Made to your measurements · Cut in certified European ateliers
Privacy.
The short version: we collect what is needed to make and deliver your clothes, we sell nothing to anyone, and your measurements are yours.
1. Who is responsible
The data controller is Brave Particle, Unipessoal Lda (NIF 518834719), Rua Amadeu de Sousa Cardoso, N.º 70, Hab. 619, 4460-481 Senhora da Hora, Matosinhos, Portugal. For anything in this policy, write to support@baroc.studio.
2. What we collect, and why
Account and order data (name, email, phone, addresses, order history) — to fulfil and deliver your orders and provide support; legal basis: performance of a contract. Invoicing records — to meet our tax and accounting obligations; legal basis: legal obligation. The details marked as required at checkout are needed to make and deliver your order; without them we cannot take it.
Payments are processed by Stripe (card, Apple Pay, Google Pay) and euPago (MB WAY); we never see or store full card details.
Newsletter email — only with your consent, which you can withdraw in any email we send.
3. Your measurements
Body measurements are personal data, and we treat them accordingly. They are used for one purpose only: to make your garments (legal basis: performance of a contract). They are shared only with the workshop that makes your piece; they are never sold, never shared for marketing, and you may ask us to delete them at any time.
While you configure a piece, the configurator keeps the unfinished configuration, measurements included, in your own browser for up to 24 hours, so that closing the window does not lose your work.
4. Who processes data for us
Each only what they need to do their job, under contracts that bind them to it:
Parcels shipped outside the EU carry your name, address and phone to the carriers and customs authorities of the destination country, as delivery requires. Where a provider processes data outside the European Economic Area, it does so under safeguards recognised by the GDPR, such as an adequacy decision of the European Commission or its standard contractual clauses.
5. How long we keep it
Order and invoicing data: as long as Portuguese tax law requires (currently 10 years). Account data: while your account exists. Measurements: until you ask us to delete them. Newsletter: until you unsubscribe. Unfinished configurations in your browser: up to 24 hours.
6. Your rights
Under the GDPR you may access, rectify, delete and port your data, object to or restrict its processing, and withdraw any consent at any time — write to us and we will act on it. You may also complain to the Portuguese supervisory authority:
7. Cookies
This store sets only the cookies it needs to work, all of its own:
Your language is part of the page address. The configurator keeps an unfinished configuration in your browser for up to 24 hours (see clause 3), and Stripe's payment page sets its own cookies, under Stripe's policy, when you pay there.
No analytics, advertising or tracking cookies are used. If that ever changes, we will ask for your consent first — plainly, without dark patterns.