and provide better service to our customers.

5. Sharing Your Data

We do not sell or rent your personal data to third parties. However, we may share your data with third parties in the following cases:

  • Service Providers: We work with third-party service providers (e.g., payment processors, shipping companies, marketing platforms) to facilitate order processing, payment, and delivery. These third parties have access to your data only to perform their specific tasks on our behalf.
  • Legal Requirements: We may disclose your data if required to do so by law, or in response to valid requests by public authorities (e.g., a court or government agency).
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.

6. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

  • Account Information: Retained as long as your account is active or needed to provide services to you.
  • Order Information: Retained for 6 years to comply with tax and financial reporting obligations.
  • Marketing Data: Retained until you unsubscribe from marketing communications.

7. Your Rights

Under the GDPR and Portuguese law, you have the following rights regarding your personal data:

  • Right to Access: You can request access to the personal data we hold about you.
  • Right to Rectification: You have the right to request that we correct any inaccuracies in your personal data.
  • Right to Erasure (“Right to be Forgotten”): You can request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent.
  • Right to Restriction of Processing: You can request that we limit the processing of your data under certain conditions.
  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
  • Right to Object: You have the right to object to the processing of your personal data based on our legitimate interests, or for direct marketing purposes.
  • Right to Withdraw Consent: If we process your data based on consent, you can withdraw your consent at any time.

Exercising Your Rights:

To exercise any of these rights, please contact us at info@dropout-apparel.com . We will respond to your request within 30 days, in accordance with GDPR requirements.

8. Security of Your Data

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. However, no system is completely secure, and we cannot guarantee the absolute security of your data.

9. Cookies

We use cookies and similar technologies to enhance your experience on our website. For detailed information on how we use cookies, please review our Cookie Policy.

10. International Data Transfers

If you are accessing our website from outside Portugal, your personal data may be transferred to and processed in other countries, including those outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place to protect your data, in accordance with GDPR.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any significant changes by posting the updated policy on our website and revising the “Effective Date” at the top of this page.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:

Email: info@dropout-apparel.com