Privacy Policy

Who We Are

Coosher is an online marketplace offering auctions, pet supplies, and kitchen products. Our website address is https://coosher.com. We are based in Portugal and operate in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese and EU data protection laws.

Contact: coosherl.lc@gmail.com

What Personal Data We Collect and Why

Account Registration
When you create an account, we collect:

    • Full name
    • Email address
    • Password (stored in encrypted form)
    • Date of registration

    Purpose: To create and manage your account and provide access to our services.

    Order & Auction Activity
    We collect and store:

      • Bids placed (amount, date, time)
      • Auctions won
      • Items purchased (Auction, Pet Shop, Kitchen)
      • Watchlist items

      Purpose: To process your orders, operate the auction service, notify you of bid status, and maintain transaction records.

      Payment Information
      Payments are processed by Stripe, Inc. We do not store your credit or debit card details on our servers. Stripe may collect and process payment data in accordance with their own Privacy Policy available at https://stripe.com/privacy.

        We store: order totals, payment status, and transaction references.

        Shipping Information
        When you place an order or win an auction, we collect:

          • Full name
          • Delivery address
          • Phone number (optional)

          Purpose: To arrange shipment of purchased items.

          Communications
          If you contact us by email, we may retain:

            • Your name and email address
            • The content of your message
            • Date and time of correspondence

            Purpose: To respond to your enquiries and maintain records.

            Technical Data
            When you visit our website, we automatically collect:

              • IP address
              • Browser type and version
              • Device type
              • Pages visited and time spent
              • Referring URL

              Purpose: To maintain website security, analyse traffic, and improve our services.

              Cookies
              We use cookies for the following purposes:

                • Session cookies: to keep you logged in during your visit
                • Preference cookies: to remember your settings
                • Analytics cookies: to understand how visitors use our site

                You can control cookies through your browser settings. Disabling cookies may affect the functionality of our website.

                Legal Basis for Processing (GDPR)

                We process your personal data on the following legal bases:

                • Contract: processing is necessary to provide our auction and shopping services
                • Legal obligation: to comply with applicable laws and regulations
                • Legitimate interests: to improve our services and prevent fraud
                • Consent: where you have given explicit consent

                Who We Share Your Data With

                We may share your data with the following third parties:

                • Stripe, Inc. — payment processing
                • Sendcloud / shipping partners — order fulfilment and delivery
                • Namecheap / hosting provider — website infrastructure
                • Law enforcement or regulatory authorities — when required by law

                We do not sell, rent, or trade your personal data to any third party for marketing purposes.

                International Data Transfers

                Some of our service providers (such as Stripe) may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

                Data Retention

                We retain your personal data for the following periods:

                • Account data: for as long as your account remains active
                • Transaction records: 7 years (required by Portuguese tax law)
                • Communication records: 2 years
                • Technical logs: 90 days

                When data is no longer needed, it is securely deleted or anonymised.

                Your Rights Under GDPR

                As a resident of the EU/EEA, you have the following rights:

                • Right of access: to request a copy of the personal data we hold about you
                • Right to rectification: to correct inaccurate or incomplete data
                • Right to erasure: to request deletion of your data (“right to be forgotten”)
                • Right to restriction: to limit how we use your data
                • Right to data portability: to receive your data in a structured, machine-readable format
                • Right to object: to object to processing based on legitimate interests
                • Right to withdraw consent: at any time, where processing is based on consent

                To exercise any of these rights, contact us at: coosherl.lc@gmail.com

                We will respond within 30 days. We may ask you to verify your identity before processing your request.

                Complaints

                If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Portuguese data protection authority:

                CNPD — Comissão Nacional de Proteção de Dados
                Website: https://www.cnpd.pt
                Address: Av. D. Carlos I, 134 — 1°, 1200-651 Lisboa, Portugal

                Security

                We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:

                • SSL encryption (HTTPS)
                • Encrypted password storage
                • Access controls and authentication
                • Regular security updates

                Children’s Privacy

                Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

                Changes to This Policy

                We may update this Privacy Policy from time to time. When we make significant changes, we will notify registered users by email. The latest version will always be available at https://coosher.com/privacy-policy.

                Last updated: June 2026