Last Updated: 2025.02.10
1. Introduction
This Privacy Policy explains how Boa Safra Lda. (referred to as “we”, “us”, or “our”) collects, processes, and protects personal data of website users and customers in accordance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and Portuguese data protection laws.
2. Data Controller & Contact Information
The Data Controller responsible for processing your personal data is:
Boa Safra Lda.
Rua 28 de Janeiro, no 35
Candal Park – Fração S-19
4400-335 Vila Nova de Gaia, Portugal
VAT 509054374
Email: info@boasafra.pt
If you have questions about how we process your data, please contact us at info@boasafra.pt
3. Personal Data We Collect
We collect and process the following personal data:
A. Data You Provide Directly
- Name, email address, phone number
- Shipping and billing addresses
- Payment details (processed securely by third-party providers)
- Account login credentials (for professionals)
- Communication with customer support
B. Data Collected Automatically
- IP address and device identifiers
- Browser type, operating system, and website navigation data
- Cookies and tracking technologies (see our Cookie Policy)
C. Data from Third Parties
- Data from payment service providers
- Social media information (if you log in using a social account)
4. Legal Basis for Processing Personal Data
We process personal data under the following legal bases:
- Contractual necessity: To fulfill product orders and provide services.
- Legitimate interests: Customer support, fraud prevention, and service improvement.
- Consent: For direct marketing and cookies (you can withdraw consent anytime).
5. How We Use Your Data
We use your personal data for:
- Order processing and delivery
- Customer support and account management
- Personalizing website experience and marketing
- Compliance with legal obligations (e.g., tax and accounting regulations)
6. Data Retention
We store personal data only as long as necessary for:
- Order and customer service records: 5 years (legal requirement)
- Marketing communications: Until you withdraw consent
- Accounting and tax records: 10 years (legal requirement)
7. Data Sharing & International Transfers
We do not sell your data. However, we share it with:
- Payment processors
- Logistics partners (shipping companies)
- Marketing and analytics providers (Google, Meta, etc.)
If data is transferred outside the EU/EEA, we ensure compliance through Standard Contractual Clauses (SCCs) or transfers to countries with an adequacy decision by the EU.
8. Your Rights
Under GDPR, you have the following rights:
- Access your personal data
- Correct inaccurate data
- Delete your data (“Right to be Forgotten”)
- Restrict or object to processing
- Withdraw consent for marketing at any time
- Request data portability
To exercise these rights, contact us at info@boasafra.pt
If you believe we are processing your data unlawfully, you can file a complaint with:
Comissão Nacional de Proteção de Dados (CNPD) – https://www.cnpd.pt
9. Cookies & Tracking
We use cookies for website functionality and marketing. See our Cookie Policy to manage your preferences.
10. Security Measures
We implement industry-standard security measures to protect your data from unauthorized access, loss, or misuse.
11. Updates to This Privacy Policy
We may update this policy. Any changes will be posted on this page with an updated “Last Updated” date.
