1. Responsible Entity

Eugénio & Gonçalo, Lda, with headquarters in Portugal and commercially designated as GUIMANOS, is the entity responsible for processing your personal data and ensures the protection of your privacy.

We act in accordance with the General Data Protection Regulation (GDPR) and all applicable national legislation, determining the purposes and means of processing collected personal data.

2. Personal Data Collected

Personal data is considered all information related to an identified or identifiable natural person, collected in any format.

GUIMANOS collects only strictly necessary data, namely:

• Name, address, and contacts (email and phone);
• Billing and shipping data;
• Purchase history and interactions with the website;
• Communication and marketing preferences (when consented);
• Technical information about browsing (cookies and analytics).

Data can be collected directly (e.g., website forms, customer registration, orders) or automatically (cookies and analytical tools).

3. Legal Grounds for Processing

The processing of personal data by GUIMANOS is based on legitimate legal grounds:

• Consent: when the user authorizes the use of their data for specific purposes (e.g., promotional communications);
• Contract performance: when processing is necessary to process orders, payments, and deliveries;
• Legal obligation: compliance with tax, accounting, or regulatory obligations;
• Legitimate interest: continuous improvement of services, fraud prevention, and customer support.

4. Purposes of Processing

The personal data collected is used for specific and legitimate purposes, namely:

• Processing and delivery of orders;
• Customer account management and support communications;
• Compliance with legal and tax obligations;
• Statistical analysis and improvement of user experience;
• Sending promotional communications and newsletters (with consent);
• Personalized marketing and remarketing campaigns (when authorized).

5. Data Retention

Personal data is retained only for the period necessary for the purpose for which it was collected:

• During the contractual relationship and up to 10 years after the last transaction (tax obligation);
• Until consent for marketing communications is canceled;
• For specific legal periods when required by law.

After the applicable period, the data is securely deleted or anonymized.

6. Rights of Data Subjects

Under current legislation, the data subject can, at any time:

• Request access to their personal data;
• Request its rectification or erasure;
• Request restriction or objection to processing;
• Request data portability;
• Withdraw consent, when applicable.

These rights can be exercised via email geral@guimanos.com.

The data subject also has the right to lodge a complaint with the National Data Protection Commission (CNPD).

7. Sharing Data with Third Parties

Personal data may only be shared with trusted entities acting on behalf of GUIMANOS, such as:

• Logistics service providers and carriers (e.g., CTT);
• Secure payment partners (e.g., Stripe, PayPal);
• Legal, tax, and accounting consultants;
• Technical and digital marketing service providers (e.g., Google, Meta, Klaviyo).

All partners are bound by confidentiality agreements and comply with GDPR standards.

8. Cookies & Analytics Tools

The website uses cookies and similar technologies to ensure the store's operation, remember your preferences, analyze performance, and present personalized content and advertising.

We use four categories of cookies: essential (necessary for the website's operation), functional (language and currency preferences), analytical (Google Analytics, Shopify Analytics), and marketing (Meta Pixel, Google Ads, Klaviyo).

Non-essential cookies are only activated after your explicit consent. You can manage or withdraw your consent at any time.

For complete information on the cookies used, their purposes, duration, and providers, please consult our Cookie Policy.

9. Payment Processing

Payments are processed through secure external providers (e.g., Stripe, PayPal). GUIMANOS does not store credit card data.

All processors follow PCI-DSS standards, ensuring the secure handling of payment information.

10. Privacy of Minors

The GUIMANOS website is not intended for individuals under 18 years of age. We do not intentionally collect personal data from minors.

If a guardian identifies that a minor has provided data, they should contact us so that it can be deleted immediately.

11. Changes to This Policy

GUIMANOS may update this Privacy Policy at any time to reflect legal, technological, or operational changes.

Updated versions will be published on this page with the respective revision date. We recommend regular reading.

12. Contact

To exercise your rights or clarify any doubts about this policy, please contact us:

• 📩 geral@guimanos.com
• 🌐 Online contact form