Privacy Policy
Last updated: 31 July 2026
This policy explains what personal data we collect, what it is used for, who it is shared with and how you can exercise your rights.
1. Data controller
Camila da Cruz Lucioo, CPF 413.009.078-00, based at R. Francisco Inácio Godoy Zerbinatti, 92, Jd. São Rafael 2, CEP 14806-853, Brasil. Contact for data protection matters: hello@bobolobokids.com.
2. What we collect
- Contact and billing details you provide at payment: name, email address and, where required, address and tax details.
- Transaction data: amount, currency, product purchased, date, payment session identifier and the last four digits of the card, provided by Stripe.
- Technical browsing data: IP address, device and browser type, pages viewed and referral source.
- The content of messages you send us by email.
We never have access to your full card number or its security code.
3. Why we use it and on what legal basis
- Processing your purchase, delivering the files and providing support: performance of the contract.
- Meeting tax and accounting obligations: legal obligation.
- Preventing fraud and abuse: legitimate interest.
- Measuring site usage through statistics: consent, given in the cookie banner.
- Sending marketing messages: only with your consent, which you can withdraw at any time.
4. Who we share it with
- Stripe Payments Europe, Ltd., to process payments and issue receipts.
- Vercel Inc., which hosts the site.
- The email provider we use to send the purchase confirmation and download link.
These providers process the data on our behalf and are bound by confidentiality. We do not sell or hand over personal data to third parties for marketing purposes.
5. International transfers
Some of these providers are based outside the European Economic Area or Brazil. In those cases transfers rely on the standard contractual clauses approved by the European Commission or an equivalent mechanism permitted by applicable law.
6. How long we keep it
- Billing and transaction data: for the period required by applicable tax and accounting law.
- Support emails: up to three years after the last contact.
- Cookie consent records: six months.
- Marketing data: until you withdraw consent.
7. Your rights
You can request access, rectification, erasure, restriction or portability of your data, object to certain processing and withdraw any consent you have given.
Just write to hello@bobolobokids.com. We reply within one month at the latest.
If you believe your data is not being handled properly, you can complain to the competent supervisory authority: the ANPD in Brazil, the CNPD in Portugal, the AEPD in Spain or the authority in your country of residence.
8. Children
The products are aimed at adults, whether parents, carers or education professionals. We do not knowingly collect personal data from anyone under 18 and at no point do we ask for data about the children using the materials.
9. Security
The site is served exclusively over an encrypted connection (HTTPS). Access to data is limited to those who need it for the business. Even so, no system is entirely immune, and we undertake to notify you of any relevant incident within the legal deadlines.
10. Changes
If this policy changes, we publish the new version on this page with an updated date.