Privacy Policy
Privacy and Cookies Policy
1. Data Controller
The online store Locas Biju®, available at https://locasbiju.com, is operated by Liliana Pinto, NIF 235424463, with establishment and contact address at Rua Barão do Corvo, 448, 4400-036 Vila Nova de Gaia, Portugal.
For questions related to privacy and data protection, the contact email is geral@locasbiju.pt.
2. Data Processed
Depending on how the store is used, the following may be processed:
• identification and contact data, such as name, email, telephone, and address;
• data necessary for invoicing and delivery;
• information about orders, returns, and contacts with customer support;
• technical and usage data, such as IP address, device, browser, pages visited, and interactions with the site;
• marketing preferences and proof of the respective consent;
• payment information strictly necessary for transaction management. Full card details are processed by the payment providers and are not accessible to Locas Biju.
3. Purposes and Grounds
Personal data may be processed to:
• manage orders, payments, deliveries, exchanges, returns, and customer support, based on the performance of the contract;
• issue invoicing documents and comply with tax, accounting, and legal obligations;
• prevent fraud, protect the security of the store, and defend rights, based on legitimate interest and applicable obligations;
• send commercial communications, when there is consent or another applicable legal basis;
• measure and improve the store's performance, when necessary with consent for cookies or similar technologies.
When processing depends on consent, it may be withdrawn at any time, without affecting the lawfulness of previous processing.
4. Retention
Data is stored only for the period necessary for the indicated purposes and for the deadlines imposed by legal, tax, accounting, or rights defense obligations.
Data used for marketing is stored until consent is withdrawn or opposition is raised, without prejudice to the minimum storage necessary to demonstrate compliance with the request.
5. Service Providers and Transfers
Data may be communicated to providers who support the store's operations, namely:
• Shopify, as the e-commerce platform;
• payment providers;
• carriers and logistics partners;
• email, customer support, reviews, analytics, and advertising services;
• accountants, consultants, or authorities, when necessary or legally required.
These recipients receive only the data necessary for their respective functions and are subject to applicable legal and contractual obligations.
Some providers may process data outside the European Economic Area. In such cases, protection mechanisms provided for in applicable legislation are used, such as adequacy decisions or standard contractual clauses.
6. Data Subject Rights
Under applicable terms, the data subject may request:
• access to their personal data;
• rectification of inaccurate or incomplete data;
• erasure of data;
• limitation or opposition to processing;
• data portability;
• withdrawal of consent;
• additional information about processing.
Requests can be sent to geral@locasbiju.pt. Additional information strictly necessary to confirm the identity of the requester may be requested.
The data subject may also file a complaint with the National Data Protection Commission (Comissão Nacional de Proteção de Dados), through the official channels available at https://www.cnpd.pt.
7. Cookies
The site uses cookies and similar technologies to ensure the store's operation, remember preferences, measure performance, and, subject to consent when required, personalize content or advertising.
Cookies can be grouped into the following categories:
• necessary, essential for the functioning of the store, cart, security, and checkout;
• preferences, used to remember visitor choices;
• statistics, used to understand site usage;
• marketing, used to measure campaigns or display relevant advertising.
Non-essential cookies should only be activated after the visitor's choice. Consent can be changed or withdrawn through the privacy settings made available on the site.
8. Security
Appropriate technical and organizational measures are applied to protect personal data against loss, misuse, alteration, or unauthorized disclosure. No system is completely risk-free, so measures are reviewed according to the nature of the data and the services used.
9. Changes to this Policy
This policy may be updated to reflect legal, technical, or operational changes. The version in force and its respective update date are presented on this page.