Privacy policy

This policy explains what personal data we collect when you visit treasovi.shop or buy from us, why, for how long, and how you can exercise your rights under the GDPR and Portuguese Law n.º 58/2019.

1. Controller

CONFECÇÕES COSTA VERDE, LDA (TREASOVI), Av. São Romão do Neiva, n.º 107, 4935-546 Neiva, Viana do Castelo, Portugal; support@treasovi.shop; +351 916 804 172. We have not appointed a data protection officer; write to the email above for any privacy matter.

2. What we collect and why

Data	Purpose	Legal basis	Kept for
Name, email, phone, billing and delivery address, order contents, order language and currency	Process and deliver your order, send order and shipping emails, handle withdrawals, returns and guarantee claims	Contract (art. 6(1)(b) GDPR)	10 years for invoices and accounting records (legal obligation); other order data for the guarantee period plus one year
Payment details	Take payment, prevent fraud	Contract; legitimate interest in fraud prevention	Processed by the payment provider; we keep only the transaction reference
Account login (email, password hash) if you create an account	Let you see your orders and save addresses	Contract	Until you delete your account
Messages to customer service and the contact form	Answer your question	Legitimate interest; contract where it concerns an order	24 months
Withdrawal declarations	Process the withdrawal and keep proof of it	Legal obligation	3 years
Technical data (IP address, browser, pages requested) in server logs	Security and operation of the site	Legitimate interest	Up to 30 days

We do not use your data for advertising, we do not sell it, and we do not make automated decisions with legal effect about you. We send marketing emails only if you sign up separately; currently we do not send any.

3. Who receives your data

• Payment providers (Stripe and PayPal), to process payments and prevent fraud. They act as independent controllers for some processing; see their privacy notices.
• Carriers, for delivery: name, address, phone and email for tracking.
• Hosting provider (Hostinger), which stores the site and its database, and our email provider.
• Our accountant and public authorities where the law requires it.

4. Transfers outside the EU

Some providers may process data outside the European Economic Area, for example in the United States. Where they do, the transfer is covered by an adequacy decision (such as the EU-US Data Privacy Framework for certified companies) or by the European Commission’s standard contractual clauses.

5. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. Where processing is based on consent, you may withdraw it at any time. Write to support@treasovi.shop or use the contact form; we answer within one month.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt, or with the authority of your country of residence.

6. Cookies

We use only the cookies needed for the shop to work. See Cookies.

7. Security

The site uses an encrypted HTTPS connection. Access to order data is limited to the people who need it to fulfil your order.

8. Changes

We update this policy when our processing changes. The date at the top shows the latest version.