This notice explains how this shop handles personal data when you browse, order, use an account or contact customer support. The website name and contact panel identify the shop responsible for this processing.
4435-200 Rio Tinto
Porto
Portugal
Data we use
We use information you provide, such as your name, email address, telephone number, billing and delivery addresses, order details, size selections, personalisation requests and messages. Account details and order history are used when you create an account.
Technical information may include IP address, browser and device details, request times, security logs and necessary session identifiers. Payment services process the payment information required at checkout; the shop uses transaction references, amounts and payment status for order administration.
Purposes and legal bases
We use order and contact data to take steps you request before a purchase and to fulfil the sales contract, including payment, delivery, support, returns and refunds.
We process records required for accounting, tax and other legal obligations. Our legitimate interests include keeping the shop secure, preventing fraud, resolving disputes and responding to relevant enquiries, balanced against your rights. Where consent is required for an optional feature, you may withdraw it without affecting earlier lawful processing.
Service providers and sharing
We use WordPress/WooCommerce to operate this store and Cloudflare for network delivery and security. Necessary data may be handled by our hosting, security, payment, fulfilment, carrier, email and professional-service providers. Payment providers process the information needed for the payment method you select; we use transaction references and payment status to administer the order. We disclose data to authorities where legally required, and do not publish your custom printing details.
Some service providers may process data outside the EEA or the United Kingdom. Where a restricted transfer is involved, the legally required mechanism must apply, such as an applicable adequacy decision or approved contractual safeguards. Contact us for information about the relevant recipients, locations and safeguards; no statement on this page means that all data stays in one country.
Cookies and choices
Necessary cookies support the basket, checkout, login and security. Optional WooCommerce order-attribution cookies (sbjs_*) are enabled only after you allow statistics. They hold referral/campaign, visit-time, page-count and device information within the browser session; sbjs_session normally lasts 30 minutes and the other attribution cookies are session-based. If you order, the relevant source information may be saved with the order. Your cookie choice is remembered for up to six months. Use “Cookie settings” in the footer to change or withdraw your choice; refusal does not prevent a purchase.
Providing the information marked as necessary at checkout is required to process and deliver an order. Optional information is voluntary. Placing an order does not automatically subscribe you to marketing emails.
How long data is kept
Order, payment and support records are kept for the periods necessary to fulfil the purchase, manage returns and disputes, and meet applicable accounting, tax and legal requirements. Account information is kept while the account is used and for any legally required period afterwards.
Security and session data are kept only as long as needed for their purpose. The retention period depends on the record, relevant legal requirements and any unresolved claim. Data that is no longer needed is deleted or anonymised.
Your rights and complaints
Subject to applicable law, you may request access, correction, deletion, restriction or a portable copy of your data. You may object to processing based on legitimate interests and withdraw consent where consent is the legal basis. Some information may need to be retained to meet legal obligations or establish legal claims.
Email the shop to exercise your rights. We may request proportionate information to verify your identity. Where the GDPR applies, requests are normally answered within one month and any permitted extension is explained. You may complain to the competent data protection authority.
Comissão Nacional de Proteção de Dados (Portugal)
Updates and contact
Contact the shop using the email or postal address in the contact panel for privacy questions. This notice may be updated when practices or legal requirements change; the date shown on this page identifies the current version.