Privacy Policy

YOUR PRIVACY FIRST.

NEW GENERAL DATA PROTECTION REGULATION: LEARN ABOUT OUR DATA PRIVACY POLICY.

a. Our commitment

The protection of your personal data is a priority for us, which is why we are committed to processing only the personal data that is strictly necessary to provide you with the best possible service, ensuring transparency of information and applying best practices in the field of security and personal data protection.

Whenever your personal data is processed by contracted entities, we will require them to present the same level of security and guarantee of privacy with regard to the protection of personal data.

We want to earn your trust and for you to feel that your personal data is safe with us, as we are always committed to protecting your privacy and take our responsibilities concerning the protection of your personal data very seriously.

If you have any questions regarding the processing of your personal data, we are available to clarify them.

b. Who is responsible for processing your personal data?

The entity responsible for processing your personal data is the company Teresa Cardoso Oliveira, Lda., with registered office at Zona Industrial do Feital, nº14 4700-152 Frossos Braga, VAT number 501625216. This company is the owner of the brand Boutique da Tereza.

If you need to contact us, you can do so via the following email: geral@tco.pt

c. How can you contact the data protection officer?

The data protection officer can be contacted via the following email: rgpd@tco.pt

d. What personal data do we use and for what purposes?

We are committed to processing only the personal data strictly necessary to provide you with our services with the highest quality:

i. Customer Card

If you create a customer card in any of the Boutique da Tereza stores, we will process your identification data (name), your age (date of birth) and your contact details (email, address and mobile phone number). The processing of this personal data is necessary so that you can enjoy a better experience with our brand, a personalized service and access to benefits such as promotions, special discounts and offers.

ii. Online account

If you create an online account at www.boutiquetereza.com, we will process your identification data (name), your age (date of birth) and your contact details (email, address and mobile phone number). To improve your experience and reduce the number of exchanges and returns, we may also request your body measurements (bust, waist and hips). The processing of this personal data is necessary so that you can use the features of your online account, namely to make distance purchases and access your purchase history. Your personal data will be deleted 5 years after your last login.

iii. Direct Marketing

We also need your identification data (name) and contact details (email, mobile phone number and address) so we can send you informative communications about news, campaigns and offers, discounts or benefits, general or targeted, via SMS and/or email. At any time, you may withdraw your indication to receive these types of communications, either through your personal account settings or via each communication we send you.

We will only keep your personal data while you maintain your consent to receive these communications. If you withdraw your consent for this processing, we will delete your personal data.

iv. In-store sales | Transfers | Reservations

Whenever you purchase items not available in store, we will ask for your identification data (name) and contact details (mobile phone number, address and email), so that we can inform you as soon as your item is available for collection, as well as to deliver it to your home, if requested.

We will also need your identification data (name) and contact details (mobile phone number and email) in situations where you ask us to transfer an item from one store to another or when you request that an item be reserved in store.

v. Alterations

Whenever you ask us to carry out alterations on purchased items, we will ask for your identification data (name) and contact details (mobile phone number, address and email) so that we can inform you as soon as your item is available for collection, as well as to deliver it to your home, if requested.

vi. Giveaways

On our social networks – Facebook and Instagram – we frequently run giveaways. Whenever you are one of our winners, we will ask you to provide your identification data (name) and contact details (mobile phone number, address and email). This personal data will only be processed for the purpose of awarding and sending the respective prize.

vii. Quote requests

Whenever you request a quote, we will have to process your identification data (name and tax identification number) and contact details (mobile phone number, address and email).

viii. Transaction management

If you ask us to include your tax identification number on your purchases, we will need to record it and subsequently transmit it to the Tax Authority.

ix. Exchanges | Returns

To carry out exchanges of items, we will ask for your identification data (name) and contact details (mobile phone number, address and email). This data and your bank identification number will also be requested in the event of returns.

x. Customer support

To provide you with the best assistance and support, we need you to provide your identification data (name) and contact details (email and mobile phone number). This allows us to identify you, analyse your request and respond in a timely manner.

xi. Suggestions and Complaints

You may, at any time, submit suggestions or complaints concerning our services, indicating your identification data (name) and contact details (email and mobile phone number).

e. How long do we keep your personal data

We only keep your personal data for the period strictly necessary to fulfil the purposes identified above, within the legal limits. Once the defined retention period has ended, we undertake to delete, destroy or anonymise your personal data.

With the exception of transaction data, which by law we must keep for a period of 10 years, as a general rule we will erase your personal data as soon as your questions and requests have been dealt with and properly resolved, the services you requested have been provided, or the warranty periods of the items you purchased or had repaired have expired.

If you have any doubts or require additional information regarding the retention periods of your personal data, you may contact us via the following email: rgpd@tco.pt

f. With whom can we share your personal data

In certain cases, we may disclose your personal data, strictly as necessary, to entities that provide us with services, namely for home delivery, item repairs, support services and marketing activities.

If your personal data has to be shared with entities located outside the European Economic Area, we ensure that they are required to comply with European legislation on personal data protection.

We will transmit your personal data to the Tax Authority when legally required.

We will never share your personal data with other companies or brands for other commercial purposes.

g. What are your rights and how can you exercise them?

As a rule, the data subject has the following rights regarding data protection: right of access, right to rectification, right to erasure, right to restriction, right to data portability, right to object and the right not to be subject to automated decisions.

In cases where you have given consent for a particular processing of your personal data, you may withdraw it at any time.

To exercise any of these rights, you must submit a request via the following email: rgpd@tco.pt

We will carefully analyse your requests, assessing their legitimacy and relevance, and we undertake to reply in a timely manner. If you wish, you may also lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD – Portuguese Data Protection Authority).

h. Cookies

On our website, we use cookies that allow us to improve performance and your browsing experience, increasing, on the one hand, the speed and efficiency of response and, on the other, eliminating the need to repeatedly enter the same information.

Placing cookies helps our website recognise your device the next time you visit us and is also essential for its proper functioning. The cookies we use on our website do not collect personal information that allows us to identify you, only general information is stored, namely how and/or from where you access our website, as well as how you use it. Cookies retain only information related to your preferences as a user.

Session cookies: These are temporary cookies that remain in the browser’s cookie file until you leave the web page, so no record is stored on the user’s hard drive. The information collected by these cookies is used to analyse traffic patterns on the site. Ultimately, this allows us to improve content and enhance the usability of the website.

Analytics cookies: These are cookies which, when processed by us or by third parties, allow us to quantify the number of users and perform measurement and statistical analysis of how users use the service offered. We examine your browsing on our website with the aim of improving the supply of products or services we provide.

Advertising cookies: These are cookies which, when processed by us or by third parties, allow us to manage advertising spaces on the site more effectively, by analysing your browsing habits and showing you advertising related to your browsing profile.

i. How we protect your personal data

We have a range of information security measures in place, aligned with national and international best practices, to protect your personal data, including technological controls as well as administrative, technical and physical measures and procedures that ensure the protection of your personal data, preventing its misuse, unauthorised access and disclosure, loss, improper or accidental alteration, or unauthorised destruction.

Regarding information security, we adhere to the same continuous improvement commitment that guides our daily activity.

Among others, we highlight the following measures:

Restricted access to your personal data;

Secure storage and transmission of your personal data;

Protection of information systems through devices that prevent unauthorised access to your personal data;

Implementation of mechanisms that ensure the safeguarding of the integrity and quality of your personal data;

Continuous monitoring of information systems in order to prevent, detect and stop the misuse of your personal data;

Redundancy of equipment used for the storage, processing and communication of personal data to avoid loss of availability.

j. Updates to this privacy policy

This Privacy Policy may be reviewed and updated, and the relevant information will always be made available at: https://www.tco.pt/blog/informacao-geral/politica-de-privacidade

Legal Information

• Company name: Teresa Cardoso Oliveira

• Legal form: Private limited company

• Registered office address: Zona Industrial do Feital, Quinta do Feital, Nº 14 4700-152 Frossos Brg

• Contact: +351 910 263 727

• VAT number: 501625216