Privacy
Privacy policy.
This policy applies to the Madeira Originals shop. Last updated: 25 October 2026.
Data controller
Marco Paulo Sousa de Castro, empresário em nome individual (ENI), NIF 202158969. Sede registada: Entrada do Cascalho 3, 9240-203 São Vicente, Madeira, Portugal. Contacto: geral@madeiraoriginals.pt; +351 962 220 769.
Data and purposes
When you buy, identification, contact, delivery, order and payment data are handled in Shopify checkout to enter into and perform the contract. Shopify processes data on our behalf and may also process data for its own purposes described in its policy. We do not collect card details on this site. Account creation handles email and authentication data in Lovable Cloud. The newsletter stores email, subscription source and date in Lovable Cloud. Email or telephone contacts are handled to answer your request; the contact page has no contact form. Wholesale inquiries store the business, contact and inquiry information you provide.
Legal bases
Orders, accounts needed for purchases and pre-contract inquiries: performance of a contract or steps at your request (GDPR Article 6(1)(b)). Invoicing and tax duties: legal obligation (Article 6(1)(c)). Newsletter: consent (Article 6(1)(a)), which you can withdraw without affecting earlier processing. Security and non-contract inquiries: legitimate interests (Article 6(1)(f)), limited to what is necessary.
Retention
Order and invoice data: throughout the contractual relationship and applicable legal retention periods; tax records are generally kept for 10 years. Newsletter: until you withdraw consent or the list is no longer used. Contact and wholesale inquiries: as needed to reply, follow up and defend legal rights, with deletion when no longer needed. Account data: while the account is active or necessary for legal obligations. Data is not kept indefinitely without a purpose.
Providers and transfers
We use Shopify for catalogue, cart and checkout, and Lovable Cloud for accounts, newsletter, journal and wholesale inquiries. Payment and delivery providers receive the data necessary for the contracted service. These services may process data outside the European Economic Area; where applicable, transfers rely on adequacy decisions or safeguards such as standard contractual clauses. See https://www.shopify.com/legal/privacy for Shopify information. Actual transfer types and regions depend on the services used for your order.
Cookies and browser storage
No analytics or advertising cookies were identified on this site. Functional browser storage is used for the cart, account session, language and temporary wholesale access. The site loads Google fonts and communicates with Shopify and Lovable Cloud; these requests transmit technical data such as IP addresses. External Shopify checkout may use its own cookies and privacy choices. We do not add analytics or advertising tools without reviewing this policy and obtaining prior consent where required.
Rights and complaints
You may request access, rectification, erasure, restriction, portability and objection where applicable, and withdraw consent. Email geral@madeiraoriginals.pt; we may request minimal information to verify your identity. We reply within GDPR deadlines, generally one month. You may complain to Portugal’s supervisory authority, Comissão Nacional de Proteção de Dados: https://www.cnpd.pt. We do not use solely automated decisions with legal or similarly significant effects.
Questions about your order? Contact us.