Privacy Policy

1. Who we are

ZAKA Portugal trading as ZAKA is the controller for personal data processed through https://zaka.pt.

Legal name

ZAKA Portugal

Registered address

Not provided

NIF / VAT

Not provided

Privacy email

info@zaka.pt

DPO / privacy contact

Not applicable

2. Scope of this policy

This policy explains how we collect, use, share and protect personal data when you visit our website, create an order, contact us, receive marketing, or otherwise interact with us.

3. Personal data we collect

Depending on how you interact with us, we may collect contact details, billing and delivery details, order history, payment and fraud-prevention references, communications, marketing preferences, device/browser data, cookie identifiers and legal/compliance records.

4. How we use personal data and our lawful bases

We use personal data to process orders, take payments, deliver goods, manage returns, provide customer support, comply with accounting/tax obligations, prevent fraud, maintain website security, send permitted marketing and improve our services.

Our lawful bases may include contract performance, legal obligation, legitimate interests, consent, or protection of vital interests where applicable.

5. Payment processing

Payments are processed by Stripe and related payment partners. We do not intentionally store full card numbers on our platform. Payment providers process payment data under their own security and compliance controls.

6. Cookies and similar technologies

We may use necessary cookies for site operation, cart and checkout functionality, security and language preferences. Where configured, analytics or marketing cookies should only be used as permitted by law.

Cookie details or settings: /Policies/Cookies.

You can also manage some cookies through browser or device settings.

7. Marketing communications

We send marketing communications only where permitted by law, including where you have opted in or where soft opt-in rules apply. You can unsubscribe or object to direct marketing at any time.

8. Who we share personal data with

• Payment processors, banks, fraud-prevention services and chargeback management providers.
• Warehousing, logistics, courier, delivery, customs and returns-management providers.
• IT hosting, cloud, email, website, analytics, customer support, security and maintenance providers.
• Marketing, advertising, CRM, survey and communication providers where permitted.
• Professional advisers, insurers, auditors, lawyers, regulators, courts, tax authorities and law enforcement where required.

9. International transfers

Where personal data is transferred outside the EEA, we use appropriate safeguards where required, such as adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.

10. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including order fulfilment, warranty/returns handling, accounting, tax, legal claims, fraud prevention and customer support.

11. Security

We use reasonable technical and organisational measures designed to protect personal data. No online service can be guaranteed completely secure, but we work to protect data against unauthorised access, loss, misuse or disclosure.

12. Your GDPR rights

• Access: ask whether we process your personal data and receive a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion in certain circumstances.
• Restriction: ask us to limit processing in certain circumstances.
• Portability: receive data you provided in a structured, commonly used format where applicable.
• Objection: object to legitimate-interest processing or direct marketing.
• Withdraw consent: withdraw consent at any time where processing is based on consent.
• Complaint: lodge a complaint with CNPD or another competent supervisory authority.

13. How to exercise your rights

Contact us at info@zaka.pt. We may need to verify your identity before responding. We aim to respond within the time required by GDPR/RGPD.

14. Complaints to the supervisory authority

You can complain to Comissão Nacional de Proteção de Dados (CNPD) in Portugal or another competent EEA supervisory authority.

15. Children

Our store is not intended for children under 16. If you believe a child has provided us personal data, contact us so we can review and delete it where appropriate.

16. Automated decision-making and profiling

We do not intentionally make decisions based solely on automated processing that produce legal or similarly significant effects, unless clearly explained and permitted by law.

17. Changes to this Privacy Policy

We may update this policy from time to time. The latest version will be published on this page.