Privacy policy

This policy explains how Alma da Comporta (“we”) processes personal data when you visit almadacomporta.com or place an order. We process data in accordance with the EU General Data Protection Regulation (GDPR) and Portuguese Law no. 58/2019.

1. Data controller

The controller is Alma da Comporta, Comporta, Portugal — p.rei@almadacomporta.com.

2. Data we collect

• Cart (your browser only). Products, quantities and prices are stored in your browser’s localStorage. This data does not leave your device until you start checkout.
• Checkout and payment. When you pay, Stripe collects the information required to process the order: name, email, billing and shipping addresses, phone number, and payment details. We do not store your card number on this site.
• Contact. If you write to us, we receive the name, email and message you send (via your email application or ours).
• Technical data. Our host (Cloudflare) may process standard server logs (IP address, browser, pages requested) to operate and secure the site.

We do not create customer accounts. We do not run a newsletter. We do not use advertising or analytics cookies.

3. Purposes and legal bases

• To remember your cart — legitimate interest / steps prior to a contract.
• To process and deliver your order, issue an invoice and handle returns — performance of a contract.
• To answer your messages — legitimate interest or pre-contractual steps.
• To meet tax and accounting obligations — legal obligation.
• To keep the site secure — legitimate interest.

4. Recipients

Data is shared only with:

• Stripe — payment, invoicing and tax calculation. Stripe acts as an independent controller for payment data. See stripe.com/privacy.
• Cloudflare — hosting and delivery of the site.
• Carriers, if needed to deliver your order.
• Authorities, if required by law.

We do not sell your data.

5. Transfers outside the EU

Stripe and Cloudflare are established in the United States. Transfers rely on Standard Contractual Clauses and the safeguards described in their privacy policies.

6. Retention

• Cart data remains in your browser until you clear it or complete an order.
• Order and invoice data is kept for the period required by Portuguese tax law (generally 10 years).
• Contact messages are kept only as long as needed to handle your request.

7. Your rights

You may request access, rectification, erasure, restriction, objection or portability of your data, and withdraw consent where processing is based on consent. Write to p.rei@almadacomporta.com. You may also lodge a complaint with the Portuguese data-protection authority (CNPD) or the authority of your country of residence.

8. Minors

The site is intended for adults. We do not knowingly collect data from children under 16.