Privacy and Cookies Policy

Data Controller

At Fun Padel, we believe you should have full control over your personal data. In addition to the legal obligations we comply with, only you can authorize the use of your data for purposes that require consent. We are committed to never selling or renting your personal data. If we occasionally use subcontractors or service providers, they act solely on our behalf and under our documented instructions, under GDPR-compliant contracts.

Data Controller

SURPRESACENTUADA UNIPESSOAL LDA (“Fun Padel”)

VAT: 518 744 175

Registered Address: Rua Branca Edmée Marques nº 122, 2755-237 Alcabideche, Cascais, Portugal

Email: funpadel15@gmail.com · Phone: +351 963 781 168

Website: www.funpadel.pt

Registered at the Lisbon Commercial Registry.

This page explains where, when, how, and why we process your personal data and what rights you have.

We aim to support your padel experience and assist you in choosing products that suit you. We only communicate about what is relevant to you and never share your data with third parties for their own marketing purposes.

To improve our products and overall customer experience, we may send you emails after a purchase asking for feedback about your order.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).

You can unsubscribe at any time via your account or the link at the bottom of each email.

Account Management

Why create an account?

Your Fun Padel account allows you to track your orders, view purchase history, manage addresses and preferences, and access invoices or receipts.

You may delete your account at any time (subject to applicable legal retention obligations).

Data processed: name, surname, email, addresses, phone number, purchase history, preferences, browsing history (when logged in).

Retention: until account deletion or 2 years after the last login.

Legal basis: Performance of a contract and Legitimate interest.

Our loyalty program may grant cashback or other benefits based on your purchases. Participation is optional and based on your consent.

Data may also be used for commercial communications if you have opted in.

Data processed: name, surname, email, phone number, address, purchase history.

Retention: until account closure or 2 years after last login.

Legal basis: Consent (for communications) and Performance of a contract (for benefits).

We respect your privacy and your time.

Marketing messages are sent only with your prior consent (opt-in).

You can withdraw your consent at any time.

Data processed: contact and identification details, purchase history, preferences, and interactions (if consented).

Retention: up to 3 years after the last contact or until consent is withdrawn.

Legal basis: Consent.

Automated Decisions / Profiling: We may use limited profiling to personalize communications, without legal or significant effects. Any advanced profiling requires explicit consent.

Payments on our Website are processed through Stripe (with Apple Pay / Google Pay) and PayPal.

Fun Padel never has access to your full card data, as all transactions are tokenized and secured by these providers.

Fraud prevention or PSD2 compliance checks may be performed by them.

Legal basis: Performance of a contract and Legal obligation (PSD2).

We collect and process data to manage your purchase, arrange delivery, issue invoices, and prevent fraud.

Deliveries are carried out in partnership with trusted logistics providers such as CTT, DPD, and GLS.

Data processed: identification, contact details, billing and shipping addresses, order number, payment metadata (tokenized), anti-fraud logs.

Retention:

• Data shared with carriers: 1 year after delivery;
• Order and invoice data: 10 years (for tax and commercial purposes);
• Card data: stored by payment providers, in compliance with PSD2.

Legal basis: Performance of a contract and Legal obligation.

Data processed: email, customer ID, phone number, billing and shipping addresses, payment data (tokenized), order value and frequency, risk indicators.

Retention: 6–12 months or while an investigation remains open.

Legal basis: Legitimate interest (security and anti-fraud).

Data processed: name, billing and shipping address, email, payment method, order value, description of products, and purchase date.

Retention: 10 years, as required by law.

Legal basis: Legal obligation.

What Are Cookies and Why We Use Them

Cookies are small text files stored on your browser or device that enable essential website functionality, remember preferences, and—when you consent—help improve performance and personalize content and ads.

Types of Cookies

• Functional / Technical (Strictly Necessary): operation, security, load balancing, session management — Legal basis: Legitimate interest / technical necessity;
• Analytical / Statistical (Opt-in): audience measurement and performance (Google Analytics 4) — Legal basis: Consent;
• Marketing (Opt-in): advertising and remarketing (Meta Pixel, Google Ads) — Legal basis: Consent.

Examples

• Cloudflare (security/performance): __cf_bm, cf_clearance, __cfruid — Session / 1 day
• Stripe (payments): __stripe_mid, __stripe_sid — Session / 12 months
• PayPal (checkout): ts, ts_c, x-pp-s, l7_az — Session / up to 24 months
• GA4: _ga, ga* — up to 14 months
• Meta Pixel: _fbp — 3 months
• Google Ads: _gcl_au — 3 months
• Cookiebot: CookieConsent — 12 months

You can manage or change cookie consent preferences through the Cookiebot banner displayed on our website or via your browser settings.

Some of our service providers (Stripe, Google, Meta, Cloudflare, PayPal) may process data outside the European Economic Area (EEA).

We select these providers carefully and require Standard Contractual Clauses (SCCs) and additional security safeguards.

They act solely under Fun Padel’s instructions and never use your data for their own purposes.

A copy of the SCCs can be requested by email at funpadel15@gmail.com.

You retain full control of your personal data and have the right to:

• Access your data;
• Rectify inaccurate information;
• Erase your data (“right to be forgotten”);
• Object to processing (e.g., marketing);
• Restrict processing;
• Data portability;
• Withdraw consent at any time, without affecting prior lawful processing.

To exercise your rights, contact us at funpadel15@gmail.com.

Complaints may be addressed to CNPD – Comissão Nacional de Proteção de Dados (www.cnpd.pt).

Fun Padel currently does not have a designated Data Protection Officer, as it is not legally required at this stage.

For any privacy-related inquiries, please contact funpadel15@gmail.com.

If a DPO is appointed in the future, this section will be updated accordingly.

We apply appropriate technical and organizational measures (access control, encryption, pseudonymization, backups, audit logs) to protect your personal data from unauthorized access, loss, or alteration.

Our services are intended for users aged 16 and above.

We do not knowingly collect personal data from minors without valid parental consent.

We may update this Privacy and Cookies Policy to reflect legal or operational changes.

The latest version will always be published with the corresponding update date.

Last updated: October 2025.