Política de privacidade

Privacy Policy – Zash Store

1. Data Controller

Zash Store is a commercial brand operated by Inel D’assunção, Unipessoal Lda, a company registered in Portugal under NIF 519204859.

For the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR), Inel D’assunção, Unipessoal Lda acts as the data controller.

Contact: zashstore@proton.me

2. Scope and Applicability

This Privacy Policy applies to all users of the Zash Store website, regardless of their geographic location.

Where local data protection laws grant additional rights, such rights shall apply where applicable.

3. Categories of Personal Data

We may collect and process the following personal data:

3.1 Data provided by the user

Full name

Email address

Phone number

Billing and shipping address

Order details

3.2 Automatically collected data

IP address

Device and browser information

Usage data and browsing behavior

Cookies and tracking technologies

3.3 Payment Data

Payment data is processed securely by third-party providers and is not stored directly by us, except where necessary for verification purposes.

4. Legal Basis for Processing

We process personal data based on:

Performance of a contract (order processing and delivery)

Legitimate interests (fraud prevention, analytics, service improvement)

Consent (marketing and non-essential cookies)

Legal obligations (tax, accounting, compliance)

5. Purposes of Processing

Your personal data is used to:

Process and deliver orders

Provide customer support

Prevent fraud and abuse

Improve website performance

Send marketing communications (where permitted)

6. Data Sharing

We may share your data with:

E-commerce platforms (e.g. Shopify)

Payment processors

Shipping partners

Analytics and marketing tools

Authorities where legally required

All third parties are required to implement appropriate data protection safeguards.

7. International Data Transfers

Personal data may be transferred outside the European Economic Area (EEA).

Such transfers are carried out in compliance with the General Data Protection Regulation (GDPR), using appropriate safeguards such as Standard Contractual Clauses.

8. Data Retention

We retain personal data only for as long as necessary to:

Fulfill contractual obligations

Comply with legal requirements

Resolve disputes and enforce agreements

9. Your Rights

Under the GDPR, you have the right to:

Access your data

Correct inaccurate data

Request deletion

Restrict processing

Request data portability

Object to processing

Withdraw consent at any time

Requests can be made via: zashstore@proton.me

10. Cookies

We use cookies and similar technologies to:

Ensure proper website functionality

Analyze traffic and usage

Personalize content and advertising

Where required by law, non-essential cookies are only used with your consent.

11. Data Security

We implement appropriate technical and organizational measures, including:

Encryption

Access controls

Security monitoring

However, no system is completely secure.

12. Marketing Communications

We will only send marketing communications where:

You have provided consent; or

It is otherwise permitted by law

You may opt out at any time.

13. Limitation of Liability

To the maximum extent permitted by law, Inel D’assunção, Unipessoal Lda shall not be liable for indirect or consequential damages or for events beyond its reasonable control.

14. Updates to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will take effect upon publication.

15. Contact

📧 zashstore@proton.me

You have the right to lodge a complaint with a competent supervisory authority in the European Union.