Kami Studio – Unipessoal, Lda is committed to protecting the privacy and personal data of users of the website www.kamistudio.pt, ensuring that personal data is processed in a transparent, secure manner and in compliance with the General Data Protection Regulation (GDPR) and other applicable legislation.

1. Data Controller

The entity responsible for the processing of personal data is: Kami Studio – Unipessoal, Lda Tax Identification Number (NIF): 517 235 340 Address: Rua das Lavourinhas 77, 4410-395 Arcozelo, Vila Nova de Gaia, Portugal Email: info@kamistudio.pt Phone: +351 926 713 570 For any matters related to the protection of personal data, users may contact us via the email address indicated above.

2. Personal Data Collected

In the context of using the website and placing orders, Kami Studio may collect the following personal data:

• Name
• Email address
• Billing and/or delivery address
• Mobile phone number (used exclusively to support order delivery)
• Order and purchase history
• Website browsing and usage data (via cookies)

Kami Studio does not collect sensitive personal data within the meaning of Article 9 of the GDPR.

3. Purposes of Data Processing

The personal data collected is processed for the following purposes:

• Order processing and management;
• Invoicing and compliance with legal obligations;
• Product delivery;
• Communication with the customer regarding order status;
• Customer support and request management;
• Sending marketing communications, campaigns and promotions;
• Statistical analysis, website improvement and optimisation of advertising campaigns.

4. Legal Basis for Data Processing

The processing of personal data by Kami Studio is based on the following legal grounds:

• Performance of a contract (order processing);
• Compliance with legal obligations;
• Consent of the data subject (namely for marketing communications and cookies);
• Legitimate interest, within the legally permitted limits, for improving the services provided.

5. Consent for Marketing Communications

Whenever the user:

• Subscribes to the newsletter; or
• Places a purchase on the website,

explicit consent is requested for the sending of marketing communications, promotional campaigns and news from Kami Studio, as well as transactional communications (e.g. order status updates). The user may withdraw their consent at any time via the unsubscribe link included in the communications sent or by contacting info@kamistudio.pt.

6. Cookies and Tracking Technologies

The website www.kamistudio.pt uses cookies and similar technologies to:

• Ensure the proper functioning of the website;
• Analyse usage and performance patterns;
• Personalise content and advertisements;
• Measure the effectiveness of marketing campaigns.

The tools used include analytics and advertising technologies, such as traffic analysis platforms and advertising pixels. The website features a cookie consent banner, allowing users to accept, reject or customise the use of cookies in accordance with applicable legislation. Consent records are stored in the internal system. Users may change their cookie preferences at any time.

7. Processors and Third Parties

To fulfil the purposes described above, Kami Studio may use third-party entities that process personal data on its behalf, namely for:

• Hosting and technical infrastructure;
• Payment processing;
• Shipping and delivery management;
• Email communication services;
• Website performance and advertising campaign analysis.

These entities act as data processors and are contractually bound to ensure confidentiality, security and compliance with the GDPR.

8. Data Transfers

Personal data may be processed within the European Economic Area (EEA) or, where applicable, transferred outside the EEA, ensuring that appropriate safeguards are adopted in accordance with applicable legislation.

9. Data Retention

Personal data is retained only for the period necessary to fulfil the purposes for which it was collected, namely:

• For the duration of a contractual or commercial relationship;
• For the period required to comply with legal obligations;
• Until consent is withdrawn, where processing is based on consent.

10. Data Subject Rights

Under the GDPR, users have the right to:

• Access their personal data;
• Rectification of inaccurate or incomplete data;
• Erasure of data (“right to be forgotten”);
• Restriction of processing;
• Data portability;
• Objection to processing;
• Withdrawal of consent, where applicable.

The exercise of these rights may be carried out by submitting a written request to info@kamistudio.pt.

11. Data Security

Kami Studio adopts appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, unauthorised disclosure or access. The website is hosted on a dedicated server, ensuring high standards of security and reliability.

12. Supervisory Authority

If the user considers that their rights have not been duly respected, they have the right to lodge a complaint with the competent supervisory authority: National Data Protection Commission (CNPD) www.cnpd.pt

13. Changes to the Privacy Policy

Kami Studio reserves the right to amend this Privacy Policy at any time. Any changes will be published on the website and shall take effect from the date of publication.