Privacy Policy

Last updated: 22 October 2026

1. Who is responsible for your data?

This Privacy Policy covers viadellerose.eu and communications about its online store. The controller for the processing described here is Luteks Têxtil, LDA, trading as VIADELLEROSE, Rua direita de Pereiró, número 1946, Ramalde, 4100-214 Porto, Portugal; Portuguese tax identification number (NIF): 517511045.

For privacy questions or to exercise your rights, email online@viadellerose.com.pt, write to the address above or call +351 926 429 571.

This policy explains our processing; visiting the website or accepting the store's terms does not in itself provide consent for every use of personal data.

2. Personal data we process

The data involved depends on how you interact with us and the features you use. It can include:

• Contact and delivery data: name, email, telephone number, billing and delivery address, and tax details where supplied or required.
• Purchase and service records: items ordered, order value, payment status and transaction references, delivery records, returns, refunds and correspondence.
• Account data: account identifiers, sign-in information and saved preferences where an account or saved-preference feature is used.
• Technical and browsing data: IP address, browser and device information, site events, basket activity and cookie or similar identifiers, subject to the choices and legal requirements described below.
• Marketing preferences: subscription status, consent or objection records, and interactions with marketing where the relevant feature is used lawfully.
• Content you supply: enquiries, reviews and photographs you choose to send us.

We receive data from you, from your device when you use the website, and from service providers involved in payment, delivery, fraud prevention and the other functions you use. Payment providers process payment credentials under their own notices; please do not send full card details or account passwords to customer support.

3. Purposes and legal bases

Purpose	Legal basis
Answer a purchase enquiry; process an order, payment, delivery, return or refund; provide an account you request.	Steps at your request before a contract and performance of the contract, to the extent the processing is necessary for those purposes.
Issue invoices, keep legally required records and respond to a lawful authority request.	Compliance with the legal obligations applicable to us.
Protect the store and transactions, investigate suspected fraud, maintain necessary security logs, resolve disputes and defend legal claims.	Our legitimate interests in operating a secure business and protecting rights, subject to your interests and fundamental rights; a legal obligation may also apply in a particular case.
Send optional promotional communications or use optional analytics, advertising and tracking features where enabled.	Your consent where required by data protection and electronic communications law. Any permitted exception must meet its own legal conditions. You can object to direct marketing at any time.

We do not treat optional marketing or advertising tracking as necessary to complete your purchase. Providing contact, delivery and transaction information is necessary to fulfil an order; without it we may be unable to complete the purchase. Optional preferences and marketing consent are not required to shop.

4. Cookies, analytics and advertising

Strictly necessary technologies support functions such as the basket, checkout, authentication, security and recording your privacy choices. Optional analytics or advertising technologies require prior consent wherever the law requires it. Rejecting optional tracking must not prevent you from completing an ordinary purchase.

The site's cookie controls identify the optional categories and providers enabled for your visit, their purposes and applicable durations. Use those controls to accept, reject or change your choices. You can also contact us for help or further information. Browser cookie settings can provide additional controls, but deleting cookies may also delete your saved consent choice.

Where you consent to advertising features, browsing or purchase events and identifiers may be made available to the relevant advertising provider for measuring campaigns and selecting or personalising advertising. Withdrawing consent stops future consent-based processing; it does not retrospectively make earlier lawful processing unlawful.

Our store uses Shopify. For information about its platform cookies, see Shopify's Cookie Policy. A platform policy does not replace the information about the particular technologies enabled on this store.

5. Marketing choices

You can unsubscribe using the link in a promotional email or contact us at the address above. If a promotional channel includes another opt-out method, you can use it. You may object to use of your personal data for direct marketing, including related profiling, at any time. Order, security and service messages can still be sent where necessary after a marketing opt-out.

6. Recipients of personal data

Data is made available only as appropriate to the purpose and legal basis. Categories of recipients include:

• Shopify and technical providers supporting hosting, checkout, account functions and store operation;
• payment processors, banks and fraud prevention providers involved in a transaction;
• carriers, fulfilment providers, customs brokers and authorities where needed for delivery or an international return;
• customer support, communications, analytics and advertising providers for the functions used, subject to any consent required;
• accountants, legal advisers and public authorities where disclosure is necessary and lawful.

Providers acting on our instructions are subject to appropriate data processing arrangements. Some providers, such as payment providers or authorities, may act as independent controllers for their own legally defined purposes. Shopify may also process certain data for its own purposes as described in its Privacy Policy.

We may disclose relevant data in a lawful business transfer, with safeguards and information to you where required. This policy does not grant unrestricted permission to share data with every company using the VIADELLEROSE brand.

7. Transfers outside the EEA

Service providers may process data outside the European Economic Area. Where such a transfer occurs, we must use an applicable lawful mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses together with any necessary supplementary safeguards. Additional UK or Swiss requirements apply where relevant.

You may contact us for information about the countries and safeguards applicable to your data and to obtain a copy of relevant safeguards, subject to lawful redaction of confidential information.

8. Retention

Retention depends on the record and its purpose. Order, invoice and accounting records are kept for the applicable statutory tax and accounting period. Delivery, return, support and dispute records are kept for the time needed to handle the matter and the relevant legal claim period. Account data is kept while needed to provide the account, subject to deletion requests and any separate legal retention obligation.

Consent and objection records are retained as needed to demonstrate compliance and honour your choices. Marketing data is removed from active marketing when you unsubscribe or object, although a limited suppression record may be retained to prevent further marketing. Security logs and cookie data are kept only for the period justified by their purpose; cookie controls provide the durations of the technologies they describe. We then delete or anonymise data unless a lawful reason requires continued retention.

9. Your rights

Subject to the conditions in applicable law, you may request access to your data, correction, erasure, restriction of processing and a portable copy where the right to portability applies. You may object to processing based on legitimate interests on grounds relating to your circumstances. You have an unconditional right to object to direct marketing and related profiling.

Where processing is based on consent, you may withdraw it at any time. You also have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects, where the relevant legal conditions apply. If a transaction is affected by an automated payment or fraud check, contact us to request an explanation and the applicable review or challenge route.

Send a request to online@viadellerose.com.pt. We may ask for proportionate information to verify your identity. We normally respond within one month; where a lawful extension is needed, we will tell you within that month and explain why. Requests are normally free, subject to the limited exceptions permitted by law.

10. Complaints

You can contact us about any concern. You may also complain directly to the Portuguese supervisory authority, Comissão Nacional de Proteção de Dados (CNPD), or another competent data protection authority, including in the country of your habitual residence, place of work or alleged infringement where the law provides. You do not have to contact us first.

11. Security, children and external links

We use appropriate organisational and technical measures to protect personal data, taking account of the processing and risks. No system can guarantee absolute security. Contact us promptly if you suspect misuse of your account or personal data.

The store is not directed at children. If you believe a child has supplied personal data in circumstances requiring parental authorisation, contact us so that we can investigate and take the appropriate action.

External websites and social media platforms have their own privacy notices. Review those notices before providing personal data directly to them.

12. Updates

We may revise this policy to reflect changes in processing or law and will identify the latest update date. Where a change requires additional notice or a new consent, we will provide that notice or request that consent as required.