1. PURPOSE OF THIS POLICY

Cupido is committed to protecting the security and privacy of personal data of its customers, suppliers, partners, and users, fully complying with Regulation (EU) 2016/679 (GDPR) and other applicable legislation.
This policy clearly informs about how we treat your personal data.

---

2. WHAT ARE PERSONAL DATA?

Personal data is all information related to an identified or identifiable natural person ("data subject").

---

3. PERSONAL DATA WE COLLECT AND PROCESSING PURPOSES

Cupido collects the following personal data:
 

CATEGORY	DATA COLLECTED	PURPOSE
Customers	Name, address, VAT number, email, phone, bank details, billing/delivery address, signature, communications.	Supply of products/services, contractual and administrative management, communication, billing, marketing (explicit consent).
Suppliers	Name, professional contact, VAT number, address, bank details, communications.	Contractual, administrative, financial, and legal management.
Partners	Name, professional contact, partnership-related data.	Contract/partnership management and execution.

---

4. LEGAL BASIS FOR DATA PROCESSING

• Contractual performance: Purchase and sale of products and services;
• Compliance with legal obligations: Invoicing, tax, and legal obligations;
• Explicit consent: Marketing and advertising;
• Legitimate interest: Fraud prevention, IT security, and continuous improvement of services provided.

---

5. DATA COMMUNICATION TO THIRD PARTIES

We may communicate your personal data to third parties when strictly necessary, including:

• Logistics partners and carriers;
• Financial and banking institutions;
• Tax, financial, or administrative authorities;
• Technological service providers (hosting, payments, digital analytics, marketing).

We contractually ensure that all comply with the GDPR.

---

6. INTERNATIONAL DATA TRANSFERS

Cupido may use services located outside the European Economic Area (e.g. Google, Hotjar), strictly complying with the GDPR through standard contractual clauses approved by the European Commission.

---

7. DATA RETENTION PERIOD

We keep personal data for the period necessary for the mentioned purposes or until the fulfillment of legal obligations:

• Tax and contractual data: 10 years after contractual termination;
• Marketing data: Until consent withdrawal;
• Cookies: According to our Cookie Policy.

---

8. DATA SUBJECT RIGHTS

Under the GDPR, you can exercise the following rights regarding your data:

• Access: Request a copy of your personal data;
• Rectification: Correct incorrect or incomplete data;
• Erasure: Delete personal data (with legal limitations);
• Portability: Request transfer of your personal data;
• Restriction: Request temporary restriction of processing;
• Objection: Object to data processing, especially for marketing.

ACCOUNT DELETION REQUEST

You can explicitly request the deletion of your account by email ([email protected]). Some specific data may be retained for legal obligations (e.g. invoices).

---

9. COOKIES AND SIMILAR TECHNOLOGIES

We use first-party and third-party cookies (e.g. Google Analytics, Hotjar, cart management, favorites, sessions), as detailed in our Cookie Policy.

We manage consent through Cookiebot, ensuring full legal compliance.

---

10. PERSONAL DATA SECURITY

We adopt strict technical and organizational measures to ensure the protection and confidentiality of your data. However, we also recommend personal online security precautions.

---

11. DATA COLLECTION IN PHYSICAL STORES

In physical stores, we collect personal data through explicit consent (digital or physical form). You can exercise your rights through the contacts indicated in this policy.

---

12. MANDATORY INFORMATION KEPT IN DATABASE

We mandatory keep in our database:

• Name, address, VAT number, contacts;
• Transaction history and issued invoices;
• Date, time, and version of explicitly accepted Terms and Conditions and Privacy Policy;
• Explicit consents (marketing, newsletters, etc.).

---

13. ALTERNATIVE DISPUTE RESOLUTION (LAW NO. 144/2015)

In case of dispute, you can resort to an Alternative Dispute Resolution entity (ADR):

Algarve Consumer Conflict Arbitration Center
Address: Ninho de Empresas, Edif. ANJE, Estrada da Penha, 3rd floor, room 26, 8005-131 Faro
Tel: 289 823 135
Email: [email protected]
Website: www.consumoalgarve.pt

Alternatively, you can use the European online platform for dispute resolution (ODR):
http://ec.europa.eu/consumers/odr.

---

14. RESPONSABLE FOR YOUR DATA & CONTACTS

To exercise your rights, clarify doubts or contact the entity responsable for your data, contact us:

João Neves
Email: [email protected]
Address: Av. D. João VI, no. 205, 8700-134 Olhão, Portugal
VAT: 205826040

Website: www.cupidosshop.com

---

15. CHANGES TO OUR PRIVACY POLICY

We reserve the right to update this Policy regularly. Periodically check the latest version on our website.

Last updated: March 2025.

---

MODEL FOR EXERCISING RIGHTS REGARDING PERSONAL DATA

You can use this simplified model by sending it to [email protected]:

Name: _____________________
Email: _____________________
Phone: __________________

I am exercising the following right regarding my personal data: