Privacy Policy

1. Data Controller

Philippe Maurice Louis Gluck, trading as OBSOLETE, Rua Triângulo Vermelho, 24, 1170-375 Lisboa, Portugal. Contact: hello@obsolete-arena.com.

2. What Data We Collect

When you place an order, we collect: name, email address, shipping address, and order details. Payment card details are entered directly into Stripe and are never seen or stored by OBSOLETE.

3. How We Use Your Data

• To process and fulfil your order (shared with Printful for printing/shipping)
• To process payment (shared with Stripe)
• To send order confirmations and updates (via Resend)
• To respond to enquiries you send to hello@obsolete-arena.com

4. Third Parties / Sub-processors

• Stripe (payment processing)
• Printful (order fulfilment, printing, shipping): your name and delivery address are shared with Printful and its production partner nearest your location
• Resend (transactional email delivery)
• Hostinger (website hosting, EU-based)
• Google Fonts: the site loads fonts from Google's servers, which involves your device requesting resources directly from Google (your IP address is visible to Google in the process)

No analytics or advertising trackers (e.g. Google Analytics, Meta Pixel) are used on this site. If any are added in the future, this policy and a cookie consent banner will be updated beforehand.

5. Legal Basis & Retention

Data is processed to perform the sales contract with you (Art. 6(1)(b) GDPR) and to comply with legal obligations (e.g. invoicing/tax records, which must be retained per Portuguese tax law, typically 10 years for accounting records).

6. Your Rights

Under GDPR you have the right to access, rectify, erase, or port your data, and to object to or restrict its processing. Requests can be sent to hello@obsolete-arena.com. We aim to respond within 30 days as required by law. You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD (www.cnpd.pt).

7. Data Breach Notification

In the event of a personal data breach affecting your information, we are required to notify the CNPD within 72 hours where the breach poses a risk to your rights, and to notify affected individuals where the risk is high.

8. Cookies

This site currently does not use analytics or advertising cookies. It only uses cookies strictly necessary for the site and checkout to function (e.g. Stripe's own session cookies during payment). If analytics or marketing tools are added later, this policy and a cookie consent banner (with “Reject” as easy to select as “Accept”) will be added before those tools go live.