Privacy Policy
Last updated:
This Privacy Policy explains how ANA PAULA PINTO DUARTE SANTOS ("we", "us", "our") collects, uses, and protects personal data in connection with the website ANA PAULA PINTO DUARTE SANTOS and the sale of Nuvine Fusion Caps. We are committed to handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
We collect the following categories of personal data:
- Order enquiry data: your name and phone number when you submit an order form.
- Contact form data: your name, email address, and message content when you use the contact form.
- Technical data: IP address, browser type, operating system, referring URL, pages visited, and time spent - collected automatically via cookies and server logs.
- Cookie and consent data: your cookie preferences stored locally in your browser.
2. How We Use Your Information
- To process and fulfil your order enquiry (call confirmation, dispatch, and delivery).
- To respond to your enquiries submitted via the contact form.
- To analyse website usage and improve the site (with your consent).
- To show relevant advertising (with your consent).
- To comply with our legal obligations.
3. Legal Bases for Processing
We process your data under the following legal bases (UK GDPR Article 6):
- Contract performance (Art. 6(1)(b)): processing your name and phone number to fulfil your order.
- Legitimate interests (Art. 6(1)(f)): site security, fraud prevention, and basic analytics.
- Consent (Art. 6(1)(a)): analytics and marketing cookies, where you have provided consent via the cookie banner.
- Legal obligation (Art. 6(1)(c)): retaining records as required by UK law.
4. Sharing Your Information
We do not sell your personal data. We may share data with:
- Delivery partners (Royal Mail, courier services) - to fulfil your order. Only name and delivery address are shared.
- Google LLC - if analytics or advertising cookies are accepted, data may be processed by Google under their own privacy policies.
- Competent authorities - where required by law.
5. Data Protection
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our website uses HTTPS encryption for all data in transit.
6. Your Rights
Under UK GDPR, you have the following rights:
- Right of access - to request a copy of data we hold about you.
- Right to rectification - to request correction of inaccurate data.
- Right to erasure - to request deletion of your data in certain circumstances.
- Right to restrict processing - to request that we limit how we use your data.
- Right to data portability - to receive your data in a structured, machine-readable format.
- Right to object - to object to processing based on legitimate interests.
- Right to withdraw consent - where processing is based on consent, you may withdraw it at any time via the cookie settings.
- Right to lodge a complaint - you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk, telephone 0303 123 1113.
To exercise any of the above rights, contact us at [email protected] or by post to the address below.
7. International Data Transfers
Some third-party services we use (such as Google) may transfer data outside the UK. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions recognised under UK law.
8. Data Retention
Order enquiry data is retained for up to 36 months from the date of enquiry for business record purposes, unless you request deletion earlier. Contact form data is retained for 12 months. Technical log data is retained for up to 90 days.
9. Children's Privacy
Our website and products are intended for adults only. We do not knowingly collect personal data from individuals under the age of 18.
10. Third-Party Services
This site may use the following third-party services:
- Google Ads Conversion Tracking - to measure the performance of advertising campaigns. Requires your consent for ad_storage and ad_user_data.
- Google Analytics - to understand how visitors use the site. Requires your consent for analytics_storage.
- Google Maps API - embedded map on our Contact page. Google's privacy policy applies to the map interaction.
All third-party services operate under Consent Mode v2; data is not sent until you provide the relevant consent via our cookie banner.
11. Cookies
Please see our Cookie Policy for full details of the cookies we use and how to manage them.
12. Updates to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.
13. Contact Information
ANA PAULA PINTO DUARTE SANTOS
Tv. de Almeida, 49, 9º Dir., 9640-636 Entroncamento, Portugal
Email: [email protected]
Phone: +44 20 7946 0817