Privacy Policy and Commercial Communications

Privacy Policy and Commercial Communications

Status: Provisional information subject to GDPR/CNPD review.

Data controller

  • Controller: TERREIRO DINÁSTICO LDA
  • Address: Quinta São João das Areias n.º 66, 8, 2685-012 Sacavém, Portugal.
  • Email: info@terreirodinastico.com
  • Telephone: +351 912 431 851
  • DPO/privacy contact: not confirmed; privacy requests may be sent to the email and telephone above.

Data processed

The store may process name, email, telephone, delivery address, order and billing data, customer-account data, enquiries and data needed for payment and delivery.

The store uses Shopify for operations and Shopify Payments for payment. CTT is the indicated carrier. Toconline was identified as a possible invoicing tool, but its active integration must be confirmed in Admin. The current Admin inventory supplied by the store owner shows Shopify Messaging and Shopify CLI Connector App.

Shopify Messaging is a native Shopify application for email, SMS and WhatsApp campaigns and automations. According to its official listing, it may access customer and staff data including name, email, telephone, address, IP, geolocation, browser and operating system; products, the last 60 days of order history, discounts, marketing events, analytics, Online Store cookies/pixels and other service settings. It may also edit customer, discount and marketing data. Actual use, recipients, legal bases, messaging providers and retention periods must be confirmed before any campaign.

Shopify CLI Connector App is a development tool and is not described as a marketing recipient without evidence. Google Analytics, Google Tag Manager and Meta Pixel were not observed on the development storefront. If these or other pixels/apps are installed, this policy, the cookie inventory and consent settings must be updated before activation.

Purposes and sharing

Data is processed to fulfil orders, receive payments, issue fiscal documents, deliver products, answer enquiries, comply with legal obligations and prevent fraud. Commercial communications will only be sent with an appropriate legal basis and consent where required.

The installation of Shopify Messaging does not itself prove marketing consent or active campaigns. Commercial email, SMS or WhatsApp must have the required legal basis, consent and opt-out mechanism where applicable.

Rights and retention

Data subjects may request access, rectification, erasure, restriction, objection and portability where applicable by contacting info@terreirodinastico.com or the registered office. Complaints may be made to CNPD.

Data is retained only as long as necessary. Proposed operational periods are: contact data until the enquiry is resolved and no more than 2 years after last contact; account data until deletion or 2 years of inactivity, without prejudice to order records; order, invoicing and fiscal documents for 10 years where required by Portuguese tax/accounting obligations; guarantee and complaint records for the period needed to exercise or defend legal rights. Marketing data, if used, is retained until consent is withdrawn and then deleted or anonymised unless legally required. These periods require accountant and lawyer confirmation.

Cookies and consent

The store uses Shopify’s native privacy and cookie mechanism. No duplicate custom banner will be built. Optional analytics and advertising cookies must be activated only in accordance with consent settings and applicable law.

[TO CONFIRM]: active Shopify Messaging configuration and messaging provider, campaigns/channels, legal basis and consent evidence, recipients and international transfers, Toconline integration, final processor list, formal DPO status and retention-period validation.