Privacy Policy

At Só Verde, Unipessoal Lda (NIF: 518960366, hereinafter "we", "us", or "our"), we are committed to protecting your personal data and your right to privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website www.soverde.pt or make a purchase from us.

This policy complies with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Portuguese Law No. 58/2019 of 8 August.

1. Data Controller

  • Company: Só Verde, Unipessoal Lda
  • NIF: 518960366
  • Address: Portugal
  • Email: ola@soverde.pt
  • Phone: +351 934 852 956
  • Website: www.soverde.pt

2. What Personal Data We Collect

  • Identity data: first name, last name;
  • Contact data: email, phone, billing and delivery address;
  • Transaction data: purchases, payments, and order history;
  • Technical data: IP address, browser type, cookie identifiers;
  • Usage data: how you use our website;
  • Marketing data: your communication preferences.

3. Legal Basis for Processing (GDPR Art. 6)

  • Performance of a contract: to process and fulfil your orders;
  • Legal obligation: tax and accounting records (up to 10 years, per Portuguese law);
  • Legitimate interests: to improve our services and prevent fraud;
  • Consent: for cookies and marketing emails (withdrawable at any time).

4. How We Use Your Data

  • Process and fulfil orders;
  • Send order confirmations and shipping updates;
  • Send marketing communications (only with your consent);
  • Comply with legal obligations;
  • Prevent fraud and ensure website security.

5. Data Sharing

We share your data only with payment processors, shipping partners, and IT service providers (including Shopify) under strict data processing agreements. We do not sell your data to third parties.

6. International Transfers

Any data transferred outside the EEA is protected by EU Standard Contractual Clauses or European Commission adequacy decisions.

7. Data Retention

  • Transaction data: up to 10 years (Portuguese tax law);
  • Marketing preferences: until you withdraw consent;
  • Technical data: up to 12 months.

8. Your GDPR Rights

  • Access – request a copy of your data;
  • Rectification – correct inaccurate data;
  • Erasure – request deletion of your data;
  • Restriction – limit how we process your data;
  • Portability – receive your data in a portable format;
  • Objection – object to direct marketing;
  • Withdraw consent – at any time.

To exercise your rights, email ola@soverde.pt or call +351 934 852 956. You may also file a complaint with the Portuguese DPA:

9. Cookies

We use cookies on our website. See our Cookie Policy for details. Manage your preferences via our cookie consent banner.

10. Security

We use SSL encryption and appropriate technical measures to protect your data against unauthorised access or disclosure.

11. Changes to This Policy

We may update this policy periodically. The updated date will always be shown below.

12. Contact

Questions? Email ola@soverde.pt or call +351 934 852 956.

Last updated: June 2026