Privacy Policy
Effective date: October 3, 2025
1. Who we are
- OPACWEB, [legal entity name], [registered address], Portugal
- Email for privacy requests: weareopac@gmail.com
- This policy explains how we handle personal data on opacweb.pt
2. What we collect and why
Orders and support
- Data: email, billing and shipping address, order details, invoices
- Purpose: fulfill purchases, provide support, invoicing and tax
- Legal basis: contract performance, legal obligation for accounting
Payments
- Processor: Webflow Ecommerce and its third party payment providers
- We do not store full card details
- Legal basis: contract performance, legitimate interest in fraud prevention
Newsletter
- Data: email address only
- Purpose: send updates and news with your consent
- Legal basis: consent, you can unsubscribe at any time
Analytics, cookie-less
- Tool: Vercel Web Analytics
- Data: aggregated page views, referrers, device or browser information, approximate location derived from IP
- Purpose: understand usage and improve the site
- Legal basis: legitimate interest
Server logs and security
- Data: IP address, user agent, request metadata, error logs
- Purpose: operate, secure, and debug the service
- Legal basis: legitimate interest
4. Data sharing and international transfers
We share data with service providers acting as processors, including Webflow hosting and ecommerce, payment providers used by Webflow, our email or newsletter provider if used, email delivery, and Vercel for analytics.
Some providers are outside the EU. Transfers are protected by mechanisms such as the EU US Data Privacy Framework and Standard Contractual Clauses.
5. Retention
- Orders and invoices: kept as required by Portuguese tax law, typically 10 years
- Newsletter data: kept until you unsubscribe or request deletion
- Logs and analytics: typically up to 12 months
6. Your rights
You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. You can withdraw consent at any time for the newsletter.
To exercise rights, email weareopac@gmail.com
You can lodge a complaint with the Portuguese Data Protection Authority, CNPD.
7. Security
We use HTTPS, access controls, and limit access to personal data to those who need it.
8. Contact
- OPACWEB, [registered address], Portugal
- Email: weareopac@gmail.com
9. Changes
We will post updates here with a new effective date.
