N° 17Legal
Privacy Policy
On this page
This policy explains what personal data we collect when you use wishavelle.shop, why, and what rights you have under the GDPR and the Portuguese data protection law (Law 58/2019).
1. Controller
RIGOR ABSOLUTO – VESTUÁRIO, LDA (WISHAVELLE), Rua De São Vicente Nr. 276, 4650-502 Sousa, Felgueiras, Portugal. Email support@wishavelle.shop, phone +351 918 375 640. For any privacy question, write to that address.
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, billing and delivery address, email, phone (optional), order contents, sizes and options chosen | Processing and delivering your order, customer service, returns and guarantee claims | Performance of a contract (Art. 6(1)(b) GDPR) |
| Payment status and transaction reference (not your full card number) | Taking payment, refunds, fraud prevention | Contract; legitimate interest in preventing fraud (Art. 6(1)(f)) |
| Invoices and order records | Accounting and tax obligations | Legal obligation (Art. 6(1)(c)) |
| Account login (if you create an account) | Order history and saved addresses | Contract |
| Messages you send us, withdrawal requests | Answering you, handling withdrawals | Contract; legal obligation |
| Technical data (IP address, browser, pages requested) | Running the site securely, preventing abuse | Legitimate interest (Art. 6(1)(f)) |
We do not send newsletters, we do not use analytics or advertising cookies, and we do not sell or rent your data. We do not make decisions based solely on automated processing.
3. Who receives your data
- Hosting and email: Hostinger, which hosts this website and our mailbox within the EU.
- Payment providers: the provider you choose at checkout (for example Stripe or PayPal) receives the data needed to process your payment, under its own privacy policy.
- Carriers: name, delivery address and, where needed for delivery, email or phone.
- Accountants and authorities: where required by law.
4. Transfers outside the EU
Some payment providers process data in the United States. Where this happens, transfers are covered by the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses. For deliveries outside the EU, the carrier and customs authorities in the destination country receive the delivery data.
5. How long we keep it
- Order and invoice records: 10 years, as required by Portuguese tax law.
- Customer service messages and withdrawal requests: up to 3 years after the last contact, for the duration of the legal guarantee.
- Customer accounts: until you delete the account or after 3 years without activity.
- Server logs: up to 30 days.
6. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. Where processing is based on legitimate interest you can object at any time. To exercise these rights, email support@wishavelle.shop; we answer within one month.
You also have the right to lodge a complaint with a supervisory authority, in Portugal the Comissão Nacional de Proteção de Dados (CNPD), or the authority in your country of residence.
7. Cookies
We only use cookies and local storage that the shop needs to work. Details are in our Cookie Policy.
8. Security
The site uses an encrypted HTTPS connection. Access to order data is limited to the people who need it to process your order.
9. Changes
If we change how we use personal data, we update this page and the date at the top.