ARABESCORÉGIO - UNIPESSOAL LIMITADA (NIPC 519410564), with registered office at Praceta Adelaide Cabete, 2 Apt 3B, Torre da Marinha, Arrentela, 2840-407 Seixal, Portugal ("we", "us"), is the data controller for personal data processed through arabescoregio.pt.
1. Data we collect
- Account data: name, email, password (hashed), phone, addresses.
- Order data: products purchased, invoicing information, payment method type (never full card numbers — those are handled by the payment processor).
- Usage data: IP address, browser, device, pages visited, referrer, session duration.
- Marketing data: email preferences, opt-ins, communication history.
2. Legal basis and purpose
We process personal data on the basis of contract performance (fulfilling orders, providing account services), legitimate interest (fraud prevention, service improvements), consent (marketing communications, non-essential cookies) and legal obligation (invoicing, tax records).
3. Sharing
We share data with service providers strictly to deliver the service: payment processors (Stripe, PayPal), logistics (CTT, DHL), email (Postmark), analytics (Plausible). We do not sell personal data.
4. International transfers
Some providers may process data outside the EEA. In every case, transfers are covered by Standard Contractual Clauses or equivalent safeguards.
5. Retention
Order and invoicing data are retained for 10 years (Portuguese tax law). Account data is retained while the account is active and 12 months afterwards. Marketing consent is retained until withdrawn.
6. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction, portability, and objection, as well as the right to withdraw consent at any time. Contact us at support@arabescoregio.pt. You may also lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados).
7. Security
All traffic is encrypted with TLS 1.3. Passwords are hashed with bcrypt. Access to production data is restricted and audited.
8. Cookies
See our Cookie Policy.
9. Contact
Questions? Email support@arabescoregio.pt or write to ARABESCORÉGIO - UNIPESSOAL LIMITADA, Praceta Adelaide Cabete, 2 Apt 3B, Torre da Marinha, Arrentela, 2840-407 Seixal, Portugal.