Privacy Policy
This Privacy Policy is an integral part of the Website Terms of Use and Terms and Conditions, and it governs the collection and processing of your personal data when you use our website or online store (referred to hereafter as the “Website” or “Online Store”).
1. What is Personal Data?
Personal data refers to any information related to an identified or identifiable natural person. A person is considered identifiable if they can be identified, directly or indirectly, particularly by reference to identifiers such as a name, identification number, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
2. Who is Responsible for Your Data?
The entity responsible for processing your personal data is Subúrbios, Unipessoal Lda., headquartered at Rua Manuel Marques 45, 4805-078 Guimarães, Portugal, with VAT number 516 355 490 (hereafter “MALU”).
Papaya Limão may engage third-party service providers (data processors) to handle your data on our behalf.
3. What Data Do We Collect?
Simply browsing our Website does not automatically record personal data. However, some anonymous information may be collected through technologies like cookies.
To place an order or use specific features of the Website, you’ll need to provide personal data. Depending on the service, we may collect:
- Full name
- Email address
- Phone number
- Tax ID (NIF)
- Shipping and billing addresses
With your consent, we may also access your order history. We do not have access to your financial details, such as credit card numbers—these are handled securely by the payment provider of your choice. In rare cases, we may need limited access to resolve payment issues.
We assume all data submitted is truthful, accurate, and provided by you or with your authorization.
4. When and Why Do We Process Your Data?
You can browse the Online Store freely. To complete a purchase, you must provide some personal data. Your data may also be used to respond to inquiries.
With your consent, we may send marketing communications about products and news you might find interesting.
| Personal Data | Purpose | Legal Basis |
|---|---|---|
| Name, email, phone number, NIF, address | Order processing | Contract performance |
| Name, NIF, billing address | Invoice issuance | Contract performance / Legal obligation |
| Contact info, user profile | Responding to requests | Legitimate interest / Legal obligation |
| Cookie data | Site functionality and analytics | Legitimate interest / Consent |
| Login details (username/password) | Account management | Contract performance |
| Contact info, user profile | Marketing communications | Consent |
| All of the above | Legal compliance | Legal obligation |
5. Who Do We Share Your Data With?
We may share your personal data with subcontractors under contractual obligations. We may also share your data with third parties when required by law, by order of the Portuguese Data Protection Authority (CNPD), or by court order, or with your explicit consent.
6. How Long Do We Keep Your Data?
Data is retained based on the purpose for which it was collected:
| Purpose | Retention Period |
|---|---|
| Order processing | 3 years |
| Invoicing | 10 years |
| Contact requests (without purchase) | 1 year |
| Cookie-based functionality | As defined in cookie settings |
| Account management | 60 days after account cancellation |
| Marketing communications | Until consent is withdrawn |
| Legal compliance | As defined by applicable legislation |
7. Your Rights
You may exercise the following rights at any time by contacting us at malucollective@gmail.com:
- Access to your personal data
- Rectification or deletion of your data
- Restriction or objection to data processing
- Data portability
You may also request confirmation of whether we process your data, and request a copy of that data.
If processing is based on consent, you may withdraw it at any time without affecting prior processing.
You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD) or another relevant supervisory authority.
8. How Do We Protect Your Data?
We implement appropriate security measures to protect your personal data against unauthorized access, misuse, loss, or destruction. This includes encryption and secure connections for sensitive transactions.
However, it is your responsibility to ensure your devices are protected against malware or unauthorized access. Without adequate personal security, the risk of password or data theft increases.
9. What Are Cookies?
Cookies are small text files stored on your device when you access our Website. They help us enhance user experience and analyze Website performance.
Types of cookies:
- Session cookies: Temporary and deleted when you close your browser.
- Persistent cookies: Remain on your device and store preferences.
Cookies serve multiple purposes including functionality, analytics, personalization, and advertising.
10. What Cookies Do We Use?
Our cookies do not collect personal information automatically. Each cookie is unique to your browser and used to analyze aggregated performance data.
You can manage cookies through your browser settings at any time. Consult your browser’s “Help” menu for detailed instructions.
Please note: Disabling cookies may impact the availability or functionality of certain features on our Website.
11. Changes to This Policy
MALU reserves the right to update this Privacy and Cookies Policy at any time without prior notice. Changes take effect immediately upon being posted on this page. We recommend checking this page regularly.
12. Contact Us
For any questions about how we handle your personal data, please reach out via email to:
📧 malucollective@gmail.com