Legal

Privacy Policy

Last updated: January 2026

1. Who We Are

CheekPeak operates a premium men's underwear subscription service based in Lisbon, Portugal. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese law.

2. Data We Collect

We collect information you provide directly: name, email address, delivery address, payment information (processed securely via Stripe — we do not store full card details), and size preferences. We also collect usage data such as pages visited and subscription activity.

3. How We Use Your Data

Your data is used to: process and fulfil your subscription orders; send transactional emails (order confirmations, shipping notifications); communicate relevant account updates; and improve our service. We do not sell your data to third parties.

4. Legal Basis for Processing

We process your data under the following legal bases: contractual necessity (to fulfil your subscription); legitimate interest (fraud prevention, service improvement); and consent (marketing communications, which you can withdraw at any time).

5. Data Sharing

We share data only with necessary service providers: Stripe (payment processing), our logistics and shipping partners (delivery address only), and Supabase (secure database hosting). All providers are GDPR-compliant.

6. Data Retention

We retain your personal data for as long as your subscription is active and for up to 3 years after cancellation for legal and accounting purposes. You may request deletion at any time subject to legal retention requirements.

7. Your Rights

Under GDPR you have the right to: access your personal data; correct inaccurate data; request deletion; restrict processing; data portability; and object to processing. To exercise any of these rights, email privacy@cheekpeak.com.

8. Cookies

We use essential cookies required for site functionality and authentication. We do not use advertising or tracking cookies. You can manage cookie preferences through your browser settings.

9. Security

We use industry-standard security measures including HTTPS encryption, secure token storage, and regular security audits. Payment data is handled exclusively by Stripe and never stored on our servers.

10. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email. The date at the top of this page indicates when it was last updated.

11. Contact

For privacy-related enquiries, contact us at privacy@cheekpeak.com or write to: CheekPeak, Lisbon, Portugal.