Privacy Policy

Last updated: 27 October 2026

At Strelitzia, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, purchase our products, contact us, submit a return or exchange request, or otherwise interact with our services.

We process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and Portuguese Law No. 58/2019.

1. Who We Are

This website is operated by:

Legal Company Name: STRELITZIA, LDA
Commercial Name: Strelitzia
Tax Identification Number (NIPC): 516155652
Email: geral@strelitzia.pt
Website: www.strelitzia.pt

Further company identification details, including the registered office, are available in our Legal Notice.

STRELITZIA, LDA acts as the data controller for personal data processed for its own business purposes.

For privacy-related enquiries or requests concerning your personal data, please contact us using the email address above.

2. Personal Data We Collect

Depending on how you interact with our website, we may collect the following categories of personal data.

Personal and Contact Information

• Full name

• Email address

• Telephone number

• Billing and shipping addresses

• Tax identification number, where required or provided for invoicing

Order and Transaction Information

• Products purchased

• Order details and purchase history

• Payment status and transaction references

• Shipping and delivery information

• Returns, exchanges and refund records

Return and Exchange Requests

When you submit a request through the Return Request Form or Exchange Request Form available on the respective policy pages, we may collect:

• Order number and contact information

• Products you wish to return or exchange

• Requested replacement size or colour, where applicable

• Information about the reason for the request, where provided

• Photographs or additional details voluntarily submitted to support your request

This information is used to identify the relevant order, manage the request, communicate with customers and arrange the applicable shipping, refund or exchange procedures.

Providing a reason is not required when exercising a statutory right of withdrawal.

Payment Information

Payments are processed through the payment methods available at checkout.

Depending on the payment services enabled, these may include credit and debit cards, MB WAY, Multibanco, Klarna, Revolut Pay and Bizum.

The payment methods actually available depend on the customer's location, order eligibility and the payment services enabled in our store.

Payment providers may collect and process personal information necessary to authorise transactions, verify eligibility, prevent fraud and complete payments.

Where instalment or deferred payment services are available, the relevant provider may perform additional eligibility or credit assessments under its own privacy terms.

Strelitzia does not generally receive or store complete payment card details when transactions are handled by external payment processors.

Technical and Usage Information

• IP address

• Browser and device information

• Website navigation and interactions

• Cookie identifiers and related preferences

• Diagnostic and security information

Communications

• Customer service enquiries

• Messages submitted through contact forms

• Complaints and requests

• Reviews or other content voluntarily submitted

We aim to collect only the information reasonably necessary for the purposes described in this policy.

3. How We Use Your Personal Data

We process personal data for the following purposes.

Order Processing and Fulfilment

To manage purchases, confirm payments, process orders, arrange deliveries, provide invoices and handle returns, exchanges or refunds.

Customer Support

To respond to enquiries, manage complaints and provide assistance relating to our products and services.

Returns and Exchanges

To receive and manage requests submitted through our Return Request Form and Exchange Request Form, verify order information, communicate shipping instructions, arrange return labels, process eligible refunds and organise replacement shipments.

Shipping and Delivery

To share the information necessary for delivery with our shipping and logistics providers, including Via Direta, where used for the relevant order.

This may include the customer's name, delivery address, telephone number, order reference and other information necessary to arrange and track the shipment.

Website Operation and Security

To operate and maintain our online store, prevent fraud, detect misuse and protect our services.

Legal and Accounting Obligations

To comply with applicable invoicing, taxation, accounting, consumer protection and other legal requirements.

Marketing Communications

To send promotional emails, product updates and marketing communications where permitted by applicable law.

Where consent is required, we will request it before sending such communications.

Customers may withdraw their consent or unsubscribe at any time.

Website Analytics and Improvement

To understand website performance, improve navigation, measure shopping activity and improve our customers' experience, subject to applicable legal requirements concerning cookies and tracking technologies.

4. Legal Bases for Processing

Where the GDPR applies, we rely on the following legal bases, as appropriate.

Performance of a Contract

Processing personal data necessary to complete purchases, deliver orders, manage contractual services, facilitate eligible returns and exchanges, and provide requested services.

Compliance with Legal Obligations

Processing required for tax, accounting, invoicing, consumer protection, statutory withdrawal, product conformity and other applicable legal requirements.

Legitimate Interests

Processing necessary for proportionate business purposes, such as maintaining website security, preventing fraud, responding to certain enquiries and improving internal operations, where these interests are not overridden by individuals' rights.

Consent

Processing based on your consent where required, including certain marketing communications and non-essential cookies or tracking technologies.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.

The legal basis used for each activity depends on its specific purpose and circumstances.

5. Shopify, Via Direta and Other Service Providers

Our online store is hosted by Shopify, which provides the e-commerce infrastructure used to operate our website, manage customer orders and support online transactions.

Depending on the services enabled on our website, personal data may be shared with the following providers.

Shopify

Shopify provides the technology used to operate our online store, including checkout, order management, customer accounts, store analytics and related e-commerce functionality.

Shopify may also process certain consumer information for its own purposes in connection with services it provides directly to consumers, as described in its privacy notices.

Shipping and Logistics — Via Direta

Strelitzia uses Via Direta for shipping and delivery operations.

To arrange deliveries, relevant customer information may be shared with Via Direta and, where applicable, other carriers or service providers involved in the delivery process.

This information may include delivery details, contact information and shipment references.

Such data is used to organise deliveries, provide shipment updates, manage delivery issues and support related customer service activities.

Payment Service Providers

Depending on availability and configuration, payment service providers may include those supporting credit or debit cards, MB WAY, Multibanco, Klarna, Revolut Pay and Bizum.

These providers process information necessary to authorise payments, verify transactions, prevent fraud and provide their payment services.

Some payment providers may act as independent data controllers for certain processing activities, as described in their respective privacy notices.

Google Analytics 4

Where enabled, Google Analytics 4, provided by Google, may help us understand website traffic, visitor interactions, shopping behaviour and e-commerce performance.

Depending on its configuration and the permissions provided by visitors, Google Analytics may process device information, online identifiers and website interaction or purchase-related events.

Meta Platforms

Where enabled, Meta advertising technologies, including the Meta Pixel, may help us measure advertising performance, analyse conversions and optimise advertising campaigns.

Depending on their configuration and the permissions provided by visitors, these technologies may process online identifiers, device information and website interaction or purchase-related events.

Customer Service and Form Providers

Information submitted through our contact, return and exchange forms may be processed by the technical services used to operate those forms, transmit submissions and manage customer requests.

Email Marketing Providers

Where enabled, email marketing providers may process information necessary to manage newsletter subscriptions, promotional communications and unsubscribe preferences.

Other Service Providers

We may share relevant information with IT and technical support providers, accounting professionals, professional advisers and competent authorities where necessary and legally permitted or required.

We share personal data only where an appropriate legal basis exists and to the extent necessary for the relevant purpose.

Non-essential analytics and advertising technologies requiring consent will be activated only after the appropriate consent has been obtained, in accordance with applicable law.

Further information about Shopify's processing of consumer personal data is available at:

https://www.shopify.com/legal/privacy/consumers

For information about cookies and advertising technologies, please refer to Section 9 — Cookies and Tracking Technologies of this Privacy Policy.

6. International Data Transfers

As Strelitzia operates an online store using technology and service providers that may operate internationally, personal data may be processed or accessed outside Portugal or the European Economic Area.

Where the GDPR applies, transfers of personal data to countries outside the European Economic Area will be carried out in accordance with applicable data protection requirements.

Where necessary, appropriate safeguards may include adequacy decisions, standard contractual clauses or other legally recognised transfer mechanisms.

Further information about applicable safeguards may be requested using the contact details provided in this policy.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with applicable legal obligations and protect our legitimate legal interests.

Retention periods depend on the nature of the information and the relevant processing activity.

Order, Invoicing and Accounting Records

Records and supporting documents subject to Portuguese tax and accounting retention requirements are generally retained for 10 calendar years following the relevant year, unless a different period is required by applicable law.

Customer Service, Returns and Exchanges

Personal data relating to customer enquiries, returns, exchanges, refunds and complaints is retained for the period necessary to manage the request and comply with applicable consumer protection obligations or legal limitation periods.

Marketing Communications

Personal data used for marketing purposes is retained while a valid legal basis exists, subject to applicable retention requirements.

Customers may withdraw consent or unsubscribe at any time.

Technical and Security Information

Technical logs and security-related information are retained for periods proportionate to the relevant operational and security purposes.

When personal data is no longer required, it will be deleted or anonymised, unless further retention is legally required.

8. Your Data Protection Rights

Subject to applicable law, you may have the right to:

• Request access to your personal data.

• Request correction of inaccurate or incomplete information.

• Request deletion of your personal data.

• Request restriction of certain processing activities.

• Object to processing based on legitimate interests, including direct marketing.

• Request data portability where legally applicable.

• Withdraw consent where processing is based on consent.

• Lodge a complaint with the relevant data protection supervisory authority.

To exercise your rights, please contact:

Email: geral@strelitzia.pt

We may request additional information where reasonably necessary to verify your identity before fulfilling a request.

Requests will be handled within the deadlines established by applicable legislation.

For individuals in Portugal, the relevant supervisory authority is:

Comissão Nacional de Proteção de Dados (CNPD)

https://www.cnpd.pt/

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to support essential website functions and, where enabled, analyse website performance, remember preferences and measure advertising effectiveness.

Cookies are small text files stored on your device when you visit a website. Similar technologies may also be used to collect information about website interactions and user preferences.

The technologies used on our website may fall into the following categories.

Essential Cookies

These cookies are necessary for the website to function correctly.

They support essential operations such as:

• Shopping cart functionality

• Checkout and order processing

• Website security

• Session management

• Authentication and essential website preferences

Strictly necessary cookies may be used without consent where permitted by applicable law.

Analytics Cookies

Where enabled, analytics cookies help us understand how visitors use our website and identify opportunities to improve performance.

These may include technologies provided by Google Analytics 4 and Shopify analytics services.

Information collected may include website visits, browsing interactions, device information and shopping-related events.

Analytics cookies and technologies requiring consent will be used only after the relevant consent has been obtained.

Marketing and Advertising Cookies

Where enabled, advertising cookies and related technologies help us measure the effectiveness of marketing campaigns and understand interactions with advertisements.

These may include the Meta Pixel and other advertising measurement technologies.

Depending on their configuration, these tools may process online identifiers, browsing activity and purchase-related events.

Marketing cookies and technologies requiring consent will be used only after the relevant consent has been obtained.

Personalisation and Preference Cookies

These cookies may be used to remember certain website settings and provide a more personalised browsing experience.

Where consent is required, these technologies will be activated only after the visitor has provided the appropriate consent.

Cookie Consent and Preferences

When visiting our website, you may be presented with a cookie consent banner that allows you to:

• Accept all cookies.

• Decline non-essential cookies.

• Manage your cookie preferences by category.

Essential cookies required for website operation may remain active where permitted by law.

Your choices will be applied in accordance with the applicable consent management settings and legal requirements.

Managing or Withdrawing Consent

You may change or withdraw your consent at any time through the cookie privacy settings available on our website.

You may also manage or delete cookies through your browser settings. Please note that disabling certain essential cookies may affect website functionality.

Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.

Third-Party Cookies

Certain cookies and tracking technologies may be provided by third parties, including Shopify, Google and Meta, depending on the services enabled.

These providers may process information in accordance with their own privacy notices and applicable data protection requirements.

For further information, please consult:

Shopify: https://www.shopify.com/legal/privacy/consumers

Google: https://policies.google.com/privacy

Meta: https://www.facebook.com/privacy/policy/

10. Marketing Communications

Where legally permitted, Strelitzia may contact customers with news, promotions and information about products or services.

Where consent is required, marketing communications will be sent only after the relevant consent has been obtained.

You may unsubscribe from marketing emails by using the unsubscribe link included in such messages or by contacting:

Email: geral@strelitzia.pt

Withdrawing marketing consent does not affect communications necessary to process orders, provide customer support or comply with legal obligations.

11. Customer Reviews and User-Generated Content

If you voluntarily submit a product review, photograph or other content to Strelitzia, we may process the information necessary to receive, evaluate and manage that submission.

Publishing or reusing identifiable customer content for promotional purposes will be subject to an appropriate legal basis and any permissions required by applicable law.

Tagging Strelitzia on social media does not, by itself, constitute unrestricted permission for us to reuse your content in advertising or marketing campaigns.

12. Data Security

Strelitzia takes appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, loss, disclosure or misuse.

These measures may include access restrictions, secure communications and the use of service providers offering appropriate security safeguards.

Although reasonable precautions are taken, no electronic storage or transmission system can be guaranteed to be completely secure.

13. Children's Privacy

Our website is intended for customers who can lawfully enter into purchases or who act with appropriate authorisation.

We do not intentionally collect personal data from children for purposes that require parental or guardian authorisation without the required legal basis.

If you believe that personal data relating to a child has been provided inappropriately, please contact us.

14. Third-Party Websites

Our website may contain links to external websites and services.

These websites may operate independently and have their own privacy policies.

We encourage users to review the privacy information provided by third-party websites before sharing personal information.

15. Changes to This Privacy Policy

Strelitzia may update this Privacy Policy to reflect changes in legal requirements, business practices, technologies or services.

The latest version will be available on this website, together with the date of its most recent update.

Where required by law, we will provide additional notification or obtain consent before implementing relevant changes.

16. Contact Information

For questions about this Privacy Policy or the processing of your personal data, please contact:

STRELITZIA, LDA

Email: geral@strelitzia.pt
Website: www.strelitzia.pt

Further company identification details are available in our Legal Notice.