Privacy and Data Protection Policy (GDPR)
Last updated: 24 June 2026
LavaJá respects your privacy and processes your data in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese law. This policy explains what data we collect, why, and your rights.
1. Data controller
The controller of your data is LavaJá, based in Lisbon, Portugal. For any privacy matter, contact contato@lavaja.pt.
2. What data we collect
Account and contact data: name, email, phone and, optionally, tax number (NIF) for invoicing.
Service data: pickup addresses, bookings, laundry preferences, instructions, weight and order history.
Payment data: handled directly by our processor Stripe. We do not store your full card details.
Technical data: minimal device and session information needed for the site to work and stay secure.
3. How we use the data
To provide the service: collect, treat and deliver laundry, manage your subscription and send order updates.
For invoicing and to meet legal and tax obligations.
To improve the service and personalise your experience (for example, remembering your laundry preferences).
For service communications, in the language you chose.
4. Legal basis
We process data based on the performance of the contract (providing the service), compliance with legal obligations and, where applicable, your consent or our legitimate interest in improving and protecting the service.
5. Sharing with third parties
We share data only with providers necessary to the service, such as the payment processor (Stripe), hosting and database infrastructure (Supabase), and operational pickup and delivery partners, always limited to what is strictly necessary.
We do not sell your data.
6. Retention
We keep data while your account is active and for as long as needed to meet legal obligations (for example, invoicing). After that, it is deleted or anonymised.
7. Your rights
You have the right to access, rectify, erase, restrict and object to processing, as well as data portability.
To exercise these rights, contact contato@lavaja.pt. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD).
8. Cookies
We only use the cookies and local storage needed for the site to work (session, language and app prompt preferences). We do not use advertising cookies.