Privacy Policy

This Privacy Policy explains how Tudo Bem Co. processes personal data when you visit this website, create an account, place an order or contact us. It is intended to meet the information requirements of the General Data Protection Regulation (GDPR).

Controller and contact

The data controller is Tudo Bem Co., established in Ericeira, Portugal. Legal entity name: [COPY: TODO — legal entity name]. Registered address: [COPY: TODO — full registered address]. Portuguese tax number: [COPY: TODO — NIF]. Privacy contact email: [COPY: TODO — official privacy email].

Personal data we process

We process the information needed to provide the store and fulfil an order. This can include your name, email address, delivery and billing details, account details, order details and messages sent to us.

We also process limited technical data, such as device and browser information, IP address, pages requested and cookie preferences. If you choose analytics cookies, usage information may also be processed for analytics purposes. Payment card details, where applicable, are handled by the payment provider; we only receive the information needed to confirm and administer your order.

Why we use personal data

We use personal data to operate the website, create and manage accounts, process and deliver orders, respond to enquiries, prevent fraud and keep the store secure.

• Contract: to take steps requested by you and to perform a purchase, delivery or account contract.
• Legal obligation: to meet accounting, tax, consumer-protection and other applicable legal duties.
• Legitimate interests: to protect the store, prevent misuse and improve its reliability, where those interests do not override your rights and freedoms.
• Consent: for optional analytics cookies and any other processing that requires your consent. You may withdraw consent at any time.

Recipients and international transfers

We may share data with processors that help us operate the store, such as hosting, ecommerce, payment, delivery and customer-support providers. They may process data only on our instructions and for the purposes described above. We may also disclose data where required by law or to protect legal claims.

To deliver an order, we share the name, delivery address and contact details needed for shipment with the carrier handling it — currently CTT, DHL, UPS, FedEx or DPD, depending on the destination. For orders shipped outside the European Union, the carrier may also pass this information to customs authorities in the destination country, as required to clear the shipment.

If a provider processes personal data outside the European Economic Area, we will use the safeguards required by applicable data-protection law, such as an adequacy decision or standard contractual clauses.

Retention

We retain personal data only for as long as needed for the purpose for which it was collected, including to fulfil orders, resolve disputes and meet legal retention duties. The exact retention periods for accounting and tax records are determined by applicable Portuguese law.

Your GDPR rights

Subject to the conditions and limits in applicable law, you may ask to access, correct, erase, restrict or receive a portable copy of your personal data. You may object to processing based on legitimate interests and object at any time to direct marketing. You can also withdraw consent without affecting processing carried out before that withdrawal.

To exercise your rights, contact us at [COPY: TODO — official privacy email]. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).

Cookies

Essential cookies are used to make the store work. Analytics cookies are optional and are only used after you opt in through our cookie banner. Please read our Cookie Policy for more detail and to understand how to change your choice.

Changes to this policy

We may update this policy when our processing activities or legal obligations change. The current version will always be published on this page.