Who is Responsible
The controller responsible for data processing on this website is:
Katharina Popp
Rua dos Combatentes 679
4405-738 Vila Nova de Gaia, Portugal
kat@makeitpopp.eu
Controller
What We Collect
Data We Process
We only collect data that you provide voluntarily through our contact form or by emailing us directly. This includes your name, email address, and any information you choose to share (e.g. dog measurements for ordering).
We do not use tracking pixels, analytics tools, or advertising cookies.
Fonts
All fonts used on this website are hosted on our own server. No data
(such as your IP address) is transmitted to Google or any other
third party in order to display them.
Hosting & Recipients
Who Receives Your Data
Our website is hosted by Netlify, Inc. (USA). When you visit the site, Netlify processes technical access data (e.g. IP address, browser type, time of request) in server log files, which is necessary for the secure and stable operation of the website (Art. 6(1)(f) GDPR). Netlify is certified under the EU–US Data Privacy Framework, which provides a valid basis for the transfer of data to the USA.
If you place an order, we share your name and delivery address with the shipping carrier engaged to deliver your parcel, solely for the purpose of fulfilling the contract. We do not otherwise sell, rent, or pass on your personal data to third parties.
Messaging via WhatsApp
For made-to-order pieces, we may offer to continue our conversation via WhatsApp Business — in particular to discuss a side-profile photo of your dog, which helps us confirm the right fit. Using WhatsApp is entirely optional; you can always reach us by email instead. Messages and media sent via WhatsApp are end-to-end encrypted.
WhatsApp is provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, part of the Meta group. When you message us on WhatsApp, we process the data you send — in particular your phone number, profile name, the content of your messages, and any photos you share — solely to answer your enquiry and fulfil your order.
The legal basis is Art. 6(1)(b) GDPR (steps taken prior to, and performance of, a contract) where the exchange relates to your order, and Art. 6(1)(a) GDPR (consent), which you give by actively choosing this channel. You can withdraw your consent at any time with effect for the future, simply by continuing with us over email.
Please send us only photos of your dog, and no images in which you or other people are identifiable.
Using WhatsApp may involve the transfer of data to the USA. Meta Platforms, Inc. is certified under the EU–US Data Privacy Framework, which provides a valid basis for this transfer to the USA. For customers in the United Kingdom, the transfer is covered by the UK Extension to the EU–US Data Privacy Framework; for customers in Switzerland, by the Swiss–US Data Privacy Framework. Beyond this, WhatsApp processes its own data (such as metadata) as an independent controller, over which we have no influence. Details can be found in WhatsApp's privacy policy.
We keep message threads and any photos you send only as long as necessary to handle your enquiry and order, and delete them afterwards unless we are legally required to retain them.
Why We Use It
Legal Basis & Purpose
We process your data solely to respond to your enquiry and, if an order is placed, to fulfil our contractual obligations. The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in responding to messages).
We do not use your data for marketing without your explicit consent.
Storage
How Long We Keep It
We retain your data only as long as necessary to fulfil the purpose for which it was collected, or as required by law (e.g. tax records for 10 years under Portuguese law).
Your Rights
GDPR Rights
Under the GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data. You also have the right to data portability and, where processing is based on consent, the right to withdraw that consent at any time.
You have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt. You may also contact the supervisory authority in your country of residence.
To exercise any of these rights, contact us at kat@makeitpopp.eu.
Last Updated
Version
This privacy policy was last updated: August 2026