Effective Date: 30-11-2024
Last Updated: 30-11-2024

At Riches Abode, we value and respect your privacy. This Privacy Policy outlines how we collect, use, store, and protect your personal data when you visit our website (www.richesabode.com) or interact with our services. We are committed to handling your personal information responsibly and transparently, in compliance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), Portuguese laws, and global privacy standards.

By using our Website, you confirm that you have read and understood this Privacy Policy. If you do not agree with its terms, please refrain from using our services.

1. Data Controller

The data controller responsible for processing your personal data is:
Fantasia Secular, Lda.
VAT Number: 517 408 139
Address: Rua Palmira Pedro, Lote 2B, 3030-770, Portugal
Email: support@richesabode.com

We are responsible for ensuring that your personal data is processed in accordance with applicable laws.

2. Personal Data We Collect

We collect the following categories of personal data to provide our services effectively and comply with legal obligations:

2.1. Data You Provide

• Contact Information: Name, email address, phone number, billing address, and shipping address.
• Account Information: Username and password (if you create an account).
• Payment Information: Credit/debit card details and transaction history (processed securely by third-party providers; we do not store card details).
• Order Details: Products purchased, delivery preferences, and any communication related to your order.

2.2. Data We Collect Automatically

• Technical Data: IP address, browser type, operating system, and device type.
• Usage Data: Pages visited, time spent on the Website, and interaction with features (via cookies and similar technologies).
• Geolocation Data: General location derived from your IP address.

2.3. Data From Third Parties

• Payment Providers: Information related to payment confirmation and fraud prevention.
• Shipping Providers: Delivery status and logistics updates.

3. How We Use Your Personal Data

We process your personal data for the following purposes:

3.1. To Fulfill Our Contractual Obligations

• Process and deliver your orders.
• Handle returns, refunds, and exchanges.
• Communicate order confirmations and shipping updates.

3.2. To Improve Your Experience

• Analyze website usage to enhance functionality and design.
• Offer personalized content and product recommendations.

3.3. For Marketing (With Your Consent)

• Send promotional offers, newsletters, and updates tailored to your interests. You can opt out of these communications at any time.

3.4. To Comply With Legal Obligations

• Retain transaction records for tax, accounting, and compliance purposes.
• Prevent fraudulent activities and ensure security.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:
• Contractual Necessity: To fulfill orders and provide customer support.
• Legitimate Interests: To improve our services and ensure security.
• Legal Compliance: To meet regulatory requirements under Portuguese and EU law.
• Consent: For optional activities like marketing, which you can withdraw at any time.

5. Sharing Your Data

We do not sell or rent your personal data. However, we may share it with trusted third parties when necessary to deliver our services:

5.1. Service Providers

• Payment Processors: Shopify Payments, PayPal, Klarna.
• Shipping Companies: To facilitate delivery and tracking.
• IT and Analytics Providers: For website maintenance and performance analysis.

5.2. Legal and Regulatory Authorities

We may disclose your personal data if required by law or to protect our rights, property, or safety.

5.3. Business Transfers

In the event of a merger, acquisition, or sale, your data may be transferred to the new entity, subject to the same privacy safeguards.

6. International Data Transfers

If you access our Website from outside the European Economic Area (EEA), your data may be transferred to countries with differing privacy protections. When such transfers occur, we ensure your data is protected through: • Standard Contractual Clauses (SCCs) approved by the European Commission. • Other legally recognized safeguards.

7. Retention of Data

We retain your personal data only as long as necessary for the purposes described in this policy or to comply with legal requirements:
• Order Information: Retained for 7 years for tax and accounting compliance.
• Marketing Data: Retained until you withdraw your consent.
• Inactive Accounts: Personal data is deleted after 2 years of inactivity unless required for legal purposes.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:
• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data (“Right to be Forgotten”).
• Restriction: Request limitation of data processing in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to data processing for direct marketing or legitimate interests.
• Withdraw Consent: Revoke consent for processing activities based on your permission.To exercise any of these rights, contact us at support@richesabode.com. We will respond within 30 days, as required by law.

9. Cookies

Our Website uses cookies to enhance user experience, track performance, and deliver personalized content. These cookies are provided through the Shopify platform (https://www.shopify.com/legal/cookies) and include:
• Essential Cookies: Necessary for basic website functionality.
• Analytics Cookies: Track user behavior to improve our services.
• Marketing Cookies: Deliver tailored advertisements and promotions.You can manage or disable cookies through your browser settings. Please note that disabling cookies may affect the Website’s functionality. 

10. Security Measures

We take reasonable steps to protect your data against unauthorized access, alteration, disclosure, or destruction. Measures include:
• SSL Encryption: Secures data transmitted to and from our Website.
• Access Control: Limits data access to authorized personnel.
• Regular Audits: Ensures compliance with GDPR and industry standards.Despite these measures, no system is entirely secure. By using our Website, you acknowledge and accept the inherent risks of online data transmission.

11. Updates to This Privacy Policy

We may revise this Privacy Policy to reflect changes in our practices or applicable laws. Any updates will be posted on this page with the revised “Effective Date.” Continued use of our Website constitutes acceptance of these changes.

12. Contact Information

For questions, concerns, or complaints regarding this Privacy Policy or your personal data, please contact us:
• Email: support@richesabode.com
• Address: Rua Palmira Pedro, Lote 2B, 3030-770, Portugal

If you believe your rights have been violated, you have the right to file a complaint with your local data protection authority. In Portugal, contact the Comissão Nacional de Proteção de Dados (CNPD) at www.cnpd.pt.