Privacy Policy

The controller responsible for processing your personal data is:

Glaciergadget - Unipessoal Lda VAT: 515 176 311 Av. do Infante, Edifício Henrique I, Nr. 60, Bloco C, 2.ºC 9000-015 – Funchal, Portugal Email: hello@madeirakids.com

In this Privacy Policy, 'Madeira Kids', 'we', 'us' and 'our' refers to Glaciergadget - Unipessoal Lda, operator of the Madeira Kids platform (madeirakids.com).

We collect only the data necessary to provide our services. Depending on how you use the platform, we may collect the following data:

• check_circleIdentification and contact data: name, email address and, if you are a business partner, your company name, VAT number, registered address and phone number.
• check_circleAccount data: email address and, if you register via Google, the name and profile picture associated with your Google account.
• check_circleUsage data: pages visited, time on site, clicks, searches performed on the platform and saved preferences.
• check_circlePayment data: when you make payments, these are processed by Stripe, Inc. Madeira Kids does not store credit or debit card data — we only receive confirmation of the transaction result.
• check_circleCommunications: messages sent to hello@madeirakids.com or through platform forms.
• check_circleTechnical data: IP address, browser type, operating system and device identifiers, collected automatically for security and performance purposes.

We process your personal data based on the following purposes and legal grounds, pursuant to Article 6 of the GDPR:

• check_circlePerformance of a contract (Art. 6(1)(b)): creating and managing your account, providing contracted services, processing payments and sending service-related communications.
• check_circleLegitimate interests (Art. 6(1)(f)): improving the platform, ensuring security, preventing fraud and personalising the user experience.
• check_circleLegal obligation (Art. 6(1)(c)): retaining accounting and tax records as required by Portuguese law.
• check_circleConsent (Art. 6(1)(a)): sending newsletters and marketing communications — only when you have given explicit consent, which you may withdraw at any time.

We retain your personal data only for as long as necessary for the purposes described in this policy or to comply with legal obligations:

• check_circleAccount data: for as long as your account is active. After account deletion, data is erased within 90 days, unless a legal retention obligation applies.
• check_circleBilling and transaction data: 10 years, as required by Portuguese tax legislation (VAT Code and Corporate Income Tax Code).
• check_circleCommunications and support requests: 3 years.
• check_circleAnonymised usage data: may be retained indefinitely for statistical purposes, as it does not allow user identification.

We do not sell or transfer your personal data to third parties for marketing purposes. We share data only in the following circumstances:

• check_circleStripe, Inc.: payment processing. Stripe handles payment data under its own Privacy Policy, available at stripe.com/privacy.

We use cookies and similar technologies to ensure the platform works correctly, analyse usage and personalise the experience. Cookies fall into the following categories:

• check_circleEssential cookies: required for the platform to function (authentication session, language preferences). These cannot be disabled.
• check_circleAnalytical cookies: collect anonymous information about how users navigate the platform. Used to improve the service.
• check_circleThird-party cookies: services such as Google Firebase may set their own cookies for authentication and security purposes.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

As a data subject, you have the following rights under Articles 15–22 of the GDPR:

• check_circleRight of access (Art. 15): obtain confirmation of whether we process your data and, if so, receive a copy.
• check_circleRight to rectification (Art. 16): request correction of inaccurate or incomplete data.
• check_circleRight to erasure (Art. 17): request deletion of your personal data ('right to be forgotten'), where applicable.
• check_circleRight to restriction of processing (Art. 18): request suspension of processing in certain circumstances.
• check_circleRight to data portability (Art. 20): receive your data in a structured, machine-readable format.
• check_circleRight to object (Art. 21): object to processing based on legitimate interests or for direct marketing purposes.
• check_circleRight to withdraw consent: at any time, without affecting the lawfulness of processing based on consent given before withdrawal.

To exercise any of these rights, contact us at hello@madeirakids.com. We will respond within 30 days. If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the Portuguese data protection authority (CNPD) at cnpd.pt.

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, accidental alteration or destruction. These measures include: HTTPS/TLS data transmission, secure authentication, role-based access control and use of certified infrastructure providers (Google Cloud, Vercel).

Despite the measures in place, no system for transmitting data over the Internet is completely secure. In the event of a data breach that puts your rights and freedoms at risk, we will notify the competent authorities and, where required, the affected data subjects within the timeframes set out in the GDPR.

The Madeira Kids platform is aimed at parents and guardians of children. We do not intentionally collect personal data from children under 16 without the consent of their legal representatives, as provided for in Article 8 of the GDPR and Law No. 58/2019 (the Portuguese GDPR implementation act).

If we become aware that we have collected data from a minor without the appropriate consent, we will delete that data immediately. If you are aware of such a situation, please notify us at hello@madeirakids.com.

We may update this Privacy Policy periodically. When we do, we will update the 'Last updated' date at the top of this page. For material changes that affect how we process your data, we will notify registered users by email at least 14 days before the changes take effect.

Continued use of the platform after the effective date of the changes constitutes acceptance of the new policy. If you do not agree with the changes, you should delete your account before the effective date.