Política de privacidade
Privacy notice
This notice explains what we collect, why, and for how long, under the General Data Protection Regulation (EU) 2016/679 and Portuguese data protection law. The short version: we collect what an order needs, we keep foot measurements for no more than 12 months, and we build no profiles.
Last updated 15 August 2026
Who is responsible
The controller of your personal data is CALJOFRE - FABRICA DE CALÇADO LDA, Rua 25 de Abril n.º 124, 4650-128 Idães, Felgueiras, Portugal, trading as Lofra. Write to support@caljofrecalcado.baby about anything on this page, or call +351 255331566.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Name, email, phone, delivery address, order contents | To take, ship and support an order, and to honour the guarantee | Performance of a contract |
| Order reference, amounts, payment outcome | Accounting, tax records and resolving payment questions | Legal obligation, and legitimate interest in keeping records |
| Contact-form message, subject and country | To answer you | Consent, given on the form |
| Foot length, forefoot width, usual size, standing hours | To suggest a size and a last | Consent, given on the form |
| Email address on the mailing list | To send product emails | Consent, given separately from any order |
| Technical logs from the hosting platform | Keeping the site up and defending it against abuse | Legitimate interest in operating the service securely |
We do not buy personal data, we do not sell it, and we do not enrich what you give us with data from anywhere else.
Foot measurements and standing hours
The measurements you can send us on the sizing help form describe your body, and the hours you spend standing describe your habits. We treat both with more care than the rest, and we bind ourselves to the following:
- They are used only to work out which stock size and last to suggest.
- They are kept for no longer than 12 months from the day you send them, and are then deleted.
- They are never used to build a health profile, to infer a condition, to segment you, or to target advertising or content at you.
- They are not shared with any third party, and they are not combined with your purchase history for any analytical purpose.
- Providing them is entirely optional. Every measurement we publish is on the product pages, so you can size yourself without telling us anything.
We are shoemakers. A reply about sizing is a statement about the inside of a shoe, never about your health, and nothing we do with these numbers is intended to produce a health assessment of any kind.
Children and young people
This site is not intended for children under 13 and we do not knowingly collect their personal data. If you believe a child under 13 has sent us data, write to support@caljofrecalcado.baby and we will delete it.
A person aged 13 to 17 may use the site and may send a sizing request only with the consent of a parent or guardian, and we may ask for a guardian’s email address before acting on it. Orders may only be placed by someone aged 18 or over.
Retention periods
Each category is kept only as long as the purpose or the law requires, and is then deleted. These are the retention periods that apply:
| Record | Kept for |
|---|---|
| Order and invoice records | Ten years from the end of the financial year, as Portuguese tax and accounting law requires |
| Guarantee-related correspondence | 3 years from delivery, plus one year |
| Contact-form messages | 24 months from the last exchange |
| Foot measurements and standing hours | 12 months |
| Mailing list entry | Until you unsubscribe, then a suppression record only |
| Checkout details where payment was not completed | 12 months, so an interrupted order can be picked up again, then deleted |
| Technical logs | Up to 30 days |
Who else sees your data
- Our payment service provider, which processes the card payment. They receive what a payment needs. We never see your card details and they never reach this site.
- The carrier delivering your order, which receives the name, address and phone number needed to deliver it.
- Our hosting and email providers, which process data on our instructions under a data processing agreement.
- Our accountants and, where required, the tax authority, for the statutory records.
That is the complete list. There are no advertising networks, no data brokers and no analytics companies in it.
Transfers outside the EEA
Some of our providers operate infrastructure outside the European Economic Area, principally in the United States. Where data is transferred there it is covered by the European Commission’s standard contractual clauses or an adequacy decision, together with technical measures including encryption in transit and at rest.
You may ask us for details of the safeguards applying to a particular transfer.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you, and get a copy.
- Rectify anything inaccurate or incomplete.
- Erase data, where we no longer need it or where you withdraw the consent it rests on.
- Restrict processing while a dispute about accuracy or legitimate interest is resolved.
- Portability — receive the data you gave us in a structured, machine-readable format.
- Object to processing based on our legitimate interests, and to direct marketing at any time.
- Withdraw consent at any time, without affecting what was lawful before you withdrew it.
Write to support@caljofrecalcado.baby. We answer within one month. There is no charge, and we will not ask you to give a reason.
We take no automated decision that produces a legal or similarly significant effect on you, and we carry out no profiling.
Marketing and consent
The mailing list is opt-in and separate. The box for it at checkout is unticked, is not required to place an order, and ticking it changes nothing about the order itself.
Every message carries an unsubscribe link that works immediately. We keep a suppression record afterwards so that an unsubscribed address is not re-added by accident.
Security
The site is served over HTTPS with strict transport security. Form submissions are validated on the server and rate limited. Access to order data is restricted to the people who need it to fulfil and support orders. We hold no card data at all. Full technical description on payments and security.
Complaining to the authority
If you think we have handled your personal data wrongly, tell us first — most things are fixed the same week. You also have the right to lodge a complaint with the Portuguese supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD) — https://www.cnpd.pt
If you live in another EEA country, you may complain to the supervisory authority there instead.
Changes to this notice
We update this notice when what we do changes. The date at the top is the date of the current version. Where a change materially affects how we use data you have already given us, we will tell you directly rather than relying on this page alone.
Contactos
support@caljofrecalcado.baby · +351 255331566 · Contact form
Livro de Reclamações Eletrónico — complaints filed there are answered within 15 working days.