Privacy Policy
Your privacy matters to us — the same way we care about the places we visit and the waters we move through. This Privacy Policy explains what personal data we collect when you visit or shop at https://weareanga.com (the "Site"), why we collect it, and what rights you have over it.
1. Who is responsible for your data
The data controller is [Legal Company Name], registered in [Portugal/EU country], registration number [COMPANY REGISTRATION NUMBER], with registered address at [FULL BUSINESS ADDRESS]. For any privacy-related question or request, contact us at [PRIVACY_EMAIL].
2. What data we collect
Data you give us directly:
- Name, email address, shipping and billing address, phone number (when you place an order or create an account)
- Payment information (processed directly by our payment provider — see Section 4; we do not store full card details)
- Any information you share when contacting us, e.g. in support emails
- Email address, if you sign up for our newsletter
Data collected automatically:
- IP address, browser type, device information
- Pages visited, time spent on the Site, referring website
- Cookies and similar tracking technologies (see Section 6)
3. Why we collect it (and our legal basis)
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing and fulfilling your order, managing returns | Performance of a contract |
| Customer support and responding to inquiries | Performance of a contract / legitimate interest |
| Sending order confirmations, shipping updates | Performance of a contract |
| Sending marketing emails (only if you opt in) | Consent |
| Improving the Site, understanding how it's used | Legitimate interest |
| Preventing fraud and securing the Site | Legitimate interest |
| Complying with tax, accounting, and legal obligations | Legal obligation |
You can withdraw consent for marketing at any time by clicking "unsubscribe" in any email or contacting us directly.
4. Who we share your data with
We don't sell your personal data. We share it only with trusted parties who help us run our business, including:
- Payment processors (e.g. [Stripe / PayPal / Mollie]), to securely process your payment
- Shipping carriers (e.g. [carrier names]), to deliver your order
- Website hosting and infrastructure providers (e.g. [hosting provider])
- Email/marketing platforms (e.g. [Mailchimp / Klaviyo]), if you've subscribed to our newsletter
- Analytics providers (e.g. [Google Analytics]), to understand Site usage
- Legal or regulatory authorities, where required by law
Each of these providers is contractually required to protect your data and use it only for the purposes we specify.
5. International data transfers
Some of the providers we use may process data outside the European Economic Area (EEA). Where this happens, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses, or that the recipient is in a country recognized by the EU as providing adequate data protection.
6. Cookies
We use cookies and similar technologies to:
- Keep your cart and account working properly (essential cookies)
- Understand how visitors use the Site (analytics cookies)
- Show you relevant content, if applicable (marketing cookies)
You can manage or disable cookies through your browser settings, and where required by law, we'll ask for your consent to non-essential cookies via a cookie banner when you first visit the Site.
7. Data retention
We keep your personal data only as long as necessary for the purposes described above:
- Order and transaction data: for [10] years, to comply with tax and accounting obligations
- Account data: until you ask us to delete your account
- Marketing data: until you unsubscribe or request deletion
- Support communications: for [2] years after resolution
8. Your rights
If you're in the European Union (or covered by GDPR), you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Erase your data ("right to be forgotten"), subject to legal exceptions
- Restrict or object to certain processing
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with your national data protection authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD)
To exercise any of these rights, contact us at [PRIVACY_EMAIL]. We'll respond within one month, as required by GDPR.
9. Data security
We use appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, including encrypted payment processing and secure hosting. No method of transmission over the internet is 100% secure, but we take these obligations seriously.
10. Children's privacy
The Site is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us at [PRIVACY_EMAIL] and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top shows when it was last revised. We encourage you to review this page periodically.
12. Contact us
For any questions about this Privacy Policy or how we handle your data, reach out to:
[Legal Company Name] [FULL BUSINESS ADDRESS] [PRIVACY_EMAIL]