Privacy policy

Last updated: February 5, 2026

1. IDENTIFICATION OF THE CONTROLLER AND GENERAL PRINCIPLES

This Privacy Policy regulates the processing of personal data carried out on the website operated by Sampedro (Empresa Industrial Sampedro S.A.), legal entity no. 500 096 724, with registered office at Rua de São Pedro, 227, 4815-176 Lordelo, Guimarães, hereinafter referred to as "Sampedro".

Our main objective is to consolidate the relationship of trust and proximity with our customers. Sampedro acts in strict compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable national legislation, ensuring transparency, confidentiality, and integrity in the processing of your data.

2. COLLECTED PERSONAL DATA

We collect only data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed. Upon registration or purchase at our store, the following data is collected:

  • Identification and Contact: Full name, email address, and telephone contact.

  • Shipping and Billing Data: Full address, postal code, locality, and Tax ID (NIF) (mandatory for issuing invoices and compliance with tax obligations).

  • Payment Data: Transaction details and chosen method (we do not store complete credit card data; these are processed by secure external gateways).

  • Navigation Data: IP address, device type, and cookie data (for statistical analysis and security).

3. PURPOSE AND LEGAL BASIS FOR PROCESSING

Your personal data is collected and processed on the following grounds and for the following purposes:

  1. Contract Execution and Pre-Contractual Diligence:

    • Processing, dispatch, and delivery of orders;

    • Payment management;

    • Customer support and clarification of doubts;

    • Resolution of after-sales issues (returns, exchanges, or refunds).

  2. Compliance with Legal Obligations:

    • Issuance and communication of invoices to the Tax Authority;

    • Accounting and tax management;

    • Compliance with legal warranty periods.

  3. Express Consent:

    • Sending Newsletters and Direct Marketing communications (only if you have voluntarily subscribed).

  4. Legitimate Interest:

    • Improvement of service quality, fraud detection, and network security (managed by Shopify infrastructure).

4. DATA SHARING AND RELATIONSHIP WITH THIRD PARTIES

Sampedro does not assign or sell your personal data to third parties for commercial purposes. However, to ensure the operation of the service, we share strictly necessary data with the following partners (subcontractors):

  • Shopify: Our store is hosted on the Shopify Inc. platform, which provides the e-commerce and security infrastructure (protected servers and databases).

  • Payment Processors: Banking entities and gateways (e.g., PayPal, Stripe, IFTHENPAY) for payment validation.

  • Carriers: Partner logistics companies to ensure order delivery to your address.

  • Authorities: Tax Authority or Courts, when required by law.

International Transfers: By using the Shopify platform, your data may be processed outside the European Economic Area (e.g., Canada or USA). These transfers are protected by compliance mechanisms recognized by the European Commission.

5. RETENTION PERIOD

Data is retained only for the necessary period:

  • Fiscal/Accounting Data: 10 years (as required by law).

  • Marketing Data: Until the customer withdraws their consent.

  • Account Data: As long as the registration remains active in the store. If you request account deletion, data will be erased, except for that which we are obliged to keep by legal imposition.

6. RIGHTS OF THE DATA SUBJECT

As the data subject, you have the right to exercise at any time:

  • Right of Access: To know what data we hold about you.

  • Right to Rectification: To correct incorrect or incomplete data in your customer area.

  • Right to Erasure: To request the deletion of data ("right to be forgotten"), safeguarding tax obligations.

  • Right to Portability/Export: To request a copy of your data in a structured format.

  • Right to Object: To object to data processing for marketing or automated decisions.

To exercise these rights, send a request to: online@sampedro.pt. You also have the right to lodge a complaint with the CNPD (National Data Protection Commission).

7. COOKIES POLICY

We use cookies to improve the user experience and for statistical purposes.

  • Essential Cookies: Necessary for the functioning of the site (e.g., keeping login or products in the cart).

  • Functionality Cookies: Save your preferences (e.g., language) so you don't have to configure them every time you visit us.

  • Analytical and Third-Party Cookies: We use tools like Google Analytics, Facebook, or YouTube to measure navigation statistics and display relevant advertising. These cookies do not collect direct personal information, but rather behavioral data.

You can manage or disable cookies in your browser settings.

8. CHANGES AND CONTACTS

Sampedro reserves the right to update this policy periodically to reflect legal or operational changes. The most recent version will always be published on this page.

Contacts for Privacy questions: Sampedro - Empresa Industrial Sampedro S.A. Email: online@sampedro.pt Phone: +351 252 820 800