Privacy Policy

Portosigns values and respects the privacy of its customers. This Privacy Policy explains how we collect, use, share and protect your personal data when you visit our website (portosigns.pt) and buy our products, from our cork to authentic crafts and ceramics.

1. Data Controller

The entity responsible for collecting and processing your personal data is:

• Company name: Portosigns, Lda

• Tax number (NIPC): 507786408

• Registered office / shops: Shop 1: Rua da Alfândega, 17 4050-029 Porto
   Shop 2: Rua Infante D. Henrique, 71 4050-297 Porto

• Privacy contact email: portosigns@portosigns.pt

2. What Personal Data Do We Collect?

To make sure your orders reach you with the highest quality and security, we collect the following data:

• Identification and contact data: Full name, email address, phone number, and billing and delivery address.

• Transaction and payment data: Information about the products purchased and the payment method used (MBWay, Visa cards or Apple Pay). Note: Portosigns does not store your card details; they are processed securely by the respective payment platforms.

• Account data (if applicable): Username and password, if you choose to create a customer account on our website.

• Browsing and device data: IP address, browser type, pages visited and time spent on the website (collected through cookies to improve your experience).

3. How and Why We Use Your Data (Purpose and Legal Basis)

We process your data solely for the following purposes:

• Processing and shipping orders: To manage your purchase, prepare the shipment of your items (whether cork fashion or ceramics from Caldas da Rainha) and keep you informed about the delivery status. (Legal basis: performance of a contract)

• Invoicing and legal compliance: To issue invoices and meet our tax obligations to the Portuguese Tax and Customs Authority (AT). (Legal basis: legal obligation)

• Payment processing: To validate and complete payment through our MBWay, Visa and Apple Pay partners. (Legal basis: performance of a contract)

• Customer support: To answer questions, process returns or resolve any issue relating to our products. (Legal basis: performance of a contract and legitimate interest)

• Marketing (newsletters): We will only send you information about new projects, handcrafted pieces or promotions if you give us your express consent to do so. (Legal basis: consent)

4. Sharing Data with Third Parties

Portosigns does not sell, rent or transfer your personal data to third parties. We only share the data strictly necessary with trusted partners who help us run the shop, namely:

• Payment providers: Processors responsible for secure transactions via MBWay, the Visa network and Apple Pay.

• Transport and logistics companies: The carrier CTT, so that your order reaches its destination.

• Accounting and IT services: Certified invoicing platforms and web hosting services that keep our website secure.

• Public authorities: The Portuguese Tax and Customs Authority (AT), to comply with legal invoicing obligations.

5. Data Retention

We keep your data only for as long as necessary to fulfil the purposes described in this policy:

• Invoicing data: Kept for the mandatory legal period of 10 years, as required by Portuguese tax law.

• Account/customer data: Kept while your account remains active. If you ask for it to be deleted, your data will be erased, except for data we are legally required to keep.

6. Security

We implement technical and organisational measures to protect your data against unauthorised access, loss or alteration. Our website uses an SSL (Secure Socket Layer) security certificate that encrypts data sent between your device and our servers, so that your purchases and payments are fully secure.

7. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.

• Rectify incomplete or incorrect data.

• Erase your data (right to be forgotten), provided this does not conflict with legal obligations (such as invoicing).

• Object to or restrict the processing of your data.

• Withdraw consent at any time (for example, by unsubscribing from the newsletter).

• Data portability (request your data in a structured format).

To exercise any of these rights, simply contact us by email at portosigns@portosigns.pt.

If you believe Portosigns has not processed your data lawfully, you also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

8. Changes to this Privacy Policy

Portosigns reserves the right to update or modify this Privacy Policy at any time. Any changes will be published on this page, with the date of the last update.

Last updated: April 2026

This is an English translation for convenience. In case of any discrepancy, the Portuguese version prevails.