Privacy Policy

1. Who is responsible for data processing

The data controller responsible for processing your personal data is:

Jaqueline Roxo Atelier Lda
VAT number (NIF): 510492657
Address: Rua Fernando Namora 41D, loja 10, 1600-451 Lisbon, Portugal
Email: [email protected]
Phone: +351 210 992 851

2. What this Policy covers

This Policy explains how we collect, use, and protect your personal data when you:

• visit our website
• shop in our online store
• request information
• book an appointment or fittings
• contact us by email, phone, or website forms

3. What personal data we may collect

Depending on how you interact with us, we may collect:

3.1 Identification and contact data

Name, email, phone number, address.

3.2 Order and billing data

Products purchased, order history, shipping address, billing details, VAT number (NIF) when requested for invoicing.

3.3 Made to measure service and follow up

Information needed for appointments and follow up, such as style preferences, type of event, dates, references, and measurements required to create or adjust a piece.
If you send photos or references, they may also be processed for that purpose.

3.4 Communications

Content of messages sent through website forms, email, or other channels.

3.5 Technical and browsing data

IP address, device type, browser, pages visited, date and time of access, and data collected through cookies (see the Cookies section).

4. Why we process your data and the legal basis

We only process personal data when there is a specific purpose and a valid legal basis.

4.1 Processing purchases and managing orders

To confirm orders, manage payments, shipping, returns, exchanges, and customer support.
Legal basis: performance of a contract and pre contractual steps.

4.2 Invoicing and legal obligations

To issue invoices and comply with tax and accounting obligations.
Legal basis: legal obligation.

4.3 Information requests and contact

To respond to requests, product availability, timelines, conditions, and questions.
Legal basis: pre contractual steps or legitimate interests, depending on the context.

4.4 Appointments and made to measure service

To manage appointments, fittings, alterations, and follow up.
Legal basis: pre contractual steps and performance of a contract.
When you share optional information that is not necessary for the service, the legal basis may be consent.

4.5 Publishing photos, videos, and testimonials

If we publish identifiable photos, videos, or testimonials, this will only happen with your consent, which you can withdraw at any time.
Legal basis: consent.

4.6 Website statistics and improvement

We may use Google Analytics to analyse performance and improve the user experience.
When applicable, this processing depends on your consent through the cookie banner.
Legal basis: consent (non essential cookies).

4.7 Security and fraud prevention

To ensure website security, prevent abuse, and keep technical logs.
Legal basis: legitimate interests.

5. Payments

Payments are processed by Stripe.
We do not store full card details. Payment data is processed by the payment provider in accordance with its security measures and policies.

6. Shipping and carriers

To deliver your order, we share only the necessary data with carriers:
CTT, DHL, and UPS.
This typically includes your name, address, phone number, and any information required for delivery.

7. Who we share your data with

We share personal data only when needed and only to the extent strictly necessary, for example with:

• website hosting and maintenance providers
• ecommerce platform and order management providers
• payment providers (Stripe)
• carriers (CTT, DHL, UPS)
• invoicing and accounting software
• analytics and performance services (Google Analytics), when authorised through cookies

When these providers act as data processors, they are bound by confidentiality and data protection obligations.

8. International data transfers

Some providers may be located outside the European Economic Area (for example, technology and analytics services).
When this happens, appropriate safeguards are applied, such as Standard Contractual Clauses or other lawful transfer mechanisms, where applicable.

9. How long we keep your data

We keep personal data only for as long as necessary to fulfil the purpose, and then we delete or anonymise it, unless the law requires otherwise.

Indicative retention periods:

• invoicing data and supporting documents: the applicable legal retention period (generally up to 10 years, unless otherwise required)
• order data and customer support: as long as necessary to manage the commercial relationship and related obligations
• contact requests without a purchase: up to 24 months after the last contact, unless follow up is needed
• consents (such as testimonials): until you withdraw your consent
• cookie data: according to the type of cookie and your preferences

10. Cookies

The website uses cookies and similar technologies.

10.1 Essential cookies

These are required for the website and online store to function (for example cart, session, security). They do not require consent.

10.2 Non essential cookies

These are used for statistics, performance, and, where applicable, marketing.
They are only used with your consent, through the cookie banner.

You can change your cookie preferences at any time through the cookie settings on the website (when available) or through your browser settings.

11. Your rights

You have the right to:

• access your data
• rectification
• erasure, where applicable
• restriction of processing, where applicable
• object, where applicable
• data portability, where applicable
• withdraw consent, where processing is based on consent

To exercise your rights, contact us at:
[email protected]

You also have the right to lodge a complaint with the CNPD (Portuguese Data Protection Authority).

12. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.
Even so, no system is 100% secure, so we recommend that you also protect your access and devices.

13. Minors

The website and online store are not intended for minors without parental authorisation.
If we become aware that we have inadvertently collected data from minors, we will delete it as soon as possible.

14. Links to third party websites

The website may contain links to third party websites.
This Policy applies only to the Jaqueline Roxo Atelier website. We recommend reading the privacy policies of those websites.

15. Changes to this Policy

We may update this Policy whenever necessary.
The most recent version will always be available on this page, with the updated date.