Privacy Policy
Last updated:
This Privacy Policy explains how MARIA AMÉLIA GERARDO MONTEIRO ("we", "us", "our") collects, uses, stores, and protects personal data when you use the website at mariaameliagerardomonteiro.pt. It is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
MARIA AMÉLIA GERARDO MONTEIRO is the data controller. Registered address: Travessa St. Mónica Tavares, 3, Abrantes, 5585-321, Portugal. Legal form: Natural person (self-employed). Email: [email protected].
2. Information we collect
We collect the following categories of personal data:
- Order form: full name and telephone number, submitted when you place an order request.
- Contact form: full name, email address, and the content of your message.
- Automatically collected: IP address, browser type, pages visited, and referring URL - collected via server logs and, where consent is given, via analytics cookies.
- Marketing data: only where you have given explicit consent via the cookie banner.
3. How we use your information
- To process and confirm your order by telephone and arrange delivery.
- To respond to enquiries submitted via the contact form.
- To improve the performance and usability of this website (analytics, consent-dependent).
- To serve relevant advertising (marketing, consent-dependent).
4. Legal basis for processing (UK GDPR Article 6)
- Contract: processing your name and phone number is necessary to perform the sales contract (confirming and delivering your order).
- Legitimate interests: server logs for security and debugging.
- Consent: analytics and marketing cookies, where you have opted in via the cookie banner.
5. Sharing and disclosure
We do not sell your personal data. We may share data with:
- Courier and delivery partners, solely to fulfil your order.
- Google LLC - analytics and advertising services (see Section 10), subject to your cookie consent choices.
- Competent authorities, where required by law.
6. Data protection and security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS. Order form data is transmitted securely and access is restricted to authorised personnel.
7. Your rights under UK GDPR
You have the right to: access your personal data; request correction of inaccurate data; request erasure ("right to be forgotten") where there is no overriding legal basis for retention; object to processing based on legitimate interests; restrict processing in certain circumstances; data portability (where processing is based on consent or contract and carried out by automated means).
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) - the UK's supervisory authority for data protection. Website: ico.org.uk. Telephone: 0303 123 1113.
To exercise your rights, contact us at [email protected].
8. International transfers
Where data is transferred outside the UK (e.g. to Google's servers), we rely on adequacy decisions or Standard Contractual Clauses as safeguards under UK GDPR.
9. Retention periods
Order data is retained for up to 7 years for legal and accounting purposes. Contact form data is retained for up to 2 years or until you request deletion. Analytics data is retained in accordance with the applicable Google Analytics settings.
10. Third-party services
Where you have given consent, we use the following third-party services:
- Google Analytics: collects usage data via cookies (_ga, _gid, _gat). Data is processed by Google LLC under their privacy policy.
- Google Ads Conversion Tracking & Remarketing: uses cookies (_gcl_au, _gcl_aw) to measure ad performance and serve relevant advertising. Subject to ad_storage, ad_user_data, and ad_personalization consent signals, managed via Consent Mode v2.
- Google Maps API: used to display a map on our contact page. Google may collect IP address data when the map iframe loads.
All third-party services are disabled by default until you give consent via the cookie banner on this site.
11. Cookies
We use cookies as described in our Cookie Policy. You can manage your preferences at any time via the cookie settings link in the footer.
12. Children's privacy
This website is intended for adults aged 18 and over. We do not knowingly collect personal data from children under the age of 13. If you believe a child has submitted data to us, please contact us and we will delete it promptly.
13. Policy updates
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the website following an update constitutes acceptance of the revised policy.
14. Contact
MARIA AMÉLIA GERARDO MONTEIRO · Travessa St. Mónica Tavares, 3, Abrantes, 5585-321, Portugal · [email protected]