Privacy policy

Last updated: 03.06.2025

At mellow, protecting your personal data is a priority. We are committed to handling it responsibly, transparently, and in compliance with the general data protection regulation (GDPR) and applicable national legislation.

Your personal data is processed by Mellow Playground Unipessoal Lda, tax identification number 517811928, with registered office at 1200-722 Lisboa, Portugal, hereinafter referred to as “Mellow”, in its capacity as data controller under Regulation (EU) 2016/679 (General Data Protection Regulation) and Law No. 58/2019.

This Privacy Policy describes how Mellow (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from mellowplayground.com (the "Site") or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.

Legal Basis for Processing
We process your personal data on one or more of the following legal bases:

  • your consent (e.g. for marketing communications)
  • the performance of a contract (e.g. processing your order)
  • compliance with a legal obligation (e.g. invoicing, tax obligations)
  • our legitimate interests (e.g. improving services, preventing fraud), except where such interests are overridden by your fundamental rights and freedoms
  • the exercise or defence of legal claims

Types of Data and Purposes by Activity:

  • online purchases: billing, shipping and payment details
  • account creation: name, email, password
  • customer support: contact history and details
  • marketing and newsletters: name and email (based on consent)
  • events or workshops: registration details and preferences

How We Collect and Use Your Personal Information
To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources. The information that we collect, and use varies depending on how you interact with us. This includes information provided directly by you, collected automatically through cookies and similar technologies, and obtained from third parties such as Shopify or payment providers.

Cookies and Similar Technologies
When you visit our website, you will be asked to accept or reject the use of non-essential cookies through a cookie consent banner. This follows Law no. 41/2004, as amended, and the GDPR. Essential cookies (strictly necessary for site functionality) will be used regardless of your preferences. For details about Shopify cookies, see https://www.shopify.com/legal/cookies.

How We Use Your Personal Information

  • To process transactions and deliver products or services
  • To create and manage your account
  • For marketing and personalised content (with your consent)
  • For fraud prevention and security
  • For customer support and service improvement

How We Disclose Personal Information
We may share your information with:

  • Service providers (IT, hosting, payment, shipping, analytics)
  • Shopify and other platforms supporting service delivery
  • Partners with whom we run campaigns or promotions
  • Legal authorities, if required
  • Within our corporate group
  • In the event of business transfer (e.g. sale or merger)

We do not sell your personal data.
Any data sharing is done under GDPR-compliant agreements.

Children’s Data
The Services are not intended for children under the age of 18. We do not knowingly collect personal data from children under this age. If we learn we have collected data from a child under 18 without verified parental consent, we will delete it immediately.

International Transfers
If we transfer your personal data outside the EEA, it will be protected by:

  • an adequacy decision by the European Commission, or
  • standard contractual clauses (SCCs), or
  • another GDPR-compliant mechanism

Security and Retention of Your Information
We apply appropriate technical and organizational measures to protect your data. No system is 100% secure, so we advise caution when sharing sensitive info. We retain personal data only as long as needed for:

  • service provision
  • legal obligations
  • dispute resolution
  • contract enforcement

Your Rights and Choices
Under the GDPR and Portuguese Law No. 58/2019, you have rights to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Object to or restrict processing
  • Withdraw consent (where applicable)
  • Data portability

To exercise these rights, contact us using the details below. We may verify your identity before responding. You can also appoint an authorized agent.

Complaints
If you believe your rights have been violated, you can file a complaint with us or with the Portuguese Data Protection Authority: Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134 - 1.º, 1200-651 Lisboa
Website: www.cnpd.pt
Email: geral@cnpd.pt

Contact Email: shop@mellowplayground.com

If you have any questions or requests regarding your personal data, please contact us.