Privacy Policy
Last updated: 9 September 2026
This Privacy Policy explains how "Salted Shiba" (“we”, “us”, or “our”) collects, uses, stores, and shares personal data when you use saltedshiba.com.
1. Who We Are
The data controller responsible for the processing of personal data is:
Anna Koroleva
Trading as: Salted Shiba
Email: privacy@saltedshiba.com
If you have any questions about this Privacy Policy or the processing of your personal data, you can contact us using the email address above.
2. Personal Data We Collect
Depending on how you use the website, we may process the following personal data:
- your name;
- email address;
- shipping address;
- billing address;
- telephone number, where necessary for an order or delivery;
- order details and purchase history;
- account information and information relating to account access;
- communications with us;
- technical information necessary for the operation and security of the website, including IP address, browser information, server requests, and their date and time.
We do not store full payment card details. Payment information required to process a payment is handled by the payment service providers we use.
3. How and Why We Use Your Data
Processing and fulfilling orders
We use your name, contact details, addresses, and order information to process your order, receive payment, prepare and deliver your products, handle returns, and deal with questions or problems relating to your order. The legal basis for this processing is the performance of a contract with you.
Providing your customer account
We use account information to provide access to your account, store addresses and order history, and provide related website functionality. The legal basis for this processing is the performance of a contract and the provision of services requested by you.
Compliance with legal obligations
We retain certain information relating to orders, payments, and customers where and for as long as required by applicable tax, accounting, or other laws.
Website operation and security
We may process technical information and server logs to operate the website, diagnose technical problems, prevent abuse, and protect the website and its users. The legal basis for this processing is our legitimate interest in maintaining the security and proper operation of our services.
Marketing communications
Where you have separately agreed to receive marketing communications, we may use your email address to send information about new products, offers, and other store news.
You can withdraw your consent to marketing communications at any time. This does not affect transactional or service messages necessary to process your orders or operate your account.
4. Sharing Personal Data
We do not sell your personal data.
We may share personal data with service providers where this is necessary to fulfil an order or operate the store. We limit the information shared to what is necessary for the relevant purpose.
These service providers may include:
- postal operators, couriers, and other delivery providers, where necessary to deliver your order;
- payment service providers, where necessary to process and confirm payments;
- hosting and technical infrastructure providers, where necessary to operate and secure the website;
- email service providers, where necessary to send messages relating to orders and accounts and, where applicable, marketing communications;
- accountants, tax advisers, public authorities, or other parties where disclosure is necessary to comply with applicable law.
We aim to provide each recipient only with the personal data necessary to perform the relevant task.
5. Payments
Payments are processed by third-party payment service providers.
We do not receive or store full payment card numbers, CVV/CVC codes, or other card credentials used by the payment provider to authorise a transaction.
Payment service providers may process personal data in accordance with their own terms and privacy policies.
6. Delivery
Where necessary to deliver an order, relevant personal data may be provided to a postal operator, courier, or other delivery service.
Only information necessary to arrange and complete the particular delivery is provided.
7. Where Your Data Is Processed
The primary website, account, and order data is hosted on servers located within the European Economic Area (EEA).
Some service providers, such as payment or email providers, may process personal data outside the EEA. Where this occurs, personal data will only be transferred where there is a lawful basis for the transfer and appropriate safeguards are in place as required by applicable data protection law.
8. How We Protect Your Data
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
Access to personal data is limited to persons and service providers who need it for the purposes described in this Privacy Policy.
9. How Long We Keep Your Data
Account data and associated personal information are generally retained until one year after your most recent purchase or account login, whichever is later.
After this period, the data is deleted or anonymised unless continued retention is required by law or is reasonably necessary for the establishment, exercise, or defence of legal claims.
Information that we are legally required to retain for accounting, tax, or other statutory purposes is kept for the period required by applicable law. In particular, relevant tax and accounting records may be retained for 10 years.
Server logs are generally retained for 30 days, except where particular records need to be retained for longer in connection with a security incident, prevention of abuse, or the establishment, exercise, or defence of legal claims.
10. Cookies
The website uses only strictly necessary technical cookies required for its operation, such as cookies used to maintain sessions, provide authentication, or protect the security of the website.
We do not use cookies for advertising tracking or profiling.
If we introduce optional cookies or other tracking technologies that require consent in the future, they will not be used until the required consent has been obtained.
11. Marketing Communications
We may send marketing communications only where permitted by applicable law.
Where consent is required, it is requested separately and is not a condition of making a purchase.
You can unsubscribe from marketing communications at any time by using the unsubscribe option provided in the message or by contacting us at privacy@saltedshiba.com.
Messages necessary to process or fulfil an order, maintain the security of your account, or provide requested account functionality are not marketing communications and may be sent regardless of your marketing preferences.
12. Your Rights
Under the GDPR, where applicable, you have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing;
- receive personal data you have provided to us in a portable format;
- withdraw consent where processing is based on your consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise any of these rights, contact us at privacy@saltedshiba.com.
Some information cannot be deleted immediately where we are required to retain it by law, including certain tax and accounting records.
13. Complaints
If you believe that your personal data has been processed in violation of applicable data protection law, you may contact us at privacy@saltedshiba.com.
You also have the right to lodge a complaint with the competent data protection supervisory authority.
In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, for example if the functionality of the website, our service providers, or applicable legal requirements change.
The current version of this Privacy Policy will always be published on this page together with the date of the latest update.