Privacy Policy

This policy explains how Holdy Bags collects, uses and protects your personal data when you visit or buy from holdybags.com, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

holdybags.com is operated by Chip Sales Servicos LTDA, CNPJ 52.429.218/0001-60, Rua Quinze de Novembro, 278, Centro, Campo Bom – RS, 93701-070, Brazil ("Holdy Bags", "we", "us"). We are the data controller for your personal data. You can contact us about privacy at contact@holdybags.com.

The data we collect

• Order and account data: name, email, phone number, billing and delivery address, order history.
• Payment data: processed securely by our payment providers. We never see or store your full card details.
• Communications: messages you send us and our replies.
• Device and usage data: IP address, browser, device type, pages viewed and how you reached our site, collected through cookies and similar technologies.
• Marketing preferences: whether you have subscribed to our emails or SMS.

How and why we use your data

Purpose	Lawful basis
Processing and delivering your order, returns and refunds	Performance of a contract
Customer support	Performance of a contract / legitimate interests
Preventing fraud and keeping our site secure	Legitimate interests
Sending marketing emails or SMS	Consent (you can unsubscribe at any time)
Analytics and advertising cookies	Consent
Keeping tax and accounting records	Legal obligation

Who we share your data with

We only share your data with trusted service providers who help us run the store, and only what they need:

• Our e-commerce platform (Shopify) for hosting the store and processing orders.
• Payment providers to take payment securely.
• Our suppliers, fulfilment partners and delivery carriers, who receive your name, address and contact details to send your order.
• Email and customer service tools.
• Analytics and advertising partners (such as Google and Meta), only where you have consented to cookies.
• Authorities, where required by law.

We never sell your personal data.

International transfers

Some of our providers and partners are based outside the UK, including in Brazil, the United States, the European Union and China. Where your data is transferred outside the UK, we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep your data

We keep order records for up to 6 years to meet tax and accounting requirements. Marketing data is kept until you unsubscribe. Other data is kept only as long as needed for the purposes above.

Your rights

Under UK GDPR you have the right to access, correct or delete your data, restrict or object to how we use it, request a copy in a portable format, and withdraw consent at any time. To use any of these rights, email contact@holdybags.com. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Cookies

We use essential cookies to make the site and checkout work. With your consent, we also use analytics and advertising cookies to understand how the site is used and show relevant ads. You can change your choice at any time through the cookie banner or your browser settings.

Security

We use secure, encrypted connections and trusted providers to protect your data. We will never ask you for payment, card details or passwords by email, message, phone or any other channel. Payments are only taken at checkout on holdybags.com.

Children

Our store is intended for adults. We do not knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.