Privacy policy

This Privacy Policy explains how JOSÉ ANTÓNIO ESTOFADOR, LDA ("we", "us", or "our"), operating the e-commerce platform rerx2c-9v.myshopify.com, collects, uses, protects, and discloses your personal data when you visit or make a purchase from our website. We are dedicated to maintaining standard compliance under applicable international data protection framework laws, including the EU General Data Protection Regulation (GDPR).

2.1 Information We Collect

When you navigate our online store or purchase our fitness and yoga equipment, we gather certain information:

  • Device Information: IP address, browser type, operating system, time zone, cookies, and website navigation patterns collected automatically when browsing our site.

  • Order & Customer Information: Full name, billing address, shipping address, email address, phone number, and purchase details required to fulfill orders.

  • Payment Information: Payment card tokens or transaction references (all processed through encrypted third-party payment gateways; we do not directly store raw payment credentials).

2.2 How We Use Your Personal Data

We use your personal data for legitimate business purposes, contract execution, and regulatory compliance, including:

  • Processing, fulfilling, and delivering orders for massage balls, yoga accessories, and resistance bands.

  • Sending transactional order confirmations, tracking information, and customer care responses.

  • Detecting potential fraudulent activity and maintaining website safety.

  • Complying with accounting, tax, and reporting obligations under local law.

  • Sending promotional newsletters and marketing offers (only when you explicitly opt-in).

2.3 Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We only share relevant data with trusted service providers necessary to operate our business:

  • Shopify Inc.: Our online store hosting platform. Your data is stored securely through Shopify’s infrastructure.

  • Logistics & Postal Carriers: Delivery services that require customer name, address, and phone details to deliver packages.

  • Payment Gateways: Standard payment processors that handle secure transactions.

2.4 Your Data Protection Rights (GDPR)

If you reside within the European Economic Area (EEA) or other supported jurisdictions, you have the following rights:

  • Right of Access: Request copies of personal data held about you.

  • Right to Rectification: Request corrections to inaccurate or incomplete information.

  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when no longer legally required.

  • Right to Object/Restrict: Object to or limit specific processing activities.

To exercise these rights, please contact our Data Representative at [email protected].