PRIVACY POLICY

Last updated: {{LAST_UPDATED_DATE}}

1. DATA CONTROLLER

This website (magik-sticker.cc) is operated by:
{{BUSINESS_LEGAL_NAME}}
NIF: {{NIF_NUMBER}}
Address: {{BUSINESS_ADDRESS}}, {{POSTAL_CODE}} {{CITY}}, Portugal
Email: {{CONTACT_EMAIL}}
Phone: {{PHONE_NUMBER}}

We are the data controller responsible for your personal data in accordance with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and applicable Portuguese data protection law (Lei n.º 58/2019).

2. INFORMATION WE COLLECT

When you visit magik-sticker.cc or place an order, we may collect and process the following personal data:
- Full name
- Email address
- Shipping and billing address
- Phone number
- Payment information (processed securely by our payment providers — see Section 6)
- IP address, browser type, operating system
- Date and time of visit
- Pages visited and referring URL
- Cookie data (see Section 5)

3. PURPOSE AND LEGAL BASIS FOR PROCESSING

We process your personal data based on the following legal grounds under GDPR:

Performance of a contract (Art. 6(1)(b) GDPR):
- Processing and fulfilling your orders
- Providing customer support
- Sending order confirmations and shipping updates

Your consent (Art. 6(1)(a) GDPR):
- Sending marketing and promotional communications
- Placing non-essential cookies

Legitimate interest (Art. 6(1)(f) GDPR):
- Analysing website traffic and improving user experience
- Fraud prevention and security

4. DATA RETENTION

We retain your personal data for as long as necessary to fulfil the purposes described above:
- Order data: retained for a minimum of 5 years as required by Portuguese tax law (Código do IRS / Código do IRC).
- Marketing data: retained until you withdraw your consent.
- Cookie data: retained according to the cookie lifetimes described in Section 5.
- Account data: retained until you request deletion of your account.

5. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies to ensure proper functionality and for analytical and marketing purposes. Cookies are small text files stored on your device. We use:

Essential cookies — required for the website to function properly (e.g., shopping cart, session management).
Analytical cookies (Google Analytics) — to analyse website traffic and usage patterns.
Marketing cookies (Facebook Pixel) — to personalise advertising and measure ad effectiveness.

You can manage your cookie preferences through your browser settings or our cookie consent module. You have the right to reject non-essential cookies.

6. SHARING YOUR DATA WITH THIRD PARTIES

Your personal data may be shared with the following categories of third parties, solely for the purposes described above:

- Payment processors: Stripe, Inc. and PayPal — to process your payments securely. Your payment card data is transmitted directly to these providers and is never stored on our servers.
- Shipping carriers: to fulfil and deliver your orders.
- Analytics providers: Google Analytics — for website usage analysis.
- Advertising platforms: Meta (Facebook) — for ad targeting and conversion tracking.
- Legal authorities: when required by law, court order, or to assist in criminal investigations.

We do NOT sell, rent, or otherwise share your personal information with third parties for their own marketing purposes.

7. INTERNATIONAL DATA TRANSFERS

Some of our service providers (e.g., Stripe, Google, Meta) may process data outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your personal data.

8. YOUR RIGHTS UNDER GDPR

Under the GDPR, you have the following rights regarding your personal data:

- Right of access — to obtain a copy of your personal data;
- Right to rectification — to correct inaccurate or incomplete data;
- Right to erasure ("right to be forgotten") — to request deletion of your data;
- Right to restriction of processing — to limit how we use your data;
- Right to data portability — to receive your data in a structured, machine-readable format;
- Right to object — to object to processing based on legitimate interests;
- Right to withdraw consent — at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at: {{CONTACT_EMAIL}}

9. RIGHT TO LODGE A COMPLAINT

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Portuguese supervisory authority:

CNPD — Comissão Nacional de Proteção de Dados
Website: www.cnpd.pt

10. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. All payment information is encrypted during transmission using SSL/TLS technology.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

12. CONTACT US

If you have any questions about this Privacy Policy or our data practices, please contact us at:

{{BUSINESS_LEGAL_NAME}}
Email: {{CONTACT_EMAIL}}
Address: {{BUSINESS_ADDRESS}}, {{POSTAL_CODE}} {{CITY}}, Portugal