Privacy policy
Last updated: 5 September 2026
We collect as little as we can, and we don't sell any of it to anyone. This page explains what we hold and why, in plain terms.
Who we are
thousandHellos is a trading name of THOUSANDHELLOS, LDA, a Portuguese private limited company with its registered office at Rua 30, 764, 4500-301 Espinho, Portugal, company number 519609603. We are the data controller for everything described here.
Contact: hello@thousandhellos.com. It reaches a person, not a queue.
What we collect, and why
If you subscribe to our monthly note
Your email address, the date you subscribed, and a record of your confirmation. We use double opt-in, so nothing is added to the list until you click the link in the confirmation email.
You can unsubscribe from any email in one click. We keep a minimal record of unsubscribes so we don't accidentally email you again.
Legal basis: your consent.
If you create an account or buy something
Your name, email address, billing address, and what you bought. We need this to sell you the thing and to keep the records Portuguese tax law requires.
We never see or store your card details. Payments are handled entirely by Stripe, our payment provider.
Legal basis: performance of a contract with you, and our legal obligations under Portuguese tax and accounting law.
If you write to us
Whatever you put in the email, and our reply.
Legal basis: legitimate interests — answering people who contact us.
When you visit the site
We use Rybbit for basic, privacy-focused website analytics — which pages are read, roughly where visitors come from. We do not run advertising trackers and we do not follow you across other websites.
We also load an accessibility widget from WebAbility, which lets visitors adjust how the site displays.
Our host keeps standard server logs — IP address, browser, pages requested, timestamps — briefly, for security.
Legal basis: legitimate interests — understanding what's useful, keeping the site accessible and secure.
Cookies and browser storage
We use no advertising cookies, no tracking pixels, and nothing that follows you to other websites. No third-party analytics or advertising scripts load on this site at all — no Google Analytics, no Meta pixel, no tag manager. Here is everything that gets stored in your browser:
- Your basket — so the shop remembers what you added between pages. Fourteen days.
- Your country, currency and language — so you see the right prices and the right VAT treatment. One year.
- Your accessibility settings — if you use the accessibility widget, so you don't have to set them again each visit.
- A technical cache used by the shop platform so it doesn't re-fetch its own configuration on every page. It holds no identifier of any kind and expires after an hour.
- An analytics identifier from Rybbit. It's a random string — no name, no email, nothing else attached to it — used only to tell a returning reader from a new one on this site. It is never matched against your order or your email address, and it is never shared.
The first four are necessary for the shop to work, so they don't require your permission. The analytics identifier isn't necessary, so you should be able to say no to it: clear your browser storage for this site at any time, or write to hello@thousandhellos.com and we'll tell you exactly how to switch it off for good.
There's no cookie banner on this site. We'd rather tell you plainly what we store than make you click through a box before you can read anything.
Who else handles your data
We use a small number of suppliers to run the business. Each is bound to protect your data and use it only for what we've asked.
- LaunchMyStore — runs this website and stores account and order data
- Stripe — processes payments. Stripe is an Irish company with access from the United States, covered by standard contractual clauses.
- Brevo — sends the monthly note and holds the subscriber list. Brevo is a French company with servers in the European Union.
- Rybbit — website analytics
- WebAbility — the accessibility widget
Where a supplier processes data outside the European Economic Area, that transfer is covered by the European Commission's standard contractual clauses or an adequacy decision.
How long we keep things
- Newsletter subscription — until you unsubscribe
- Unsubscribe record — kept minimal, so we don't email you again by mistake
- Invoices and order records — ten years, as Portuguese accounting law requires
- Emails you send us — around two years, so we can pick up a conversation
- Analytics — our analytics provider keeps its data for three years
- Server logs — months rather than years
What you can ask us to do
Under the GDPR you can ask us to show you what we hold about you, correct anything wrong, delete it, restrict what we do with it, give it to you in a portable format, or stop processing it where we rely on legitimate interests. You can withdraw consent at any time, without affecting anything we did before you withdrew it.
The one exception: we can't delete invoices we are legally required to keep.
Write to hello@thousandhellos.com. We'll reply within a month, usually much sooner, and we won't charge you.
If you're not satisfied with how we've handled it, you can complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt.
Hello Sustainability
Our sustainability platform at hello-sustainability.com is covered by its own privacy notice, published at hello-sustainability.com/legal. Data that a hotel uploads there belongs to that hotel, not to us — we process it on their instructions under a separate data processing agreement, published at the same address.
Automated decisions
We don't make any. No profiling, no automated decision-making with legal or similarly significant effects.
Children
Our products are sold to businesses. This site isn't intended for anyone under 16 and we don't knowingly collect their data.
Changes
If we change this policy we'll update the date at the top. If the change is significant and we hold your email address, we'll tell you.
We build the businesses behind a thousand hellos.