No products in the cart.
Privacy policy
At Peonia de Papel we treat your data with the same care we put into every piece: we collect only what is needed, use it only for what we told you, and never sell it.
1. Who we are
Data controller: Peonia de Papel, 832 Av. dos Mártires da Machava, Maputo.
Contact: info@peoniadepapel.com · +258 85 575 0538
2. What we collect and why
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| Orders and checkout | Name, phone, email, delivery address (when shipped), order notes, products bought and amounts. | Process and deliver the order, send receipt and invoice, provide support. | Performance of the purchase contract; tax obligations. |
| Personalisation | Names, initials, dates or phrases you write for the product (for example a baby’s name and date of birth). | Make the product exactly as you asked. | Performance of the contract. |
| Payments | M-Pesa or bank transfer proofs you upload; PayPal transaction reference. We never see or store your card details. | Confirm payment and keep accounting records. | Performance of the contract; legal obligations. |
| Workshops and events | Each participant’s name and the booker’s contact details. | Manage seats and the attendance list. | Performance of the contract. |
| Digital art | Email, download links and download log (date and IP address). | Deliver the files and prevent misuse of the links. | Performance of the contract; legitimate interest. |
| Customer account (optional) | Email, password (encrypted), saved addresses and order history. | Track orders and check out faster. | Performance of the contract. |
| Contact | What you send us by email, WhatsApp or Instagram. | Reply to you and prepare quotes. | Legitimate interest; pre-contractual steps. |
| Use of the site | IP address, browser and pages viewed (security logs); statistics and visit source only if you accept. | Protect the site against fraud and attacks; understand what to improve. | Legitimate interest (security); consent (statistics). |
We make no automated decisions about you, build no profiles and send no newsletters unless you explicitly ask.
3. Who we share it with
Only with those who help us serve you, and only what is needed:
- Website hosting provider — Servers that store the website, database, emails and backups.
- PayPal — Processes USD payments under PayPal’s own privacy policy.
- M-Pesa / bank — You pay directly through your operator or bank; we only receive the proof.
- Google (Analytics, Maps) — Only with your consent, or when you choose to show a map.
- WhatsApp / Instagram (Meta) — Only if you contact us through these channels.
- Couriers — Name, phone and address, only when delivery is made by a courier.
Some of these services (PayPal, Google, Meta) may process data outside Mozambique under their own safeguards. We may also disclose data when required by law or to defend our rights.
4. How long we keep it
- Orders, invoices and payment proofs: for the period required by Mozambican tax and commercial law.
- Customer account: until you ask us to delete it.
- Messages and quote requests without a purchase: up to 2 years.
- Cart: 2 days. Security logs: only as long as needed to protect the site. Cookies: see the cookie policy.
5. How we protect your data
The site uses an encrypted connection (HTTPS) and a firewall. Receipts and invoices only open through a private, unique link for each order; payment proofs and invoices are kept in a protected folder, and access to the shop’s back office is restricted and password-protected.
6. Your rights
At any time you can ask us to:
- access the data we hold about you and receive a copy;
- correct inaccurate or incomplete data;
- delete your data, except what the law requires us to keep;
- object to or restrict processing;
- withdraw consent (for example for statistics cookies), without affecting what was done before.
Write to us at info@peoniadepapel.com. We reply within 30 days. If you are not satisfied, you can complain to the competent authority in Mozambique.
7. Cookies
We only use essential cookies unless you accept statistics or external content. Details are in our cookie policy.
8. Children
The shop is intended for adults (18+). When a parent gives us a child’s name or date of birth to personalise a product, we use it only to make that product.
9. Applicable law and changes
This policy follows the Mozambican law applicable to personal data protection, including Law no. 3/2017 (Electronic Transactions Law), and international good practice. We may update it; the date below shows the latest version and, if the changes are significant, we will say so on the site.
Last updated: 19 October 2026