Privacy Policy

Last updated: 17/08/2026

At Tiny Little Baby, we value your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share personal data when you visit our website, place an order, contact us, subscribe to our communications or otherwise interact with Tiny Little Baby.

1. Who We Are

Tiny Little Baby is a Portuguese brand operated by:

Joana Raquel Magalhães Costa
Trading as Tiny Little Baby
Tax Identification Number (NIF): 256708959
Business address: [BUSINESS ADDRESS], Amarante, Portugal
Email: hello@tinylittlebaby.com

For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR), Joana Raquel Magalhães Costa, trading as Tiny Little Baby, is the data controller in relation to the personal data described in this Privacy Policy, except where another entity acts as an independent controller.

2. Personal Data We Collect

Depending on how you interact with our website, we may collect personal data such as:

  • Name

  • Billing and delivery address

  • Email address

  • Telephone number

  • Order and purchase information

  • Payment-related information

  • Communications you send to us

  • Information relating to returns, refunds, complaints or customer support

  • Device, browser and technical information

  • Website usage and interaction information

  • Marketing preferences and consent choices

We only collect personal data that is necessary and appropriate for the purposes described in this Privacy Policy.

3. How We Collect Your Data

We may collect personal data directly from you when you:

  • Place an order

  • Complete the checkout process

  • Contact us

  • Request a return or refund

  • Make a complaint or request customer support

  • Subscribe to our newsletter or other marketing communications

  • Interact with our website

Certain technical information may also be collected automatically through cookies and similar technologies, depending on the technologies enabled on our website.

We may also receive information from service providers that help us operate our online store, process payments, fulfil orders and provide customer support.

4. How We Use Your Personal Data

We may process your personal data to:

  • Process and fulfil your orders

  • Process payments and refunds

  • Arrange delivery of your purchases

  • Communicate with you about your order

  • Handle returns, complaints and customer support requests

  • Prevent fraud and protect the security of our website

  • Comply with accounting, tax and other legal obligations

  • Maintain and improve our website and services

  • Send marketing communications where you have consented to receive them or where otherwise permitted by applicable law

  • Establish, exercise or defend legal claims

We will not use your personal data for purposes that are incompatible with those described above unless permitted or required by law.

5. Legal Bases for Processing

Under the GDPR, we process personal data only where we have an appropriate legal basis.

Depending on the circumstances, this may include:

Performance of a contract
When processing your data is necessary to process an order, receive payment, arrange delivery or otherwise fulfil our contractual obligations to you.

Legal obligation
When we are required to process or retain information to comply with applicable tax, accounting, consumer protection or other legal requirements.

Legitimate interests
Where processing is necessary for our legitimate business interests, such as protecting our website, preventing fraud, managing our business or improving our services, provided that those interests do not override your fundamental rights and freedoms.

Consent
Where you have given us permission to process your personal data for a specific purpose, such as certain marketing communications or non-essential cookies where consent is required.

Where processing is based on consent, you may withdraw your consent at any time.

6. Payments

Payments made through our online store are processed through the payment methods and payment service providers made available at checkout.

Available payment methods may include:

  • Credit and debit cards

  • MB WAY

  • Multibanco

Payment providers may process information necessary to complete the transaction, prevent fraud and comply with their own legal obligations.

Tiny Little Baby does not independently store your full credit or debit card details where these are processed directly by the relevant payment provider.

7. Shipping and Delivery

To fulfil your order, we may share the personal information necessary for delivery with shipping, logistics and delivery service providers.

This may include your name, delivery address, telephone number, email address and other information reasonably necessary to deliver your order.

We only share information that is necessary for these purposes.

8. Shopify

Our online store is hosted using Shopify, which provides the e-commerce platform that allows us to offer and sell our products.

Shopify may process personal information in connection with the operation, security and functionality of our online store.

Depending on the circumstances and the relevant processing activity, Shopify may process information on our behalf or act in accordance with its own applicable privacy obligations.

9. Marketing Communications

If you choose to subscribe to our newsletter or other marketing communications, we may use your email address and related information to send you news, product updates, launches, offers and other communications from Tiny Little Baby.

Where consent is required, we will only send these communications after receiving the appropriate consent.

You may unsubscribe at any time by using the unsubscribe option included in our marketing emails or by contacting us at hello@tinylittlebaby.com.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Some cookies are necessary for the website and online store to function correctly. These may include cookies related to security, shopping cart functionality, checkout, session management and user preferences.

Necessary cookies may be used without consent where permitted by applicable law because they are required to provide the website or services requested by you.

We may also use non-essential cookies or similar technologies for purposes such as analytics, performance, advertising or personalisation if these technologies are enabled on our website.

Where consent is required by applicable law, non-essential cookies and similar technologies will only be activated after you have provided the appropriate consent.

Where available, you can manage your cookie preferences through the cookie settings provided on our website and may withdraw or change your consent at any time.

The specific cookies and technologies used by our website may change as we develop our services or introduce new features. We will update the information provided to you where required.

11. Who We Share Personal Data With

Where necessary for the operation of our business and online store, personal data may be shared with trusted service providers that assist us with:

  • Website and e-commerce hosting

  • Payment processing

  • Shipping and delivery

  • IT and security services

  • Customer support

  • Accounting and legal compliance

  • Email and marketing services, where used

We may also disclose information where required by law, regulation, court order or competent public authority, or where necessary to establish, exercise or defend legal claims.

Service providers are given access to personal data only to the extent necessary for the relevant service and subject to applicable data protection requirements.

12. International Data Transfers

Some of the service providers we use may process personal data outside Portugal or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, appropriate measures will be taken in accordance with applicable data protection law, including reliance on an adequacy decision or appropriate safeguards where required.

13. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable legal, accounting, tax and regulatory obligations.

Retention periods may therefore vary depending on the type of information and the purpose for which it is processed.

When personal data is no longer required, it will be deleted or anonymised where appropriate, subject to applicable legal requirements.

14. Your Rights

Under applicable data protection law, including the GDPR, you may have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate or incomplete personal data

  • Request deletion of your personal data in certain circumstances

  • Request restriction of processing in certain circumstances

  • Object to certain processing

  • Request portability of your personal data where applicable

  • Withdraw your consent at any time where processing is based on consent

These rights are subject to the conditions and limitations established by applicable law.

To exercise any of these rights, please contact us at hello@tinylittlebaby.com.

We may need to verify your identity before completing certain requests.

15. Right to Lodge a Complaint

If you believe that your personal data has been processed in breach of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).

You may also contact us first at hello@tinylittlebaby.com so that we can try to address your concerns directly.

16. Children's Privacy

Tiny Little Baby offers products intended for babies and children. However, our online store and purchasing services are intended to be used by adults.

We do not knowingly seek to collect personal data directly from children for the purpose of purchasing our products.

If you believe that a child has provided personal data to us inappropriately, please contact us at hello@tinylittlebaby.com.

17. Security

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information electronically can guarantee absolute security.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, service providers, technologies, legal requirements or data processing practices.

When we make changes, we will update the “Last updated” date at the top of this page.

We encourage you to review this Privacy Policy periodically.

19. Contact Us

If you have any questions about this Privacy Policy, how your personal data is processed, or if you wish to exercise your data protection rights, please contact:

Tiny Little Baby
Joana Raquel Magalhães Costa
Trading as Tiny Little Baby
NIF: 256708959
[BUSINESS ADDRESS], Amarante, Portugal
hello@tinylittlebaby.com