Your cart

Privacy and Data Protection Policy

Last updated: 8 August 2026

1. Who is responsible for your data?

The controller responsible for processing personal data through this website is:

Kasper van Nuland, trading as KavanuSurf / Tahe Sport Portugal
Sole Trader (Empresário em Nome Individual)
NIF: 259065587
Caixa Postal 363, Sector J90
Vale da Telha
8670-156 Aljezur
Portugal

Email: info@kavanusurf.com
Telephone: +351 963 982 413

2. Personal data we collect

Depending on how you use the website, we may collect:

  • Your name, billing address and delivery address

  • Your email address and telephone number

  • Order, invoice, payment-status and delivery information

  • Customer-account information

  • Communications and customer-service requests

  • IP address, browser information, device information and website activity

  • Cookie preferences and information collected through authorised analytics or advertising technologies

Payment-card details are generally entered directly into the systems of our payment providers. We do not normally receive or store full card details.

3. Why we process personal data

We may process personal data to:

  • Process and deliver orders

  • Accept and verify payments

  • Create invoices and maintain legally required records

  • Communicate about orders, returns and customer-service requests

  • Prevent fraud and protect the security of the website

  • Operate and improve the webshop

  • Measure website performance

  • Display or measure advertising, where the user has consented

  • Comply with legal and regulatory obligations

  • Establish, exercise or defend legal claims

4. Legal grounds

Depending on the purpose, processing is based on:

  • Performance of a contract or steps requested before entering into a contract

  • Compliance with legal obligations, including tax and accounting requirements

  • Our legitimate interests in operating, securing and improving the business

  • Your consent, particularly for non-essential cookies, advertising technologies and any optional direct marketing

Where processing is based on consent, consent may be withdrawn at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

5. Cookies and Meta Pixel

The website uses cookies and similar technologies.

Essential cookies are required for functions such as the shopping cart, checkout, security and customer login. These may be used without consent where legally permitted.

With the visitor’s consent, we may use Meta Pixel to measure website activity, understand advertising performance and create or reach relevant audiences on Meta platforms such as Facebook and Instagram. Meta may receive information such as the visitor’s IP address, browser information, pages viewed and purchase-related events.

Non-essential cookies and Meta Pixel should only be activated after the visitor has made a choice through the website’s cookie banner. Visitors can withdraw or change their choice through the cookie settings available on the website.

Meta processes data under its own privacy policy:

https://www.facebook.com/privacy/policy/

Browser settings can also be used to block or delete cookies, although this may affect parts of the website.

6. Shopify and other service providers

The webshop is hosted and supported by Shopify. Shopify may process personal data needed to operate the store, provide checkout functionality, maintain security and support transactions.

We may also share necessary personal data with:

  • Shopify

  • Easypay

  • PayPal

  • Card-payment providers and financial institutions

  • Delivery and logistics providers

  • IT, hosting and security providers

  • Professional advisers, public authorities or regulators where required by law

  • Meta, where the visitor has consented to Meta Pixel

These parties receive only the information reasonably required for their role. Some act as processors on our behalf, while others act as independent controllers under their own privacy policies.

7. International transfers

Some providers, including Shopify, PayPal and Meta, may process data outside Portugal or the European Economic Area.

Where required, international transfers must be protected through an adequacy decision, approved contractual safeguards or another legally recognised transfer mechanism.

8. Retention

Personal data is kept only for as long as necessary for the relevant purpose.

Order, invoice and transaction records may be retained for the period required by Portuguese tax, accounting and commercial law. Customer-service information is retained for as long as reasonably necessary to handle the request and any related claim.

Cookie and advertising data is retained according to the applicable cookie settings and the retention periods of the relevant provider.

When data is no longer required, it will be deleted, anonymised or securely restricted, unless continued retention is required by law.

9. Your rights

Subject to the conditions of the GDPR, you may have the right to:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Request deletion of your data

  • Restrict processing

  • Object to processing

  • Receive certain data in a portable format

  • Withdraw consent

  • Lodge a complaint with a supervisory authority

Requests can be sent to info@kavanusurf.com. We may need to request information to verify the identity of the person making the request.

The Portuguese supervisory authority is:

Comissão Nacional de Proteção de Dados (CNPD)
Website: https://www.cnpd.pt/
Email: geral@cnpd.pt

10. Security

We use reasonable organisational and technical measures, together with the security functions provided by Shopify and our service providers, to protect personal data.

No internet-based service can guarantee absolute security. Customers are responsible for keeping account passwords confidential.

11. Children

The webshop is not intended to collect personal data directly from children. Orders should be placed by adults with legal capacity to enter into a contract.

12. Changes to this policy

We may update this Policy when our services, providers or legal obligations change. The latest version will be published on this page with a revised update date.

13. Contact

For privacy questions or requests, contact:

KavanuSurf / Tahe Sport Portugal
Email: info@kavanusurf.com
Telephone: +351 963 982 413