Last updated: August 11, 2026

BYTETRIBE, LDA ("BYTETRIBE", "we", "us" or "our") operates this website and online store, including all related information, content, features, tools, products and services (collectively, the "Services").

Our store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, disclose and otherwise process your personal information when you visit or use the Services, make a purchase or other transaction, create an account, communicate with us, or otherwise interact with us.

For the purposes of applicable data protection laws, BYTETRIBE, LDA is the data controller of the personal information described in this Privacy Policy, except where another party, such as Shopify, acts as an independent controller for specific processing activities.

By using the Services, you acknowledge that you have read this Privacy Policy.

Personal Information We Collect

The personal information we collect depends on how you interact with the Services and may include:

• Contact information, such as your name, email address, telephone number, billing address and shipping address.
• Order and transaction information, such as products purchased, order history, amounts paid, returns, cancellations and delivery information.
• Account information, such as your username, account credentials, preferences and settings.
• Payment information, such as your selected payment method, billing information, transaction details and payment confirmation. Complete payment card information is generally processed directly by Shopify and/or our payment service providers rather than stored directly by us.
• Communications, including information you provide when contacting customer support, submitting a form or otherwise communicating with us.
• Device and technical information, such as your IP address, browser type, device type, operating system, network information and other online identifiers.
• Usage information, including how you interact with the Services, pages and products you view, links you select, items you add to your cart and other browsing activity.
• Marketing and preference information, including your communication preferences and your interactions with marketing messages.
• Content you provide, such as product reviews, feedback or other information you choose to submit through the Services.

We do not intentionally request sensitive or special-category personal information through the Services unless it is necessary for a specific lawful purpose.

How We Collect Personal Information

We may collect personal information:

• Directly from you, including when you place an order, create an account, subscribe to communications, complete a form or contact us.
• Automatically, when you visit or interact with the Services, including through cookies, pixels and similar technologies.
• From service providers, including Shopify, payment providers, fulfillment providers, shipping carriers, analytics providers and other companies that help us operate the Services.
• From business and marketing partners, where permitted by applicable law.
• From other third parties, where permitted or required by law.

How We Use Your Personal Information

We may use your personal information for the following purposes.

Providing and Fulfilling the Services

We use personal information to:

• Process and manage purchases and payments.
• Fulfill, produce and ship orders.
• Process returns, refunds and other transactions.
• Maintain and manage customer accounts.
• Provide order confirmations, shipping updates and other transactional communications.
• Remember your preferences.
• Provide customer support.

Where the GDPR, UK GDPR or similar laws apply, this processing is generally necessary to perform our contract with you or to take steps at your request before entering into a contract.

Security and Fraud Prevention

We may process personal information to:

• Authenticate accounts and transactions.
• Detect, investigate and prevent fraud.
• Protect the security of our website, customers and systems.
• Identify malicious, illegal or unauthorized activity.
• Protect our legal rights and the rights of others.

Where applicable, we rely on our legitimate interests in protecting our business, customers and Services, and on legal obligations where required.

Improving and Personalizing the Services

We may use information about how customers interact with the Services to:

• Understand how our website and store are used.
• Improve products, features and customer experience.
• Diagnose technical issues.
• Conduct analytics and measure performance.
• Personalize content and product recommendations.

Where applicable, we rely on our legitimate interests in improving and operating our business. Where consent is required by law, including for certain cookies or tracking technologies, we rely on your consent.

Marketing and Advertising

Where permitted by law, we may use personal information to:

• Send marketing and promotional communications.
• Measure the effectiveness of our advertising.
• Show or help deliver advertisements that may be more relevant to you.
• Understand interactions with our marketing campaigns.

Where applicable law requires consent for these activities, we process your information on the basis of your consent. In other circumstances, we may rely on our legitimate interests in promoting our business where permitted by law.

You can unsubscribe from promotional emails at any time by using the unsubscribe link contained in those emails.

Legal and Regulatory Purposes

We may process personal information to:

• Comply with tax, accounting, consumer protection, data protection and other legal obligations.
• Respond to lawful requests from courts, regulators, law enforcement agencies or other authorities.
• Establish, exercise or defend legal claims.
• Enforce our Terms of Service and other policies.

Where applicable, we rely on compliance with legal obligations and/or our legitimate interests in protecting our legal rights.

Legal Bases for Processing in the EEA, UK and Similar Jurisdictions

Where applicable data protection law requires us to identify a legal basis, we generally rely on one or more of the following:

• Performance of a contract, when processing is necessary to provide products or Services you requested, process payments, fulfill orders or manage your customer relationship with us.
• Legal obligations, when processing is necessary for us to comply with applicable laws, accounting obligations, tax requirements, regulatory requirements or lawful government requests.
• Legitimate interests, when processing is necessary for our legitimate business interests, such as providing customer support, protecting against fraud, maintaining security, improving the Services, understanding business performance or protecting our legal rights, provided those interests are not overridden by your rights and interests.
• Consent, when you have given us permission to process your personal information for a specific purpose, such as certain marketing activities, personalized advertising or non-essential cookies where consent is required.

Where we rely on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Cookies and Similar Technologies

We and the service providers we work with may use cookies, pixels, tags, local storage and similar technologies when you use the Services.

These technologies may be used to:

• Operate essential website and checkout functionality.
• Remember your preferences.
• Maintain account and shopping-cart functionality.
• Protect against fraud and security threats.
• Understand website traffic and performance.
• Measure advertising and marketing performance.
• Personalize content or advertising where permitted.

Where required by law, non-essential cookies and similar technologies will only be used after you have provided the appropriate consent.

You can manage available privacy and cookie preferences through the privacy controls or cookie banner displayed on our website. You may also be able to control cookies through your browser settings.

Disabling certain cookies may affect the availability or functionality of some parts of the Services.

How We Disclose Personal Information

We may disclose personal information to third parties where necessary for legitimate business purposes, including:

• Shopify, which hosts and powers our online store and provides ecommerce, checkout, analytics, security and related services.
• Fulfillment providers, including Printful, which may receive information necessary to produce, fulfill, package and ship your order.
• Shipping and logistics providers, which require information such as your name, shipping address and contact details to deliver your order.
• Payment processors and financial service providers, which process payments and help prevent fraud.
• Technology and hosting providers, which provide infrastructure, cloud storage, security, communications and other technical services.
• Analytics and advertising providers, where permitted by applicable law and subject to applicable consent requirements.
• Customer support and communication providers, which help us respond to inquiries or communicate with customers.
• Professional advisers, including lawyers, accountants, auditors, insurers and consultants where necessary.
• Government authorities, courts and regulators, where disclosure is required or permitted by law.
• Parties involved in a corporate transaction, such as a merger, acquisition, financing, restructuring, sale of assets or similar transaction.
• Other parties at your direction or with your consent.

We require service providers that process personal information on our behalf to handle that information in accordance with applicable contractual and legal requirements.

Order Fulfillment and Printful

Some or all of our products may be produced and fulfilled using Printful and its fulfillment network.

When necessary to fulfill an order, we may provide Printful and related fulfillment or shipping partners with information such as your:

• Name.
• Shipping address.
• Email address.
• Telephone number, where required for delivery.
• Order and product information.

This information is used as necessary to produce, fulfill, ship and manage your order and related customer-service matters.

Printful may use fulfillment locations and service providers in different countries depending on the product and delivery destination.

Relationship With Shopify

Our Services are hosted and powered by Shopify.

Shopify collects and processes personal information about your access to and use of the Services in order to provide and improve Shopify's services and the functionality of our store.

Information you submit through the Services may be transmitted to Shopify and other service providers, including parties located in countries other than the country where you live.

We may use Shopify features that combine information from interactions with our store, Shopify and other Shopify merchants to improve security, analytics, personalization, marketing or advertising.

For certain processing activities, Shopify may act as an independent data controller and is responsible for its own processing of your personal information.

You can learn more about Shopify's processing practices through the Shopify Consumer Privacy Policy.

Where available in your jurisdiction, you can also use the Shopify Privacy Portal to exercise certain rights or manage certain privacy choices relating directly to Shopify's processing.

International Transfers

BYTETRIBE, LDA is established in Portugal, but some of the service providers we use may process or store personal information in other countries.

As a result, your personal information may be transferred to, stored in or processed in countries outside your country of residence, including countries outside the European Economic Area.

Where applicable law requires additional safeguards for international transfers, we rely on legally recognized transfer mechanisms. These may include:

• Adequacy decisions adopted by the relevant authority.
• Standard Contractual Clauses approved by the European Commission.
• Applicable UK transfer mechanisms.
• Other legally recognized safeguards.

We may also implement supplementary contractual, organizational or technical measures where appropriate.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by applicable law.

The period for which we retain information depends on factors including:

• The nature of the information.
• The purposes for which it was collected.
• The duration of our relationship with you.
• The need to provide the Services or maintain your account.
• Tax, accounting and other legal requirements.
• Fraud prevention and security requirements.
• The need to resolve disputes or enforce agreements.
• Applicable limitation periods for legal claims.

When personal information is no longer required, we may delete, anonymize or otherwise securely dispose of it, subject to applicable legal requirements.

Security

We use reasonable administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.

However, no method of transmission over the internet or method of electronic storage is completely secure. We therefore cannot guarantee absolute security.

Please do not send sensitive or confidential information through unsecured communication channels.

If you create an account, you are responsible for keeping your account credentials confidential.

Your Privacy Rights

Depending on where you live and the laws that apply, you may have some or all of the following rights:

• The right to request access to personal information we hold about you.
• The right to request correction of inaccurate or incomplete personal information.
• The right to request deletion of your personal information.
• The right to request restriction of certain processing.
• The right to object to certain processing.
• The right to receive certain personal information in a portable format.
• The right to withdraw consent where processing is based on consent.
• The right to opt out of certain marketing communications.
• The right to opt out of certain targeted advertising, sale or sharing of personal information where applicable.
• The right to appeal certain decisions concerning privacy requests where applicable.
• The right to lodge a complaint with an applicable data protection or privacy authority.

These rights are not absolute and may be subject to exceptions under applicable law.

To exercise your rights, contact us using the details provided in the Contact section below or use any privacy controls made available through the Services.

We may need to verify your identity before fulfilling certain requests. We will only request information reasonably necessary for verification.

Where permitted by law, you may authorize an agent to submit a privacy request on your behalf. We may require evidence that the agent has been authorized to act for you.

We will not unlawfully discriminate against you for exercising your privacy rights.

Rights of Individuals in the EEA

If you are located in the European Economic Area, you may have rights under the General Data Protection Regulation, including rights of:

• Access.
• Rectification.
• Erasure.
• Restriction of processing.
• Data portability.
• Objection to processing based on legitimate interests.
• Objection to direct marketing.
• Withdrawal of consent.

You may also have rights relating to certain decisions based solely on automated processing where those decisions produce legal or similarly significant effects.

We may use automated tools to assist with fraud detection, security and risk assessment. We do not intend to make solely automated decisions that produce legal or similarly significant effects on you except where permitted by applicable law and subject to required safeguards.

Because BYTETRIBE, LDA is established in Portugal, you may also lodge a complaint with the Portuguese supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)

You may also have the right to lodge a complaint with the data protection authority in the EEA country where you live, work or believe a violation occurred.

UK and Swiss Privacy Rights

Individuals in the United Kingdom or Switzerland may have similar rights under applicable local data protection laws, including rights relating to access, correction, deletion, restriction, objection, portability and withdrawal of consent.

You may also lodge a complaint with the applicable supervisory authority in your jurisdiction.

United States Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.

Depending on your state and whether the relevant law applies to our processing, these rights may include:

• The right to know or access the personal information we collect.
• The right to request deletion.
• The right to request correction.
• The right to obtain a portable copy of certain personal information.
• The right to opt out of the sale or sharing of personal information.
• The right to opt out of targeted advertising.
• The right to opt out of certain profiling activities.
• The right to appeal the denial of certain privacy requests.
• The right not to receive discriminatory treatment for exercising privacy rights.

We do not sell personal information in exchange for money.

However, certain disclosures involving advertising, analytics or Shopify features may be considered a "sale," "sharing," or use for "targeted advertising" under the definitions used by certain U.S. state privacy laws, even where no money is exchanged.

Where required, you may opt out using the Your Privacy Choices or data-sharing opt-out control made available through the Services.

Where required by applicable law and supported by our systems, we also process recognized browser-based opt-out preference signals, such as Global Privacy Control.

We do not knowingly sell or share the personal information of individuals under 16 years of age as those terms are defined under applicable U.S. privacy laws.

Marketing Communications

If you receive promotional emails from us, you can unsubscribe at any time by selecting the unsubscribe link contained in the communication.

Even after you unsubscribe from marketing communications, we may continue to send non-promotional communications that are necessary to provide the Services, such as order confirmations, shipping notifications, security messages or responses to customer-support requests.

Children's Privacy

Our purchasing Services are intended for individuals who are legally permitted to enter into transactions in their jurisdiction.

We do not knowingly collect personal information from children in violation of applicable data protection or privacy laws.

If you are a parent or legal guardian and believe that a child has provided personal information to us in circumstances that are not permitted by applicable law, please contact us so that we can review the request and take appropriate action.

Third-Party Websites and Services

The Services may contain links to websites, social networks or other online platforms operated by third parties.

We are not responsible for the privacy, security or content practices of third-party services that we do not control.

If you follow a link to another website or platform, we encourage you to review that party's privacy policy and terms.

Information that you choose to make public through social networks, reviews or other public or semi-public platforms may be visible to others and may be used by third parties outside our control.

Complaints

If you have concerns or complaints about how we process your personal information, please contact us first using the details below.

If you are not satisfied with our response, you may have the right to lodge a complaint with the privacy or data protection authority responsible for your jurisdiction.

For individuals in Portugal and the European Economic Area, BYTETRIBE's principal supervisory authority is:

Comissão Nacional de Proteção de Dados (CNPD), Portugal

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, Services, technology or legal and regulatory requirements.

When we make changes, we will publish the updated Privacy Policy on the Services and revise the "Last updated" date above.

Where required by applicable law, we will provide additional notice or request consent to material changes.

Contact

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise a privacy right, you can contact us at:

Email: shop@johnpork.com

For the purposes of applicable data protection laws, BYTETRIBE, LDA is the data controller of the personal information described in this Privacy Policy, except where another party acts as an independent controller for its own processing activities.