Privacy policy

1. Who is responsible

Laras Loungewear Lda., Lisbon, trading as Laras, runs this storefront. For anything to do with your data — a copy, a correction, a deletion — write to hello@wearelaras.com.

2. What we hold and why

Data	Purpose	Basis	Retention
Name, address, email, phone	Fulfilling and delivering your order	Contract	10 years (Portuguese tax law)
What you ordered and paid	Order handling, returns, the guarantee	Contract	10 years, then anonymised
Payment confirmation, never card numbers	Knowing the order is paid	Contract	10 years
Email address on its own	The newsletter, if you signed up	Consent	Until you leave
Basket and saved garments	Keeping your basket between visits	Strictly necessary	In your browser only
Aggregate page and garment views	Seeing what people look at	Consent	13 months, aggregated

Card details go straight to the payment provider. We never see them and never store them.

3. The basket stays with you

Your basket, saved garments and any discount code live in your browser’s local storage. They are not transmitted to us and we cannot read them. Clearing site data removes them.

4. Cookies

• Necessary. Your basket, your cookie choice and session security. Set regardless, because the shop does not function without them.
• Measurement. Aggregate counts of page and garment views. Set only if you choose “Fine by me” on the cookie bar, and removed if you choose “Basket only”.

No advertising cookies, no cross-site tracking, no data brokers.

5. Who else sees it

Only the processors needed to run the shop, each under a data processing agreement and each receiving only what it needs:

• The payment provider — name, email, amount
• The carrier — name, address, phone
• The email service — email address, for order mail and the newsletter
• The hosting provider — server logs including IP addresses, kept 30 days

We do not sell personal data and we do not share it for anyone else’s marketing.

6. Outside the EEA

Our processors are inside the EEA where we can arrange it. Where one is not, the transfer is covered by the European Commission’s Standard Contractual Clauses.

7. Your rights

Under the GDPR you can ask for a copy of your data, have it corrected or deleted, restrict how it is used, or have it passed to another provider. You can object to processing based on legitimate interests and withdraw consent at any time. Email hello@wearelaras.com; we answer within 30 days and usually within a few.

Where tax law obliges us to keep something, we will say so rather than delete it, and delete it when the period ends.

8. Complaints

You can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD). We would rather hear from you first so we can put it right.

9. Changes

If this policy changes in a way that matters, the date at the top changes and we note what moved. Earlier versions are available on request.

Terms & conditions