Privacy Policy
1. Who is responsible for your data
The controller of your personal data is Bruno Simões Coelho, Empresário em Nome Individual (sole proprietorship), trading as Jana Guardanapos, Rua Dr Carlos Vale, 218 R, Mafamude, 4400-127 Vila Nova de Gaia, Portugal, VAT number PT298604990.
For any question about your data, or to exercise your rights, write to janaguardanapos.eu@gmail.com or call +351 934 581 434.
2. What we collect and why
We only collect what we need to sell and deliver your order and to run this website.
- Placing an order: name, billing and delivery address, email, phone number and the items you buy. We use them to process, ship and support your order. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
- Customer account (optional): if you create an account, we keep your login details, addresses and order history so you can check out faster and follow your orders. Legal basis: performance of a contract (Art. 6(1)(b)). You can ask us to delete the account at any time.
- Invoices and accounting: order and invoice data that Portuguese tax and accounting law requires us to keep. Legal basis: legal obligation (Art. 6(1)(c)).
- Contacting us: when you email or call us, we use your message and contact details to reply. Legal basis: our legitimate interest in answering you, or steps before a contract at your request (Art. 6(1)(f) and (b)).
- Returns and complaints: the information and photos you send us, to handle your return, refund or guarantee claim. Legal basis: contract and legal obligation (Art. 6(1)(b) and (c)).
- Running the website: technical data such as IP address, browser type and the pages requested, kept in server logs for security and to keep the site working. Legal basis: legitimate interest (Art. 6(1)(f)).
Providing order data is necessary to conclude the contract: without a name, address and email we cannot deliver your order. We do not make decisions about you based solely on automated processing, and we do not sell your data.
3. Payments
Payments are processed by Mollie B.V. (Netherlands). You enter your card or bank details on Mollie’s secure systems; we never receive or store your full card details. We only receive confirmation of the payment, the method used and the amount. Mollie processes payment data under its own privacy policy and its obligations as a regulated payment institution.
4. Delivery
To ship your order we share your name, delivery address, phone number and email with our shipping platform, Packlink (Spain), and with the carrier you choose at checkout, only as needed to deliver the parcel and send you tracking updates.
5. Cookies and similar technologies
We use cookies that are necessary for the shop to work (for example, your cart and login) and, only with your consent, optional cookies. You can accept, refuse or change your choice at any time through the cookie banner. Full details, including each cookie and how long it lasts, are in our Cookie Policy.
We do not currently use analytics or advertising tracking tools. If we introduce them, they will only run with your consent and we will update this policy and the Cookie Policy first.
Fonts and other design files are served from our own servers, not from third-party services, so reading our pages does not share your IP address with a font or design provider.
6. Who else receives your data
Besides the payment and delivery partners above, your data may be processed by service providers acting on our behalf, only for the purposes described here:
- Website hosting: our hosting provider, with servers in the European Union.
- Email: Google (Gmail), which hosts our mailbox.
- Accounting: our certified accountant, for invoicing and tax obligations.
- Authorities: tax or other public authorities, where the law requires it.
7. Transfers outside the EU
Some providers, such as Google, may process data outside the European Economic Area. Where this happens, the transfer is protected by an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or by the Commission’s Standard Contractual Clauses.
8. How long we keep your data
- Orders and invoices: for the period required by Portuguese tax and accounting law.
- Customer account: until you ask us to delete it; order records then remain only as long as the law requires.
- Emails and complaints: as long as needed to handle your request and any related claim.
- Server logs: for a short period, in line with our hosting provider’s standard retention.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data erased, where we no longer have a legal reason to keep it;
- restrict or object to processing based on our legitimate interest;
- receive the data you gave us in a portable format;
- withdraw your consent at any time, without affecting processing that took place before.
To exercise any of these rights, email janaguardanapos.eu@gmail.com. We will reply within one month.
You also have the right to lodge a complaint with a data protection authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt. You may also contact the authority in the EU country where you live.
10. Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS) and restricted access to our systems.
11. Children
This shop is not directed at children under 16, and we do not knowingly collect their personal data.
12. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows when it was last updated.