Privacy Policy
Exiniac Spices (hereinafter “we,” “us,” or “Company”) respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and applicable national legislation (Law no. 58/2019, of August 8).
This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website www.exiniac.com , make purchases, or interact with us.
1. Data Controller Exiniac/Filipe Coelho Tax ID: 218147279
Address: Rua Major Neutel De Abreu nave 1 | complexo Empresarial Sonuma | 3260-427 Figueiró Dos Vinhos
Email: info@exiniac.com
2. Personal data we collect We collect the following types of data:
-
Identification and contact data: name, email address, delivery/billing address, telephone number (when provided during registration, purchase, or in the contact form).
-
Payment data: card information or Multibanco reference (processed directly by our secure payment providers – we do not store full card details).
-
Order data: purchase history, products purchased, value, date.
-
Technical and browsing data: IP address, browser type, device, pages visited, time spent, cookies, and similar technologies (see our Cookie Policy).
-
Communication data: messages sent via email, WhatsApp, or contact form.
3. How we collect your data
-
Directly from you: when you create an account, make a purchase, subscribe to a newsletter, contact us, or fill out forms.
-
Automatically: through cookies, pixels, and tracking technologies on the website (see Cookie Policy).
-
From third parties: payment providers (e.g., Stripe, MB WAY), carriers (e.g., CTT), analytical tools (e.g., Google Analytics).
4. Purposes of processing and legal basis We process your data for:
-
Contract performance (Article 6(1)(b) GDPR): processing orders, shipping products, managing payments and deliveries.
-
Legal obligation (Article 6(1)(c) GDPR): issuing invoices, fulfilling tax and food safety obligations (ASAE).
-
Legitimate interest (Article 6(1)(f) GDPR): improving the website, preventing fraud, sending transactional communications (e.g., order confirmation), anonymous statistical analysis.
-
Consent (Article 6(1)(a) GDPR): newsletter/direct marketing (you can withdraw at any time).
5. Sharing data with third parties We share data only when necessary:
-
Carriers (CTT, Chronopost, etc.) – for delivery.
-
Payment processors (Stripe, PayPal, Ifthenpay) – for secure transactions.
-
Analytics/marketing tools (Google Analytics, Meta Pixel) – anonymized data or with consent.
-
Public authorities – when required by law (tax authorities, ASAE, judicial authorities).
We do not sell your personal data to third parties for marketing purposes.
6. International transfers. Some providers (e.g., Google, Stripe) are located outside the EU. In these situations, we ensure standard contractual clauses approved by the European Commission or other appropriate mechanisms to ensure equivalent protection (Article 46 GDPR).
7. Retention period We retain data only for the necessary time:
-
Order/billing data: 10 years (tax obligation).
-
Account/marketing data: until consent is revoked or 3 years of inactivity.
-
Technical data (logs): 6–12 months.
8. Your rights (Articles 15 to 22 GDPR):
-
Access, rectification, erasure ("right to be forgotten").
-
Restriction of processing, objection, portability.
-
Withdraw consent at any time (without affecting prior processing).
-
Lodge a complaint with the CNPD (National Data Protection Commission): www.cnpd.pt.
To exercise any right, contact us by email: info@exiniac.com
9. Data security. We implement appropriate technical and organizational measures (encryption, firewalls, restricted access) to protect your data against loss, misuse, or unauthorized access.
10. Cookies and similar technologies. We use essential cookies for the website's operation and optional cookies for analysis and marketing. Please consult our Cookie Policy [link to cookie page].
11. Changes to the Policy. We may update this policy. We will notify significant changes by email or on the website. We recommend reviewing it periodically.
Data Protection Officer (DPO) Contact
info@exiniac.com