Privacy
Last updated: July 1, 2025
1. Introduction
Miguel Arruda Antiques & Design values your privacy and is committed to protecting the personal data it collects, stores, and uses.
This Privacy Policy explains how we process your personal data in compliance with:
- The General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR);
- Law No. 58/2019, which ensures the execution of the GDPR in Portugal;
- The ePrivacy Directive and other applicable standards.
This policy applies to the use of our website, including purchases, browsing, forms, and communication with our team.
2. Personal Data We Collect
We may collect the following personal data, either directly or through automated means (such as cookies):
- Full name
- Billing and delivery address
- Email address
- Phone number
- Payment data (via secure platforms)
- Website usage data (IP address, device type, browser, cookies, and identifiers)
3. Purposes of Processing
We process your personal data for the following purposes:
- Processing and shipping orders
- Issuing invoices and managing payments
- Customer contact (support, order updates)
- Compliance with legal and tax obligations
- Fraud prevention and security
- Statistical analysis and website improvement
- Sending promotional communications, provided you have given explicit consent
4. Legal Basis
The processing of your data is based on the following legal grounds:
- Performance of a contract (purchase of products)
- Compliance with legal obligations
- Legitimate interest of the company (service improvement, security)
- Your explicit consent, when required (e.g., newsletters or non-essential cookies)
5. Consent and Management
Whenever processing requires your consent (e.g., analytical or marketing cookies), it will be requested clearly and may be withdrawn at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
You can manage or revoke your consent:
- Through the cookie settings on our website
- Through the "unsubscribe" link in our communications
- By contacting us directly
6. Sharing with Third Parties
We do not sell your data to third parties. We only share strictly necessary data with:
- Secure payment platforms (e.g., Shopify Payments, PayPal)
- Carriers/Couriers for order delivery
- Tax or legal authorities, when required by law
- Technical service providers (such as web hosting and analytical tools)
All third parties we collaborate with are bound by data processing agreements and comply with the GDPR.
7. International Transfers
Some data may be processed outside the European Economic Area (EEA), particularly when using services such as Shopify or Google. In these cases, we ensure that the European Commission's Standard Contractual Clauses or other legal protection mechanisms are implemented.
8. Data Retention
We retain personal data:
- For the time necessary to fulfill the mentioned purposes
- As long as a commercial or contractual relationship exists
- For the legal period required for tax or judicial purposes
After this period, the data will be deleted or anonymized.
9. Security
We adopt appropriate technical and organizational measures to protect your data, including:
- Data encryption
- Restricted and authenticated access
- Monitoring of access and activity
- Secure hosting via the Shopify platform
10. Your Rights
Under the GDPR, you have the following rights:
- Access to your personal data
- Rectification of incorrect data
- Erasure of data ("right to be forgotten")
- Restriction of or objection to processing
- Data portability
- Withdrawal of consent
You may exercise these rights at any time by sending us a request via our contact page or to the email: online@arruda.pt
You also have the right to lodge a complaint with the National Data Protection Commission (CNPD): www.cnpd.pt
11. Cookies
We use cookies and similar technologies to:
- Ensure the basic functioning of the site (essential cookies)
- Measure and improve performance (analytical cookies)
- Display personalized advertising (marketing cookies)
You can accept, refuse, or configure cookies in the consent banner when you visit our website. You can also manage cookies in your browser settings.
12. Changes to This Policy
We may update this Privacy Policy periodically. The most recent version will always be available on our website, with the last update date indicated at the top. We recommend that you check this page regularly.
13. Contact
For questions regarding your personal data or this Policy, please contact us:
- Email: online@arruda.pt
- Form: Contact
