This Privacy Policy explains how MIROX, LDA ("we", "us", or "our") collects, uses, and protects your personal data when you use our website limoff.shop. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and Portuguese data protection laws.
Data Controller
Company: MIROX, LDA
Address: Rua Poço do Moleiro 241, 6000-412 Castelo Branco, Portugal
VAT ID: PT517994160
Email: info@mirox.pt
1. What Personal Data We Collect
Information You Provide
- Account Information: Name, email address, phone number
- Order Information: Shipping and billing addresses, payment method details
- Communications: Messages you send to customer support
Automatically Collected Information
- Device Data: IP address, browser type, operating system
- Usage Data: Pages visited, time spent, click patterns
- Cookies: Session cookies, analytics cookies, preference cookies
2. Legal Basis for Processing (GDPR Article 6)
We process your personal data based on the following legal grounds:
- Contract Performance: Processing orders, shipping, and customer support
- Legal Obligation: Tax records, fraud prevention
- Legitimate Interest: Website security, analytics, service improvement
- Consent: Marketing communications, non-essential cookies
3. How We Use Your Data
- Processing and fulfilling your orders
- Sending order confirmations and shipping updates
- Providing customer support
- Improving our website and services
- Sending marketing emails (only with your consent)
- Fraud prevention and security
- Complying with legal obligations
4. Who We Share Your Data With
We share your data only with trusted third parties when necessary:
- Shopify: E-commerce platform and payment processing
- Shipping Carriers: DHL, national postal services for delivery
- Analytics: Google Analytics (anonymized data)
- Legal Requirements: When required by law or court order
We do not sell your personal data to third parties.
5. International Data Transfers
Some of our service providers are located outside the EU/EEA. When we transfer data internationally, we ensure adequate protection through:
- EU Standard Contractual Clauses
- Adequacy decisions by the European Commission
- Binding corporate rules where applicable
6. Data Retention
- Order Data: 7 years (legal/tax requirements)
- Account Data: Until account deletion + 30 days
- Marketing Data: Until consent withdrawal
- Cookies: Variable, see Cookie Policy section
7. Your Rights Under GDPR
As an EU resident, you have the following rights:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
To exercise your rights, contact us at info@mirox.pt. We will respond within 30 days.
8. Cookies
We use the following types of cookies:
- Essential Cookies: Required for website functionality (no consent needed)
- Analytics Cookies: Help us understand how visitors use our site
- Marketing Cookies: Used for targeted advertising
You can manage cookie preferences through your browser settings or our cookie consent banner.
9. Data Security
We implement appropriate technical and organizational measures:
- SSL/TLS encryption for all data transfers
- Secure payment processing via Shopify Payments (PCI-DSS compliant)
- Regular security audits and updates
- Access controls and authentication
10. Complaints
If you believe we have not handled your data correctly, you have the right to lodge a complaint with:
Comissão Nacional de Proteção de Dados (CNPD)
Portuguese Data Protection Authority
www.cnpd.pt
Contact Us
For privacy-related questions or to exercise your rights:
Email: info@mirox.pt
Address: MIROX, LDA, Rua Poço do Moleiro 241, 6000-412 Castelo Branco, Portugal