Política de privacidade
Privacy Policy
1. Controller
| Field | Value |
|---|---|
| Controller | Made of Cards, Lda. |
| Tax number (NIPC) | 519 569 253 |
| Registered office | Rua do Cavalongo 32, 3030-883 Coimbra, Portugal |
| Madeofcards@madeofcards.pt | |
| Data Protection Officer | Not appointed. The processing carried out does not meet the criteria of Art. 37(1) GDPR. |
2. Purposes, lawful bases and retention
| Purpose | Data collected | Lawful basis (Art. 6 GDPR) | Retention |
|---|---|---|---|
| Order processing and invoicing | Name, billing/shipping address, email, phone, order data | Contract performance (b) / legal obligation (c) | 10 years, the statutory retention period for accounting records |
| Account and customer service | Email, login data, correspondence | Contract (b) / legitimate interest (f) | 3 years after the last interaction |
| Newsletter / opening announcement | Consent (a) | Until consent is withdrawn | |
| Payment processing | Tokenized payment reference (no card data stored) | Contract (b) | 10 years, together with the corresponding invoice |
| Fraud and security | IP address, device, navigation on checkout | Legitimate interest (f) | 12 months |
The newsletter subscription is optional and used to announce the store opening and future releases. You may unsubscribe at any time via the link in every email or by writing to Madeofcards@madeofcards.pt.
3. Recipients
Data is shared only with processors required for the service: payment providers, the shipping carrier, hosting/email providers (Zoho Mail, Shopify), and public authorities where legally required. Processors are bound by data processing agreements.
4. International transfers
Some processors operate outside the European Economic Area. Shopify, which hosts the store, may process data in Canada and the United States. Where that happens, transfers rely on the European Commission's adequacy decisions or on standard contractual clauses, as applicable. Zoho Mail processes email on European infrastructure.
You may request details of the safeguards applied to any specific transfer by writing to Madeofcards@madeofcards.pt.
5. Data subject rights
Under the GDPR you have the right to:
- Access, rectify and erase your data;
- Restrict processing and object to processing (including profiling);
- Data portability;
- Withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
Exercise rights by emailing Madeofcards@madeofcards.pt. We respond within one month. You also have the right to lodge a complaint with the supervisory authority: Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa, Portugal — https://www.cnpd.pt.
6. Children
The store does not knowingly collect data from children under 16 without verifiable parental consent. If you believe a child has provided personal data, contact us to have it deleted.
7. Changes
Material changes will be announced on the store. The applicable version is the one in force at the time of the interaction.
Cookie Policy
1. What cookies are
Cookies are small text files stored on your device when you visit a website. They let the site remember you between requests. Some are set by us (first-party), others by third parties (third-party).
2. How we use them
| Category | Purpose | Example | Consent |
|---|---|---|---|
| Strictly necessary | Operate the site: session, security, cart, payment | Shopify session/cart cookies, anti-fraud | No consent required |
| Preferences | Remember choices: language, currency | Locale selection | Consent |
| Analytics | Understand traffic and improve the site, anonymized where possible | Shopify Analytics | Consent |
| Marketing | Measure campaigns and show relevant offers | None installed at this time | Consent |
The coming-soon page currently sets only strictly necessary cookies. Analytics and marketing cookies will be added when the store launches, with an explicit consent banner.
3. Consent
Strictly necessary cookies are set on the basis of legitimate interest. Other cookies are set only with your prior, informed consent, obtained through the consent banner. You may withdraw or change consent at any time through the "Manage preferences" option in the consent banner, which can be reopened from any page of the store.
4. Managing cookies
You can block or delete cookies in your browser settings. Blocking all cookies may break parts of the store (cart, checkout, login). Instructions per browser:
- Chrome: https://support.google.com/chrome/answer/95647
- Firefox: https://support.mozilla.org/kb/cookies-information-websites-store-on-your-computer
- Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac
- Edge: https://support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
5. Contact
Questions about this policy: Madeofcards@madeofcards.pt.
6. Changes
We may update this policy. The version in force is published on the store with its date.