Privacy policy
Draft for review. Fields in [ ] must be completed with the company's legal details, and the text should be reviewed by a lawyer before publishing.
1. Who we are
The controller of your personal data is SealedUp, NIF 232474273, registered at R. Calouste Gulbenkian 131, 5.º H4, 4050-145 Porto. For any privacy question, email support@sealedup.pt.
2. What we collect
- Identity and contact: name, email, phone, shipping and billing addresses.
- Orders: products purchased, amounts, history and your messages to us.
- Customer account: email and password (stored encrypted).
- Payment: processed by payment providers; we don't store your full card details.
- Browsing: technical data and cookies, as described in section 7.
3. How we use it
- Processing and delivering orders and customer support — performance of contract.
- Invoicing and tax obligations — legal obligation.
- Newsletter and marketing — only with your consent, which you can withdraw at any time.
- Fraud prevention and website security — legitimate interest.
4. Who we share it with
We only share what's necessary with: Shopify (store platform), payment providers (such as Shopify Payments, PayPal and SIBS/MB WAY), carriers (CTT and UPS) and our email marketing provider. Some of these providers may process data outside the European Economic Area, always under appropriate safeguards such as the European Commission's standard contractual clauses. We never sell your data.
5. How long we keep it
Invoicing data is kept for the legal period (10 years). Account data is kept while your account is active. Newsletter data is kept until you withdraw consent.
6. Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw consent at any time. To exercise them, email support@sealedup.pt. You can also lodge a complaint with the Portuguese Data Protection Authority, CNPD (www.cnpd.pt).
7. Cookies
We use cookies that are essential for the store to work (cart, session and security). Analytics and marketing cookies are only used with your consent, which you can manage in the cookie banner at any time.
8. Security
The store uses encrypted connections (HTTPS) and Shopify's certified infrastructure. We apply appropriate technical and organisational measures to protect your data.
9. Changes
We may update this policy. The current version is always available on this page, along with the date it was last updated.