Privacy policy

Last updated: June 4, 2025

This Privacy Policy describes how MafiArtes ("the Website", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from mafiartes.pt (the "Website"), or otherwise communicate with us regarding the Website (collectively, the "Services").

For the purposes of this Privacy Policy, "you" and "your" refer to you as a user of the Services, whether as a customer, Website visitor, or another individual whose information we collect in accordance with this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal, or regulatory reasons. We will publish the revised Privacy Policy on the Website, update the "Last Updated" date, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources, as described below. The information we collect and use varies depending on how you interact with us.

In addition to the specific uses described below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with applicable legal obligations, enforce applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain about you depend on how you interact with our Website and use our Services. When we use the term "personal information", we refer to information that identifies, relates to, describes, or can be associated with you. The following sections describe the categories and specific types of personal information we collect.

Information We Collect Directly from You

The information you submit directly to us through our Services may include:

• Contact details, including your name, address, telephone number, and email address.

• Order information, including your name, billing address, shipping address, payment confirmation, email address, and telephone number.

• Account information, including your username, password, security questions, and other information used for account security purposes.

• Customer support information, including information you choose to include in communications with us, such as when sending a message through the Services.

Some features of the Services may require you to provide certain information directly to us. You may choose not to provide this information, but doing so may prevent you from accessing or using those features.

Information We Collect About Your Use

We may also automatically collect certain information regarding your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels, and similar technologies ("Cookies").

Usage Data may include information about how you access and use our Website and your account, including device information, browser information, network connection information, IP address, and other information relating to your interaction with the Services.

Information We Obtain from Third Parties

Finally, we may obtain information about you from third parties, including vendors and service providers who may collect information on our behalf, such as:

• Companies that support our Website and Services, such as Shopify.

• Our payment processors, who collect payment information (such as bank account details, credit or debit card information, and billing address) to process your payments, fulfil your orders, and provide the products or services you have requested as part of the contract we have entered into with you.

When you visit our Website, open or click on emails we send to you, or interact with our Services or advertisements, we, or third parties with whom we work, may automatically collect certain information through online tracking technologies such as pixels, web beacons, software development kits (SDKs), third-party libraries, and cookies.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. Please also refer to the section below entitled "Third-Party Websites and Links."

How We Use Your Personal Information

Providing Products and Services

We use your personal information to provide you with the Services and fulfil the contract we have entered into with you, including:

• Processing payments;

• Fulfilling orders;

• Sending notifications related to your account, purchases, returns, exchanges, or other transactions;

• Creating, maintaining, and managing your account;

• Organising shipping;

• Facilitating returns and exchanges;

• Providing other account-related features and functionality.

We may also enhance your shopping experience by allowing Shopify to link your account with other Shopify services you may choose to use. In such cases, Shopify will process your information in accordance with its Privacy Policy and Consumer Privacy Policy.

Marketing and Advertising

We may use your personal information for marketing and promotional purposes, including sending marketing communications, advertisements, and promotional messages via email, text message, or postal mail, and displaying advertisements for products or services.

This may include using your personal information to better tailor the Services and advertising displayed on our Website and on other websites.

If you are located in the European Economic Area (EEA), the legal basis for these processing activities is our legitimate interest in promoting and selling our products, pursuant to Article 6(1)(f) of the GDPR.

Security and Fraud Prevention

We use your personal information to detect, investigate, or take action regarding potential fraudulent, illegal, or malicious activity.

If you choose to use the Services and register an account, you are responsible for maintaining the confidentiality of your account credentials. We strongly recommend that you do not share your username, password, or other access details with anyone.

If you believe your account has been compromised, please contact us immediately.

If you are located in the EEA, the legal basis for these processing activities is our legitimate interest in maintaining the security of our Website for you and our other customers, pursuant to Article 6(1)(f) of the GDPR.

Communicating with You and Improving Our Services

We use your personal information to provide customer support and improve our Services.

This processing is based on our legitimate interest in responding to your requests, providing effective services, and maintaining our business relationship with you, pursuant to Article 6(1)(f) of the GDPR.

 

Cookies

Like many websites, we use cookies. For specific information about the cookies we use in connection with our Shopify-powered store, please visit: https://www.shopify.com/legal/cookies.

We use cookies to operate and improve our Website and Services (including remembering your actions and preferences), to perform analytics, and to better understand how users interact with our Services. This processing is based on our legitimate interest in administering, improving, and optimizing the Services.

We may also allow third parties and service providers to use cookies on our Website in order to better tailor services, products, and advertising on our Website and on other websites.

Most browsers automatically accept cookies by default, but you can configure your browser to remove or reject cookies through its settings. Please note that removing or blocking cookies may negatively affect your user experience and may cause certain Services, features, or functionalities to operate incorrectly or become unavailable.

In addition, blocking cookies may not completely prevent how we share information with third parties, such as our advertising partners.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for contract fulfilment purposes, legitimate business interests, and other reasons consistent with this Privacy Policy.

These circumstances may include:

• With vendors and third parties who perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment, and shipping services.

• With business and marketing partners to provide services and advertising. These partners will use your information in accordance with their own privacy notices.

• When you direct us, request us, or otherwise consent to our disclosure of information to third parties, for example to deliver products to you or through your use of social media widgets or login integrations.

• With our affiliates or within our corporate group, based on our legitimate interest in operating a successful business.

• In connection with a business transaction such as a merger, acquisition, restructuring, or bankruptcy.

• To comply with applicable legal obligations, including responding to subpoenas, search warrants, court orders, or similar legal requests.

• To enforce our Terms of Service and to protect or defend our Services, rights, property, users, or others.

Categories of Personal Information Disclosed

We may disclose the following categories of personal information for the purposes described in the sections "How We Collect and Use Your Personal Information" and "How We Disclose Personal Information":

Category	Categories of Recipients
Identifiers, such as basic contact information and certain account and order details	Service providers and third parties acting on our behalf
Commercial information, including purchase, order, and customer support information	Payment processors, fulfilment providers, customer support providers, analytics providers
Internet or similar network activity, including Usage Data	Analytics and advertising partners
Geolocation data, such as location derived from IP address or technical measures	Service providers and marketing partners

Recipients may include:

• Service providers acting on our behalf (such as internet service providers, payment processors, fulfilment partners, customer support providers, and analytics providers);

• Business and marketing partners;

• Affiliates and related entities.

We do not use or disclose sensitive personal information without your consent or for the purpose of inferring characteristics about you.

With your consent, we may share personal information for advertising and marketing activities.

Third-Party Websites and Links

Our Website may contain links to websites or other online platforms operated by third parties.

If you follow links to websites that are not affiliated with or controlled by us, you should review their privacy and security policies as well as their terms and conditions.

We do not guarantee and are not responsible for the privacy, security, accuracy, completeness, or reliability of information found on such third-party websites.

Information you provide in public or semi-public areas, including information shared on third-party social media platforms, may be viewed by other users of the Services and/or users of those third-party platforms without limitation regarding its use by us or by third parties.

The inclusion of such links does not imply endorsement of the content, owners, or operators of those platforms unless expressly stated otherwise.

Children's Data

The Services are not intended for children, and we do not knowingly collect personal information from children.

If you are a parent or guardian of a child who has provided us with personal information, you may contact us using the details provided below to request its deletion.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as defined under applicable law) personal information of individuals under the age of 16.

Security and Retention of Your Information

Please note that no security measure is perfect or impenetrable, and we cannot guarantee "perfect security." Furthermore, any information you send to us may not be secure while in transit. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.

The length of time for which we retain your personal information depends on various factors, including whether we need the information to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce applicable agreements and policies.

Your Rights

Depending on where you reside, you may have some or all of the following rights regarding your personal information. However, these rights are not absolute and may only apply in certain circumstances. In some cases, we may refuse your request where permitted by applicable law.

Right of Access

You may have the right to request access to the personal information we hold about you, including details about how we use and share your information.

Right to Deletion

You may have the right to request that we delete the personal information we hold about you.

Right to Rectification

You may have the right to request correction of inaccurate personal information that we hold about you.

Right to Data Portability

You may have the right to receive a copy of your personal information and request that it be transferred to a third party, where technically feasible and subject to applicable legal requirements.

Right to Opt Out of Sale, Sharing, or Targeted Advertising

You may have the right to instruct us not to "sell" or "share" your personal information, or to opt out of the processing of your personal information for purposes that may be considered "targeted advertising" under applicable privacy laws.

Please note that if you visit our Website with the Global Privacy Control (GPC) opt-out preference signal enabled, we may automatically treat this as a request to opt out of the "sale" or "sharing" of information associated with the device and browser you use to access the Website, where required by applicable law.

Right to Restrict Processing

You may have the right to request that we stop or restrict the processing of your personal information.

Right to Withdraw Consent

Where we rely on your consent to process personal information, you may have the right to withdraw that consent at any time.

Right to Appeal

If we refuse to process your request, you may have the right to appeal our decision. You may do so by replying directly to our response.

Managing Communication Preferences

We may send you promotional emails, and you may opt out of receiving them at any time by using the unsubscribe link included in those emails.

If you opt out of marketing communications, we may still send you non-promotional messages relating to your account, purchases, orders, or other service-related matters.

You may exercise any of these rights where indicated on our Website or by contacting us using the contact details provided below.

We will not discriminate against you for exercising any of these rights. Before responding to your request, we may need to verify your identity by collecting certain information, such as your email address or account details.

In accordance with applicable law, you may designate an authorised representative to submit requests on your behalf. Before accepting such a request, we may require proof that the representative has been authorised to act on your behalf, and we may also require you to verify your identity directly with us.

We will respond to your request within the timeframes required by applicable law.

Complaints

If you have any complaints regarding how we process your personal information, please contact us using the details provided below.

If you are not satisfied with our response to your complaint, depending on your place of residence, you may have the right to appeal our decision by contacting us again or by lodging a complaint with your local data protection authority.

For residents of the European Economic Area (EEA), a list of supervisory authorities responsible for data protection can be found on the website of the European Data Protection Board (EDPB).

International Users

Please note that we may transfer, store, and process your personal information outside the country in which you reside.

Your personal information may also be processed by employees, service providers, and business partners located in other countries.

Where we transfer personal information outside the European Economic Area, we will rely on recognised transfer mechanisms, such as the European Commission's Standard Contractual Clauses, or equivalent mechanisms approved by the relevant UK authority where applicable, unless the destination country has been recognised as providing an adequate level of data protection.

Contact

If you have any questions about our privacy practices, this Privacy Policy, or if you would like to exercise any of your rights, please contact us:

Email: geral@mafiartes.pt

Postal Address:
Rua Manuel Castelão, Nº 1, 1º Esq.
2640-447 Mafra
Portugal

For the purposes of applicable data protection legislation, and unless otherwise expressly stated, MafiArtes is the data controller responsible for the processing of your personal information.