Privacy policy

Privacy Policy

Effective Date: 12 November 2026

Organized Workspace values the trust customers place in us when they browse our website, purchase office supplies or contact our support team. We understand that personal information deserves careful handling, and we aim to collect only information that is relevant to providing our services and operating our online store.

This Privacy Policy explains how personal data may be collected, used, stored, shared and protected when you visit www.neatkitchenbase.com or communicate with Organized Workspace.

This policy is designed around the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679, and applicable Portuguese data protection legislation, including Law No. 58/2019.

1. Data Controller

For the purposes of this Privacy Policy, the store details supplied are:

Business Name: Organized Workspace
Business Address: Rua do Crucifixo, Lisboa, PT-11 1100-184, Portugal
Website: https://www.neatkitchenbase.com
Privacy Contact Email: support@neatkitchenbase.com

The legal identity of the data controller should be completed with the registered legal entity name and relevant Portuguese tax or registration details, where applicable.

If a Data Protection Officer is legally required or formally appointed, their contact details should also be published here. We do not identify a Data Protection Officer in this policy because no such details have been provided.

2. What Personal Data We May Collect

The information collected depends on how you use our website and services.

A. Information You Provide When Ordering

When you place an order, we may collect:

  • Full name.

  • Billing address.

  • Delivery address.

  • Email address.

  • Telephone number, where provided or required for delivery.

  • Products selected and quantities ordered.

  • Order history and transaction references.

  • Delivery instructions.

  • Customer service communications.

This information is used to process your order, arrange delivery, provide assistance and maintain appropriate business records.

B. Payment-Related Information

When you pay for an order, payment information may be processed by the payment service provider selected at checkout.

Depending on the payment method, transaction-related information may include:

  • Payment status.

  • Transaction identification number.

  • Payment amount and currency.

  • Billing information.

  • Payment method details.

  • Fraud-prevention or verification information.

Full payment card details may be handled directly by the relevant payment provider rather than stored by Organized Workspace. The exact information processed depends on the payment services enabled on our website.

Please do not email us your complete payment card number, security code, account password or other sensitive authentication information.

C. Technical and Website Usage Data

When you browse the website, certain technical information may be collected automatically, including:

  • IP address.

  • Browser type and version.

  • Device type and operating system.

  • Website pages visited.

  • Date and time of visits.

  • Referring website or traffic source.

  • Approximate session duration.

  • Cookie identifiers and similar technical information.

  • Website performance and interaction data.

This information may be used to maintain website security, understand visitor behaviour and improve the shopping experience.

3. Purposes and Legal Bases for Processing

Under the GDPR, personal data must be processed on an appropriate legal basis. Depending on the circumstances, we may rely on the following bases.

Performance of a Contract

We process information when it is necessary to fulfil an order or take steps requested by you before entering into a purchase contract.

Examples include:

  • Processing your order.

  • Confirming payment.

  • Preparing and dispatching products.

  • Arranging delivery.

  • Responding to order-related questions.

  • Processing returns and refunds.

Compliance with Legal Obligations

We may process and retain certain information to meet legal duties, including accounting, tax, consumer protection and regulatory recordkeeping obligations.

Legitimate Interests

Where permitted by the GDPR, we may process limited information for legitimate business purposes, provided those interests are not overridden by your rights and freedoms.

Examples may include:

  • Protecting the website against fraud or abuse.

  • Maintaining network and information security.

  • Preventing unauthorised transactions.

  • Improving website performance.

  • Handling customer service issues.

  • Establishing, exercising or defending legal claims.

Consent

Where required, we will ask for your consent before processing personal data for certain optional purposes, such as non-essential cookies or specific forms of electronic marketing.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

4. How We Use Personal Data

We may use personal information to:

  • Process and confirm purchases.

  • Arrange shipping and delivery.

  • Send order confirmations and transaction updates.

  • Respond to product and website enquiries.

  • Handle complaints, returns and refunds.

  • Maintain customer and accounting records.

  • Detect suspicious or fraudulent activity.

  • Improve website functionality and navigation.

  • Understand general product interest and shopping patterns.

  • Send promotional communications where legally permitted.

  • Comply with applicable legal obligations.

We do not intend to use personal information for purposes incompatible with the purposes explained at the time of collection without an appropriate legal basis.

5. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support website functions and improve the browsing experience.

Depending on the configuration of the website, cookies may be used to:

  • Keep shopping cart contents available during a visit.

  • Remember certain website preferences.

  • Support secure checkout functions.

  • Measure website traffic.

  • Understand how visitors navigate the store.

  • Evaluate advertising performance.

  • Support marketing and personalisation features.

Strictly necessary cookies may be required for core website functions. Non-essential analytics or advertising cookies should only be used in accordance with applicable consent requirements.

You may manage cookies through your browser settings and, where provided, through the website's cookie preference tool.

Disabling certain cookies may affect the availability or performance of shopping cart, checkout or other website functions.

6. Sharing Personal Data with Service Providers

We may share relevant personal data with carefully selected service providers where necessary to operate our store.

These may include:

Payment providers: To process payments, refunds, verification and transaction security.

Delivery providers: To collect and deliver orders and provide tracking information. They may receive your name, address and delivery contact details.

E-commerce and hosting providers: To operate the website, shopping cart, checkout and related technical systems.

Customer support providers: To help us manage enquiries and order-related communications.

Analytics and advertising providers: To measure website performance or support marketing, where enabled and legally permitted.

Professional advisers: Such as accountants, auditors, insurers and legal advisers, where necessary.

Public authorities and regulators: Where disclosure is required by law or necessary to respond to a valid legal request.

We aim to disclose only the information reasonably necessary for the relevant purpose.

7. International Data Transfers

Some service providers may process or store personal data outside Portugal or the European Economic Area (EEA).

Where personal data is transferred to a country outside the EEA, we will take steps required by the GDPR, which may include relying on:

  • An adequacy decision adopted by the European Commission.

  • Standard Contractual Clauses approved by the European Commission.

  • Another lawful transfer mechanism recognised by the GDPR.

Where required, we will consider whether additional safeguards are necessary to protect personal data transferred internationally.

The countries involved may depend on the hosting, payment, delivery, analytics and other services used by the website.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, subject to legal retention duties and the need to establish, exercise or defend legal claims.

Examples include:

  • Order and invoice information may be retained for the periods required by Portuguese accounting and tax law.

  • Customer service correspondence may be retained while an enquiry or dispute remains active and for an appropriate period afterwards.

  • Marketing information may be retained while you remain subscribed or until consent is withdrawn, where consent is the legal basis.

  • Technical information may be retained according to security and analytics requirements.

When information is no longer required, we will take reasonable steps to delete or anonymise it, subject to applicable law.

9. Your Rights Under the GDPR

Depending on the circumstances and applicable legal conditions, you may have the right to:

Access: Request confirmation of whether we process your personal data and obtain access to that information.

Rectification: Ask us to correct inaccurate or incomplete personal data.

Erasure: Request deletion of personal data where the GDPR conditions are met.

Restriction: Ask us to restrict certain processing activities in the circumstances provided by law.

Data portability: Receive certain personal data in a structured, commonly used and machine-readable format, or request its transfer to another controller where the legal requirements are met.

Object: Object to processing based on legitimate interests, including certain forms of direct marketing.

Withdraw consent: Withdraw consent where processing is based on consent.

Complain: Lodge a complaint with the competent data protection supervisory authority.

These rights are subject to legal conditions and exceptions. For example, we may need to retain certain transaction records to comply with tax or accounting obligations even if you request deletion.

10. How to Exercise Your Rights

To submit a data protection request, contact:

support@neatkitchenbase.com

Please use the subject line:

GDPR Data Request — Organized Workspace

In your message, explain the right you wish to exercise and provide enough information for us to identify the relevant records.

We may ask for reasonable information to verify your identity before disclosing or changing personal data.

We will respond within the period required by the GDPR, generally within one month of receiving a valid request. Where the request is complex or numerous, the period may be extended in accordance with the GDPR, and we will inform you where required.

11. Direct Marketing

We may send promotional communications where permitted by applicable law and where any required consent or other legal condition has been satisfied.

You can opt out of marketing emails at any time by:

  • Using the unsubscribe link included in the message, where available.

  • Emailing support@neatkitchenbase.com.

  • Asking us to update your communication preferences.

Opting out of promotional messages does not prevent us from sending essential communications about an order, delivery, refund, security issue or customer service request.

12. Data Security

We take appropriate technical and organisational measures designed to protect personal data against accidental loss, destruction, alteration, unauthorised disclosure or access.

Depending on the systems used, these measures may include:

  • Secure website connections.

  • Access restrictions for customer information.

  • Account authentication controls.

  • Reputable payment and hosting providers.

  • Reasonable security monitoring.

  • Internal procedures for handling customer information.

No electronic system can guarantee complete security. If a personal data breach occurs, we will assess the incident and comply with applicable GDPR notification obligations, including notifying the supervisory authority or affected individuals where required.

13. Children's Privacy

Our website is intended for general shopping purposes and is not designed to knowingly collect personal data directly from children.

If you believe that a child has provided personal data to us without appropriate authorisation, please contact us so that we can assess the situation and take appropriate action.

14. Third-Party Websites

Our website may contain links to independent third-party websites or services.

Those services have their own privacy policies and data-handling practices. We are not responsible for the privacy practices of websites that we do not operate.

We encourage visitors to review the relevant third-party privacy information before providing personal data to those services.

15. Supervisory Authority

The Portuguese data protection supervisory authority is:

Comissão Nacional de Proteção de Dados (CNPD)

Website: https://www.cnpd.pt/

If you believe that your personal data has been processed in a manner that infringes applicable data protection law, you may lodge a complaint with the CNPD, subject to its procedures and jurisdiction.

16. Changes to This Privacy Policy

We may revise this policy when our website, service providers, data-processing activities or legal obligations change.

The latest version will be published on our website with an updated effective date.

17. Contact Information

For privacy questions, GDPR requests or data protection concerns, contact:

Organized Workspace
Rua do Crucifixo
Lisboa, PT-11 1100-184
Portugal

Email: support@neatkitchenbase.com
Website: https://www.neatkitchenbase.com