Granitos do Norte, Lda. values your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable national legislation. This policy explains how we collect, use, and protect your data when you use our website and online store.

1. Data Controller

Granitos do Norte, Lda., headquartered at Avenida Principal, 1115, 4625-070 Bem Viver, Marco de Canaveses, is the entity responsible for processing your personal data.

2. Data Collected

When you use our website and online store, we may collect the following personal data:

Identification data: name, tax identification number, address, telephone number, email address.
Billing and payment data: billing address, IBAN, or credit card details (processed by a certified payment operator).
Delivery data: address and shipping instructions.
Browsing data: IP address, website browsing history, cookies.
Communication data: messages sent via contact form, chat, or email.
3. Purposes of Processing

Your data is processed for the following purposes:

Management of orders, payments, and deliveries.
Issuing invoices and complying with legal obligations.
Responding to requests for information, complaints, or customer support.
Sending newsletters and marketing communications, only with your express consent.
Improving the website user experience and system security.
4. Legal Basis

The processing of your personal data is based on the following grounds:

Execution of a contract or pre-contractual steps (order processing).
Compliance with legal obligations (invoicing and accounting).
Legitimate interest of the company (improvement of services, fraud prevention).
Consent of the data subject (marketing and newsletters).
5. Data Sharing

Your data may only be shared with:

Payment and logistics service providers (only necessary data).
Tax and regulatory authorities, when required by law.
IT and digital marketing service providers, under a confidentiality agreement.

We do not sell or transfer your data to third parties for other purposes.

6. Retention Period

Personal data is retained for the period necessary to fulfill the purposes described above:

Billing data: 10 years (legal requirement).
Customer and order data: up to 5 years after the last transaction.
Marketing data: until consent is withdrawn.
Cookies: as defined in the [Cookie Policy].
7. Data Subject Rights

Under the law, you have the right to:

Access, rectify, or erase your data.
Restrict or object to the processing of your data.
Data portability, where applicable.
Withdraw consent at any time (where applicable).
Lodge a complaint with the National Data Protection Commission (CNPD).

To exercise your rights, please contact us: [contact email].

8. Data Security

We take appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, disclosure, or alteration.

9. International Transfers

Data is generally processed within the European Union. If it is necessary to transfer it outside the EU, we guarantee that this will only occur to countries with an adequate level of protection or through legal safeguards.

10. Cookies

We use cookies to improve navigation and personalize your experience. You can manage or disable cookies in your browser settings. For more details, see our [Cookie Policy].

11. Changes to the Policy

Granitos do Norte reserves the right to update this Privacy Policy at any time. Changes will be posted on this website with the date of the update.

Last update: September 2025