Privacy Policy
What personal data we collect, why, who we share it with, and your rights.
Last updated: 13 October 2026
This English version is a translation provided for your convenience. If there is any difference between the two, the Portuguese version prevails — switch to PT at the top of the page to read it.
1. Data controller
The controller of your personal data is [DENOMINAÇÃO SOCIAL, LDA], with registered office at [MORADA DA SEDE], tax and company number [NIF/NIPC], registered at the [Conservatória do Registo Comercial de …], with share capital of [CAPITAL SOCIAL] €. For any question about your data, contact us at [ola@oseudominio.pt].
2. What data we process and why
| Purpose | Data | Legal basis |
|---|---|---|
| Processing and delivering orders, and customer support | Name, email, phone, delivery and billing address, items ordered | Performance of the contract |
| Invoicing and meeting tax and accounting obligations | Name, tax number, address, order amounts | Legal obligation |
| Handling guarantees, returns and complaints | Order data and our communications with you | Performance of the contract and legal obligation |
| Publishing your review of a piece, if you choose to write one | Rating, text, first name and surname initial, date; the purchase is verified against the order | Consent, which you can withdraw at any time by asking us to delete it |
| Sending the newsletter about new collections | Email, preferred language | Consent, which you can withdraw at any time |
| Preventing fraud and keeping the site secure | Technical payment and connection data | Legitimate interest |
We do not use your data for automated decision-making or to build advertising profiles, and we do not sell personal data. To show the site in Portuguese or English, we use the country your connection comes from; we do not store it.
3. Payments
Payments are processed by Stripe, which acts as an independent controller of payment data. We never see or store your full card details. You can read Stripe’s privacy policy.
4. Who we share data with
We share only the data that is needed with:
- Stripe, to process payments;
- the carriers that deliver orders: [NAMES];
- our hosting and database providers (Vercel, Turso), which process data on our behalf;
- [ACCOUNTANTS / NEWSLETTER TOOL, if applicable];
- public authorities, where the law requires it.
Some of these providers may process data outside the European Economic Area, in particular in the United States. In those cases, transfers rely on adequacy decisions of the European Commission, such as the EU-US Data Privacy Framework, or on standard contractual clauses approved by the Commission.
5. How long we keep data
- Order and invoice data: for the period required by tax law (currently 10 years).
- Data relating to guarantees and complaints: until the end of the guarantee period and applicable legal deadlines.
- Newsletter: until you withdraw your consent.
6. Your rights
At any time, you may ask for access to your data, its correction or deletion, restriction of processing, data portability, or object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it without affecting processing carried out before then. To exercise these rights, write to [ola@oseudominio.pt]; we reply within one month.
You also have the right to complain to the supervisory authority, Portugal’s Comissão Nacional de Proteção de Dados (cnpd.pt), or to the data protection authority of the country where you live.
7. Cookies and browser storage
On your first visit we ask which cookies you accept. Essential cookies are always on, because the shop doesn’t work without them; statistics and marketing cookies are used only if you accept them, and refusing them doesn’t affect shopping. Your choice is kept for 12 months and you can change it at any time in , also at the bottom of every page. If you withdraw consent, we delete those tools’ cookies.
| Name | Purpose | Type | Kept for |
|---|---|---|---|
| veio_consent | Your cookie choice | Essential | 12 months |
| veio_lang | The language chosen with the PT | EN switch | Essential | 12 months |
| veio_session, veio_signed_in | Your customer account session | Essential | 60 days |
| veio_welcome, veio_welcome_code | The welcome code you asked for, to apply it at payment | Essential | 90 days |
| veio_admin | The shop management session (Veio staff only) | Essential | 7 days |
| veio-cart-v1 | Your basket (browser local storage) | Essential | Until you empty it |
| veio_welcome_seen | Whether you’ve seen the welcome window (local storage) | Essential | 30 days |
| __stripe_mid, __stripe_sid | Payment security and fraud prevention (Stripe) | Essential | 1 year / 30 minutes |
We don’t currently use any statistics or marketing tools. If we start, they will appear in this table and will only be used with your consent.
On the payment page, Stripe may use its own cookies needed for security and fraud prevention. Statistics and marketing cookies, when accepted, are set by their providers (Google and Meta), who may process data outside the European Union under the safeguards provided for in the GDPR.
8. Security
We apply appropriate technical and organisational measures to protect your data, including encrypted connections and restricted access to the shop’s management.
9. Changes
We may update this policy. The date of the last update is shown at the top of the page.