Who We Are
Coosher is an online store offering eco-friendly products, pet supplies, and kitchen goods. Our website address is https://coosher.com. We are based in Portugal and operate in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese and EU data protection law.
Data controller:
Vasyl Horobchenko
Rua Pero de Alenquer, n.º 1, 2.º L
8900-473 Monte Gordo, Portugal
NIF: 337680558
Email: info@coosher.com
We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR. All privacy enquiries are handled directly at the address above.
What Personal Data We Collect and Why
Newsletter Subscription
If you subscribe to our newsletter, we collect your email address, and the date and time of your subscription and confirmation.
We use a double opt-in process: after you submit the form, you receive an email asking you to confirm. We only add you to our list once you have confirmed. This record of confirmation also serves as our evidence of your consent.
Our newsletter is operated by Mailchimp (Intuit Inc., United States). Your email address is stored on Mailchimp’s servers. See “Who We Share Your Data With” below.
You can unsubscribe at any time using the link at the bottom of every email we send, or by writing to us.
Account Registration
When you create an account, we collect:
- Full name
- Email address
- Password (stored in encrypted form — we cannot read it)
- Date of registration
Purpose: to create and manage your account and provide access to our services.
Orders, Payment and Shipping
Online sales are not yet active on this website. No orders can currently be placed and no payment method is connected. The information below describes how we will handle your data once sales begin, and this policy will be updated with full details before that happens.
When ordering becomes available, we will collect:
- Full name and delivery address
- Phone number (optional, for delivery)
- Items purchased and order totals
- Payment status and transaction references
We will never store your card details on our servers. Card data will be handled directly by our payment provider.
Communications
If you contact us by email, we may retain:
- Your name and email address
- The content of your message
- Date and time of correspondence
Purpose: to respond to your enquiries and keep a record of what was discussed.
Technical Data and Server Logs
Our hosting provider automatically records certain technical information when you visit, including your IP address, browser type and version, device type, the pages you requested, and the time of the request.
Purpose: to keep the website running, detect and prevent attacks and abuse, and diagnose faults. This happens regardless of your cookie choices, because it is necessary to operate and secure the site.
Analytics
If you consent to analytics cookies, we use Google Analytics 4 to understand how visitors find and use our site. This tells us which pages are read, how visitors arrived, and roughly where they are located — it does not tell us who you are.
If you do not consent, Google Analytics does not load and no analytics data is collected about your visit.
Advertising
If you consent to marketing cookies, we use the Meta Pixel to measure the effectiveness of our advertising and to build audiences for future campaigns.
If you do not consent, the Meta Pixel does not load and no data is sent to Meta.
Legal Basis for Processing
Under Article 6 GDPR, we rely on the following legal bases:
| What we do | Legal basis |
|---|---|
| Send you our newsletter | Your consent — Art. 6(1)(a) |
| Manage your account | Performance of a contract — Art. 6(1)(b) |
| Process orders and deliver goods | Performance of a contract — Art. 6(1)(b) |
| Keep accounting and tax records | Legal obligation — Art. 6(1)(c) |
| Answer your emails | Legitimate interests — Art. 6(1)(f) |
| Keep the site secure and working | Legitimate interests — Art. 6(1)(f) |
| Analytics and advertising | Your consent — Art. 6(1)(a) |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and concluded that keeping our site secure and answering correspondence does not unduly affect you. You may object to this processing at any time (see “Your Rights”).
Cookies
We use cookies and similar technologies. Cookies that are strictly necessary for the site to work are used without consent; analytics and advertising cookies are used only if you agree.
Full details — including every cookie we set, what it does, and how long it lasts — are in our Cookie Policy. You can change or withdraw your choices at any time using the cookie preferences icon at the bottom of every page.
Who We Share Your Data With
We do not sell, rent, or trade your personal data. We share it only with the service providers we need to run the site, and only to the extent necessary:
- Mailchimp (Intuit Inc., United States) — newsletter delivery and subscriber management. Receives your email address and subscription records.
- Google Ireland Limited — website analytics, only with your consent.
- Meta Platforms Ireland Limited — advertising measurement, only with your consent. Meta acts as an independent controller for its own purposes; its own privacy policy applies in addition to ours.
- Namecheap, Inc. (United States) — website hosting and email infrastructure. Processes data stored on our site, including server logs.
- Public authorities — where we are required to disclose data by law, or to establish or defend legal claims.
Once online sales begin, we will also share data with our payment provider and with shipping carriers, and this section will be updated before that happens.
Each of these providers processes your data on our instructions under a data processing agreement, except where they act as independent controllers (as noted above).
International Data Transfers
Some of our providers are established in, or process data in, the United States. Transfers of personal data outside the European Economic Area take place on the basis of:
- the European Commission’s adequacy decision for the EU–US Data Privacy Framework, where the recipient is certified under that framework; and/or
- Standard Contractual Clauses approved by the European Commission, together with supplementary measures where appropriate.
If the adequacy decision ceases to apply, we will continue to rely on Standard Contractual Clauses or another lawful transfer mechanism. You may request further information about the safeguards in place by writing to us.
Data Retention
We keep personal data only as long as we need it:
| Data | Retention period |
|---|---|
| Newsletter subscription | Until you unsubscribe, then deleted |
| Account data | While your account remains active |
| Invoices and accounting records | 10 years (Art. 52 Portuguese VAT Code; Art. 113 Personal Income Tax Code) |
| Email correspondence | 2 years |
| Server and security logs | 90 days |
| Analytics data | 14 months |
| Record of your cookie choices | 6 months |
Please note that where we are legally required to keep records — invoices in particular — we cannot delete them on request before the statutory period has expired. When data is no longer needed, it is securely deleted or anonymised.
Your Rights Under GDPR
As a resident of the EU/EEA, you have the following rights:
- Right of access: to request a copy of the personal data we hold about you
- Right to rectification: to correct inaccurate or incomplete data
- Right to erasure: to request deletion of your data (“right to be forgotten”)
- Right to restriction: to limit how we use your data
- Right to data portability: to receive your data in a structured, machine-readable format
- Right to object: to object to processing based on legitimate interests
- Right to withdraw consent: at any time, where processing is based on consent
- Right not to be subject to automated decision-making: we do not use automated decision-making or profiling that produces legal effects concerning you
To exercise any of these rights, contact us at info@coosher.com.
Exercising your rights is free of charge. We will respond to your request within one month. For complex or numerous requests, this period may be extended by up to two further months — we will inform you of any extension within the first month, together with the reasons for the delay. We may ask you to verify your identity before processing your request.
Where processing is based on your consent, withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. You can manage your cookie preferences at any time via the cookie settings on our website, and unsubscribe from our newsletter using the link in any email.
Complaints
If you believe we have not handled your data correctly, please contact us first — we would rather put it right ourselves. You also have the right to lodge a complaint with a supervisory authority:
Portugal
CNPD — Comissão Nacional de Proteção de Dados
Av. D. Carlos I, 134 — 1.º, 1200-651 Lisboa, Portugal
https://www.cnpd.pt
France
CNIL — Commission Nationale de l’Informatique et des Libertés
3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
https://www.cnil.fr
If you reside in another EU/EEA country, you may lodge a complaint with the supervisory authority of your country of residence or place of work. You also have the right to an effective judicial remedy.
Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:
- SSL/TLS encryption (HTTPS) across the whole site
- Encrypted password storage
- Access controls and two-factor authentication on administrative accounts
- Regular software and security updates
- Regular backups
No system can be guaranteed completely secure. If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, and we will notify the CNPD within 72 hours where required.
Children’s Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify registered users and newsletter subscribers by email. The latest version will always be available at https://coosher.com/privacy-policy/.
Contact
Questions about this policy or about how we handle your data: info@coosher.com
Last updated: 26 July 2026