Privacy Policy (GDPR)
Last updated: 6 August 2026
1. Data controller
For the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the controller of your personal data is:
Domus Craveri – a trading name of Pedro Gonçalves Craveiro
Tax number (NIF): 324086091
Av. Dr. Leonardo Coimbra 382, 4610-105 Felgueiras, Portugal
Email: info@domuscraveri.com
2. What data we collect
- Identity and contact data: name, billing and delivery address, email address, telephone number
- Order data: items purchased, order value, order history
- Payment data: processed directly by our payment provider. We never see or store your full card number
- Technical data: IP address, browser type, device information, pages visited
- Communications: messages you send us by email, including any photographs or video you provide with a warranty claim
3. Why we process it, and on what legal basis
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Handling returns, refunds and warranty claims | Performance of a contract / legal obligation |
| Accounting and tax records | Legal obligation |
| Customer support | Legitimate interests |
| Fraud prevention and site security | Legitimate interests |
| Marketing emails | Your consent (withdrawable at any time) |
4. Who receives your data
- Shopify, which hosts this store and processes orders on our behalf
- Payment providers, to process your payment
- Our suppliers and their carriers, who receive your name, delivery address and telephone number solely in order to dispatch your parcel
- Public authorities, where required by law
We never sell your personal data.
5. International transfers
Your goods are dispatched from a warehouse inside your own region – within the European Union for EU orders, and within the United States for US orders.
However, the supplier company that fulfils your order is established outside the European Economic Area, in a country that is not covered by a European Commission adequacy decision. In order to dispatch your parcel, your name, delivery address and telephone number are transmitted to that supplier.
Such transfers are made on the basis of the European Commission’s Standard Contractual Clauses or another transfer mechanism recognised under Chapter V of the GDPR. Only the data strictly necessary for delivery is transferred. No payment data is shared.
6. How long we keep it
- Order and invoicing records: retained for the period required by tax law in Portugal
- Customer account data: until you ask us to delete it
- Warranty claim material (photographs, video): up to 24 months after the claim is closed
- Marketing consent: until you withdraw it
- Technical logs: a maximum of 12 months
7. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data erased (“right to be forgotten”)
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw consent at any time, without affecting processing carried out before withdrawal
To exercise any of these rights, email info@domuscraveri.com. We will respond within one month.
8. Complaints
If you believe your data has been handled unlawfully, you may lodge a complaint with the Portuguese supervisory authority, CNPD (www.cnpd.pt), or with the data protection authority of the EU Member State in which you reside.
9. Cookies
This website uses cookies that are strictly necessary for it to function (session, cart, security), together with analytics and, where you consent, marketing cookies. You can accept or refuse non-essential cookies through the cookie banner, and change your choice at any time in your browser settings.
10. Changes
We may update this Privacy Policy. The current version is always published on this page with its date of last revision.