Garrafeira Canhoto Privacy Policy
At Garrafeira Canhoto, we respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, store, and protect your information, in accordance with the General Data Protection Regulation (GDPR).
Last updated: October 2025
1. Who We Are
Data controller: Garrafeira Canhoto
Website: www.garrafeiracanhoto.com
Email: garrafeircanhoto@gmail.com
Location: Portugal
2. What Personal Data We Collect
We only collect data necessary to process your orders and improve your experience:
Identification and Contact Data:
- Full name
- Email address
- Phone number
- Billing and shipping address
- Tax ID (for invoicing)
Order Data:
- Purchase history
- Products purchased
- Transaction values
- Payment methods used (without full card details)
Browsing Data:
- IP address
- Browser type
- Pages visited
- Time spent on the site
- Cookies (with your consent)
3. How We Use Your Data
Your personal data is used to:
- Process orders: Manage purchases, payments, and deliveries
- Communication: Order confirmations, shipping updates, and customer support
- Invoicing: Issue invoices and fulfill tax obligations
- Marketing: Send newsletters and promotions (only with your consent)
- Improvements: Analyze behavior to enhance the shopping experience
- Security: Prevent fraud and protect the platform
- Legal compliance: Legal and regulatory obligations
4. Legal Basis for Data Processing
We process your data based on:
- Contract performance: Necessary to process your order
- Consent: For marketing and non-essential cookies
- Legal obligation: Invoicing and tax compliance
- Legitimate interest: Security and improvement of services
5. Data Sharing with Third Parties
Your data may be shared with:
- Shipping carriers: For order delivery
- Payment processors: To securely process transactions
- Email services: For sending communications
- Shopify platform: Where our store is hosted
- Authorities: When legally required
Important: We never sell your data to third parties. All partners are carefully selected and obliged to protect your data.
6. International Data Transfers
Some of our service providers may be located outside the European Union. In such cases, we ensure that adequate safeguards are in place, such as standard contractual clauses approved by the European Commission.
7. How Long We Keep Your Data
We retain your personal data only for the necessary period:
- Order data: 10 years (tax obligation)
- Marketing data: Until consent is withdrawn or 3 years without interaction
- Browsing data: Maximum of 13 months (cookies)
- Account data: Until deletion is requested
8. Your Rights
According to the GDPR, you have the following rights:
- Right of access: To know what data we hold about you
- Right to rectification: To correct inaccurate or incomplete data
- Right to erasure: To request the deletion of your data
- Right to restriction of processing: To restrict the processing of your data
- Right to data portability: To receive your data in a structured format
- Right to object: To object to the processing of your data
- Right to withdraw consent: To withdraw consent at any time
How to exercise your rights: Contact us via email garrafeiracanhoto.com. We will respond within 30 days.
9. Data Security
We implement technical and organizational measures to protect your data:
- SSL/TLS encryption for all communications
- Secure and updated servers
- Restricted access to personal data
- Staff training in data protection
- Regular and secure backups
- Continuous security monitoring
10. Cookies
We use cookies to enhance your browsing experience. You can manage your cookie preferences through the consent banner on our website.
Types of cookies we use:
- Essential: Necessary for the website to function
- Functional: Improve functionality and personalization
- Analytical: Help us understand how you use the site
- Marketing: Used for relevant advertising (with consent)
11. Minors
Our services are intended for individuals aged 18 and over. We do not knowingly collect data from minors. If you become aware that a minor has provided data, please contact us immediately.
12. Direct Marketing
We only send marketing communications if you have given your explicit consent. You can:
- Unsubscribe via the link in any email
- Contact us to remove your email from the list
- Manage your preferences in your account
13. Changes to This Policy
We may update this policy periodically. We will notify you of significant changes via email or on our website. The date of the last update is always indicated at the top of this page.
14. Links to Other Sites
Our website may contain links to third-party sites. We are not responsible for the privacy practices of these sites. We recommend that you read their privacy policies.
15. Contacts and Complaints
For privacy questions:
Email: garrafeiracanhoto.com
We will respond within 30 days.
Supervisory authority:
If you believe your rights have not been respected, you can file a complaint with the National Data Protection Commission (CNPD):
Website: www.cnpd.pt
Email: geral@cnpd.pt
Phone: +351 213 928 400
16. Consent
By using our website and services, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described.
Garrafeira Canhoto - Committed to your privacy and data protection.