Legal Information
PRIVACY POLICY
Last updated: 18-12-2025
1. Introduction and Data Controller
Your privacy is crucial to LOVALL. This policy explains how we collect, use, and protect your personal data, in compliance with the European Union's General Data Protection Regulation (GDPR).
Data Controller: [Legal name of the company / LOVALL Brand]
Headquarters: [Headquarters Address, Europe]
DPO (Data Protection Officer) Contact: [Specific email address, e.g., privacy@lovall.pt]
2. Personal Data We Collect
We collect data that helps us process your orders, improve your shopping experience, and communicate with you.
| Data Category | Purpose of Collection | Legal Basis (GDPR) |
|---|---|---|
| Order Data (Name, Address, Email, Optional NIF/VAT) | Order processing, shipping, and invoicing. | Performance of a contract. |
| Payment Data (Card details/PayPal Account – Note: We do not store this; we use secure gateways) | Payment processing and fraud prevention. | Legal obligation and legitimate interest. |
| Contact Data (Email and/or Phone) | Direct marketing (Newsletter), customer support. | Consent of the data subject. |
3. How We Use Your Data
Processing and Delivery: To manage the purchase, ship items, and provide after-sales support.
Communication: To answer your queries, send order confirmations, and service notices.
Marketing (Only with Consent): Newsletter, early access, and personalized communications.
Service Improvement: Analyzing behaviour to optimize the website and customer experience.
4. Data Sharing
LOVALL does not sell your personal data. We only share data with partners who help us operate the service or when legally required.
- Carriers: UPS, DHL, MRW (Spain) - for delivery.
- Payment Processors: e.g., PayPal, Stripe, Klarna.
- Marketing Platforms: e.g., Postmark.
- Authorities: when legally required.
5. Your Rights (Data Subject Rights - GDPR)
- Right of Access: To know if and how your data is being processed.
- Right to Rectification: To correct incomplete or inaccurate data.
- Right to Erasure: To request deletion of your data in the legally applicable cases.
- Right to Restriction: To restrict processing under specific conditions.
- Right to Object: To object to direct marketing.
- Right to Data Portability: To receive your data in a structured and machine-readable format.
7. Data Security
We implement appropriate technical and organizational security measures, including SSL encryption and other safeguards, to protect your data against unauthorized access, loss, or misuse.
8. Changes to the Privacy Policy
We reserve the right to change this Privacy Policy whenever necessary. The updated version will always be available on this page.