Privacy Policy
Privacy Policy 🔒
Last updated: December 31, 2025
Prenda Personalizada respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information, in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller
Prenda Personalizada
Website: prendapersonalizada.com
Email: [your-email@prendapersonalizada.com]
2. Personal Data We Collect
We collect and process the following personal data:
2.1. Identification and Contact Data
- Full name
- Email address
- Telephone number (optional)
- Delivery and billing address
2.2. Order Data
- Purchase history
- Products purchased
- Personalizations (texts and images provided)
- Product preferences
2.3. Payment Data
- Payment information (securely processed by certified providers)
- Transaction history
2.4. Technical Data
- IP address
- Browser type
- Operating system
- Cookies and similar technologies
- Pages visited on the website
3. Purpose of Data Processing
We use your personal data for:
3.1. Order Processing
- Processing and delivering your orders
- Creating personalized products according to your specifications
- Communicating about the order status
- Processing payments and issuing invoices
3.2. Communication
- Responding to your questions and requests
- Sending order confirmations and shipping updates
- Providing customer support
3.3. Marketing (with your consent)
- Sending newsletters and special offers
- Informing about new products and promotions
- Personalizing your shopping experience
3.4. Service Improvement
- Analyzing browsing behavior
- Improving the website and user experience
- Preventing fraud and ensuring security
3.5. Legal Compliance
- Complying with legal and tax obligations
- Maintaining accounting records
4. Legal Basis for Processing
We process your data based on:
- Contract performance: To process and deliver your orders
- Consent: For sending marketing communications (you can withdraw at any time)
- Legitimate interests: To improve our services and prevent fraud
- Legal obligations: To comply with tax and accounting requirements
5. Data Sharing
Your personal data may be shared with:
5.1. Service Providers
- Shopify: E-commerce platform (data storage)
- Shipping carriers: For order delivery
- Payment processors: To securely process transactions
- Email services: For sending communications
5.2. Authorities
- When required by law or court order
- For the protection of legal rights
Important: We never sell your personal data to third parties for marketing purposes.
6. International Transfers
Some of our service providers (such as Shopify) may be located outside the European Union. We ensure that all data transfers are carried out with adequate safeguards, including:
- Standard contractual clauses approved by the European Commission
- Certifications of data protection adequacy
- Compliance with the GDPR
7. Retention Period
We retain your personal data only for as long as necessary:
- Order data: 10 years (tax obligation)
- Marketing data: Until consent is withdrawn or 3 years of inactivity
- Technical data: Up to 2 years
- Correspondence: Up to 5 years after the last communication
After these periods, the data is securely deleted.
8. Your Rights
According to the GDPR, you have the following rights:
8.1. Right of Access
You can request a copy of the personal data we hold about you.
8.2. Right to Rectification
You can request the correction of inaccurate or incomplete data.
8.3. Right to Erasure
You can request the deletion of your personal data ("right to be forgotten"), except when we have a legal obligation to retain it.
8.4. Right to Restriction of Processing
You can request the restriction of processing your data in certain circumstances.
8.5. Right to Portability
You can request the transfer of your data to another service provider.
8.6. Right to Object
You can object to the processing of your data for direct marketing purposes.
8.7. Right to Withdraw Consent
You can withdraw your consent at any time, without affecting the legality of prior processing.
How to Exercise Your Rights
To exercise any of these rights, please contact us via:
- Email: [your-email@prendapersonalizada.com]
- Contact form
We will respond to your request within 30 days.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against:
- Unauthorized access
- Accidental loss or destruction
- Unauthorized alteration
- Improper disclosure
Security measures include:
- SSL/TLS encryption for data transmission
- Secure storage on protected servers
- Restricted access to personal data
- Regular security monitoring
- Employee training in data protection
10. Cookies
We use cookies and similar technologies to:
- Maintain your shopping session
- Remember your preferences
- Analyze website traffic
- Improve user experience
You can manage your cookie preferences through your browser settings. However, disabling cookies may affect website functionality.
For more information, please see our Cookie Policy.
11. Minors
Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from minors. If you become aware that a minor has provided personal data, please contact us so we can delete it.
12. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The date of the last update will always be indicated at the top of this page.
We recommend that you review this policy regularly. Significant changes will be communicated via email or through a notice on the website.
13. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD)
Website: www.cnpd.pt
Email: geral@cnpd.pt
Telephone: +351 213 928 400
14. Contact
For questions about this Privacy Policy or the processing of your personal data, please contact us:
Prenda Personalizada
Email: [your-email@prendapersonalizada.com]
Contact form
We are committed to protecting your privacy and ensuring the security of your personal data.