Privacy and Cookie Policy

Last updated: October 2026

This policy explains how Petticrows, Lda. uses personal data when you visit petticrows.com or parts.petticrows.com, contact us, ask for a quote or buy from us. It also explains the cookies we use and how you control them.

1. Who is responsible for your data

The controller is Petticrows, Lda., Rua dos Cactos, 90, 2750-002 Cascais, Portugal, taxpayer number (NIPC) 516268490.

For any question about your data or to exercise your rights, contact sales@petticrows.com or write to the address above, marked “Data protection”. We have not appointed a Data Protection Officer, as the law does not require one for our activities.

2. Scope

This policy applies to both Websites, to email and telephone contact with us, to quotes and orders, and to our customer relationships. It does not cover third-party websites linked from ours, such as our Facebook, Instagram or YouTube pages, which have their own policies.

3. What we use, why, on what legal basis and for how long

We collect data you give us (name, email, telephone, billing and delivery address, VAT number, boat or sail number, order details and messages) and data generated when you use the Websites (see section 10). Legal bases refer to Article 6(1) of the General Data Protection Regulation (GDPR).

We do not make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects.

Providing data for a quote, an order or an invoice is necessary to contract with us. Without it, we cannot supply the Products. Everything else is optional.

4. Who receives your data

We do not sell your data. We share it only with:

• Carriers and couriers, to deliver your order
• Payment providers and banks, to process payments
• Our accountant and tax advisers
• IT providers acting for us
• Authorities, courts and arbitration centres, where the law requires it or to establish or defend legal claims

Providers acting for us process data only on our instructions, under a data processing agreement.

5. Transfers outside the European Economic Area

Google LLC and Microsoft Corporation may process data in the United States. Both are certified under the EU–US Data Privacy Framework, which the European Commission has recognised as giving adequate protection (Decision of 10 July 2023). They also use the European Commission’s standard contractual clauses. Deliveries outside the EEA require sharing delivery details with carriers in the destination country, to perform your contract.

6. Security

We use appropriate technical and organisational measures to protect your data, including encrypted (HTTPS) connections on both Websites, access restricted to staff who need it, and providers bound by confidentiality. No transmission over the internet is completely secure. If a breach is likely to put you at high risk, we will tell you without undue delay.

7. Your rights

Under the GDPR, you have the right to:

• access your data and receive a copy
• rectify inaccurate or incomplete data
• erasure of your data, unless we must keep it, for example invoices for tax purposes
• restrict processing in certain cases
• portability: receive the data you gave us, for a contract or with consent, in a structured, machine-readable format
• object at any time to processing based on our legitimate interests, and to direct marketing in all cases
• withdraw consent at any time, without affecting processing already carried out. For cookies, use the “Cookie Settings” button on either Website

To exercise a right, email sales@petticrows.com. We reply within one month. This can be extended by two further months for complex requests, in which case we tell you why. We may ask for proof of identity. Requests are free unless clearly unfounded or excessive.

You also have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa · www.cnpd.pt, or with the authority of the EU country where you live or work.

8. Children

The Websites are not aimed at children. We do not knowingly collect data from children under 13. Under Portuguese law, consent to online services is valid from that age.

9. Changes to this policy

We may update this policy. The date at the top shows when it last changed. We will tell customers by email about significant changes.

10. Cookies

10.1 What cookies are

Cookies are small files a website stores in your browser. Similar technologies, such as local storage and tracking scripts, are treated the same way in this policy.

10.2 How we ask for consent

We use strictly necessary cookies without consent, because the Websites cannot work without them. We use analytics cookies only if you click “Accept All” or switch on that category under “Customise”. Until you choose, and if you click “Reject All”, no analytics cookies are set and no analytics scripts run.

You can change or withdraw your choice at any time with the “Cookie Settings” button on each Website. Your choice is stored for 12 months, after which we ask again. You can also block or delete cookies in your browser settings, though some parts of the Websites may then stop working.

Cookie Settings

The two Websites are separate: a choice made on one does not apply to the other.

10.3 Cookies on petticrows.com

10.4 Cookies on parts.petticrows.com

Cookie	Provider	Purpose	Duration	Category
cookieyes-consent	Petticrows (CookieYes)	Remembers your cookie choices	1 year	Necessary
woocommerce_cart_hash, woocommerce_items_in_cart	Petticrows (WooCommerce)	Keeps track of the cart contents	Session	Necessary
wp_woocommerce_session_*	Petticrows (WooCommerce)	Keeps your cart and session across pages	2 days	Necessary
wordpress_logged_in_*, wordpress_sec_*	Petticrows (WordPress)	Keeps you signed in to your account	Session	Necessary
sbjs_*	Petticrows (WooCommerce order attribution)	Records how you reached the shop, linked to any order	Session to 6 months	Analytics
_ga, _ga_*	Google Analytics	Usage statistics, as on petticrows.com	1 year 1 month	Analytics
_clck, _clsk, CLID	Microsoft Clarity	Usage analysis and session recordings, as on petticrows.com	1 day to 1 year	Analytics
MUID, MR, SM, ANONCHK, SRM_B	Microsoft (Clarity / Bing)	Identifiers Microsoft sets when Clarity runs	Up to 1 year 24 days	Analytics