Privacy policy

(Last updated: October 2025)

1. Introduction

Herdade do Estacal, Lda. (hereinafter referred to as “Herdade do Estacal” or “HE”) values your privacy and is committed to protecting the personal data of all users and customers of the website https://shop.herdadedoestacal.pt.

This Policy transparently explains how we collect, use, store and protect your information in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Portuguese legislation.

2. Data Controller

Herdade do Estacal, Lda.
Registered office: Largo da Fonte, 3, 7940-451 Vila Ruiva, Portugal
Company tax number (NIPC): 518586626
Email: shop@herdadedoestacal.pt
Telephone: (+351) 910 579 150

Herdade do Estacal is the entity responsible for processing the personal data collected through the online store.

3. Personal Data Collected

When you use the website, we may collect the following personal data:

  • Identification data: name, address, tax identification number, email address and telephone number.
  • Billing and delivery data: shipping and billing addresses and tax identification number.
  • Payment data: securely processed through certified service providers (for example, easypay, Multibanco and MB Way).
  • Technical data: IP address, browser, device, cookies and browsing history on the website.
  • Communications: messages sent through the contact form, newsletter subscriptions or email correspondence.

4. Purposes of Processing

The data collected is used for the following purposes:

  • Processing and delivery of orders;
  • Issuing invoices and administrative management;
  • Communicating with customers regarding orders, deliveries and after-sales support;
  • Compliance with legal and tax obligations;
  • Sending newsletters and promotional communications (only with explicit consent);
  • Continuous improvement of the website and user experience.

5. Legal Bases for Processing

Personal data is processed on the following legal bases:

  • Performance of a contract (order processing, billing and delivery);
  • Compliance with a legal obligation (tax, accounting or consumer protection obligations);
  • Consent (newsletter subscriptions and optional cookies);
  • Legitimate interests (service improvement and fraud prevention).

6. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or until the data subject exercises their right to erasure, subject to specific legal obligations (for example, tax documents must be retained for 10 years).

7. Sharing Data with Third Parties

Herdade do Estacal may only share personal data with:

  • Payment and logistics service providers (CTT Expresso, easypay, Stripe, etc.);
  • Technical support providers (easypay and web-hosting partners);
  • Public authorities where required by law.

All partners fully comply with the GDPR and process personal data solely for the contractually defined purposes.

8. International Data Transfers

Some service providers are based outside the European Economic Area (EEA). In such cases, Herdade do Estacal ensures that transfers comply with the appropriate legal protection mechanisms, including the Standard Contractual Clauses approved by the European Commission.

9. Data Security

Herdade do Estacal implements appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

Online transactions are protected by SSL/TLS security protocols, and sensitive data, including payment information, is processed directly by PCI DSS-certified platforms.

10. Rights of Data Subjects

Users may exercise the following rights at any time:

  • Access to their personal data;
  • Rectification of inaccurate or outdated data;
  • Erasure (“right to be forgotten”);
  • Restriction of or objection to processing;
  • Data portability to another controller;
  • Withdrawal of consent, where applicable.

To exercise any of these rights, simply send a request to shop@herdadedoestacal.pt, clearly indicating the right you wish to exercise.

If you believe that your rights have been infringed, you may lodge a complaint with the Portuguese Data Protection Authority (CNPD) – www.cnpd.pt.

11. Cookies and Similar Technologies

The Herdade do Estacal website uses cookies to improve the user experience, analyse traffic and enable essential online-store functionality.

Users can manage their preferences through the consent banner or their browser settings. Further details are provided in the Cookie Policy available on the website.

12. Marketing Communications

Herdade do Estacal only sends marketing communications, such as newsletters and promotions, with the user’s prior and explicit consent.

Users may unsubscribe at any time by using the link included in every message sent.

13. Changes to the Privacy Policy

Herdade do Estacal may update this Policy whenever necessary. Any changes will be published on this page together with the updated revision date.

We recommend reviewing this Privacy Policy periodically.

14. Contact Details

For any questions relating to the processing of personal data, please contact:

Herdade do Estacal, Lda.
Email: shop@herdadedoestacal.pt
Telephone: (+351) 910 579 150
Address: Largo da Fonte, 3, 7940-451 Vila Ruiva, Portugal