Privacy policy

This is a translation for convenience. If there is any difference, the Portuguese version prevails.

Data controller

acende.me; full details of the controller are under Legal information. For any question about personal data: ajuda@acende.me.

What data we process and why

• The photo: only to make the ordered piece. It is uploaded to our server when payment opens, so we can print it. We don't use it in advertising or show it to anyone without written permission.
• Name, email, address and, if you give it, phone: to fulfil the order, send status emails and deliver the piece. A few days after delivery, a single email with care tips is sent; the email address is not used for advertising.
• Order and invoice data: to meet tax obligations.

The legal basis is performance of the purchase contract (Article 6(1)(b) GDPR) and, for invoicing, compliance with legal obligations (Article 6(1)(c)).

How long

• Photo: automatically deleted 30 days after the order is dispatched, delivered or cancelled. If a payment is started but not completed, the photo is deleted after 8 days.
• Contact details and address: while the order and the guarantee are ongoing.
• Invoices: for the period required by tax law.

Where we store data

Orders (name, email, phone, address and parts) and photos are stored with Netlify (Netlify Blobs), on servers in the European Union or the United States, with the European Commission's Standard Contractual Clauses when data leaves the European Economic Area. Only we have access, protected by a password.

Who we share it with

Only with the services needed for the order, which process data on our behalf:

• Netlify (site hosting and storage of orders and photos)
• Stripe (payments; we never see card details)
• an email delivery service
• CTT (name, address and phone, for delivery)
• certified invoicing software

Some of these services may process data outside the European Union, with the safeguards set out in the GDPR (adequacy decisions or Standard Contractual Clauses).

Cookies and browser storage

The site stores your current choices so they can be restored if payment is cancelled. When measurement is available and you agree to it, we store a random identifier in the tab to count the steps of the visit and distinguish links marked as coming from Facebook. Measurement records contain no photo, contact or payment details.

Meta advertising, only with separate permission

When available and accepted, this option shares visits, checkout starts and confirmed purchases, purchase value and currency, IP address, browser information, and random or ad-click identifiers with Meta to attribute results and improve Facebook and Instagram ads. Events are sent by our server through the Conversions API. We do not send photos, names, emails, phone numbers, addresses, card data, payment secrets or private order links.

Advertising permission is independent from internal measurement and may be declined without affecting a purchase, or withdrawn through “Measurement preferences” in the shop footer. Withdrawal stops future sharing associated with that browser identifier; it does not recall events already received by Meta. Attribution contexts on our server expire after 30 days and are removed during the next daily cleanup. Meta may process data outside the EEA according to its privacy policy.

Your rights

You can ask by email to access, correct, delete, restrict or port your data, or object to its processing. If your rights aren't respected, you can complain to the CNPD (Portuguese Data Protection Authority).