Privacy Policy

Last updated: February 2026

1. Who We Are

Qashabiya is a handwoven wool surf cloak brand based in Ericeira, Portugal. Our website is qashabiya.com. For any privacy-related questions, contact us at info@qashabiya.com.

2. What Data We Collect

We collect the following personal data when you interact with us:

  • Order information: Name, email, phone number, shipping address, payment details (processed by Stripe — we never see your full card number).
  • Newsletter: Email address when you subscribe.
  • Contact form: Name, email, and message content.
  • Analytics: Anonymous usage data via Vercel Analytics (page views, device type, country). No cookies are set for analytics.

3. How We Use Your Data

  • To fulfil and ship your orders.
  • To send order confirmation and shipping notification emails.
  • To send newsletter updates (only if you opted in).
  • To respond to your inquiries via the contact form.
  • To improve our website and customer experience.

4. Third-Party Services

We share your data only with the services necessary to operate:

  • Stripe — payment processing (Stripe Privacy Policy).
  • Supabase — database hosting (EU region).
  • Resend — transactional emails.
  • Vercel — website hosting and analytics.

We do not sell your data to third parties. We do not use advertising trackers except Meta Pixel for ad performance measurement, which you can opt out of via your browser settings.

5. Data Retention

Order data is retained for 5 years for legal and accounting purposes. Newsletter subscriptions are retained until you unsubscribe. Contact form messages are retained for 1 year.

6. Your Rights (GDPR)

Under EU data protection law (GDPR), you have the right to:

  • Access and receive a copy of your personal data.
  • Correct inaccurate data.
  • Request deletion of your data.
  • Withdraw consent (e.g., unsubscribe from newsletter).
  • Data portability.

To exercise any of these rights, email us at info@qashabiya.com. We will respond within 30 days.

7. Cookies

We use only essential cookies required for site functionality (e.g., authentication session). We do not use tracking cookies. Cloudflare Turnstile may set a cookie for bot protection on the login page.

8. Changes

We may update this policy from time to time. Material changes will be posted on this page with an updated date.