Privacy Policy

1. Who We Are

Cordeiro Viegas, Sociedade Unipessoal Lda (“we”, “us”), registered in Portugal, is the data controller for personal data collected through cordeirovinos.com. You can contact us regarding data privacy via email at comercial@cordeirovinos.com.

2. What Data We Collect

We process the following structural data arrays to fulfill our contractual commitments:

• Identification and contact data: Name, email address, phone number, billing address, and delivery address.
• Order data: Products purchased, order value, transaction timestamps, and order history.
• Payment data: Processed securely and directly by our payment gateway processor, Stripe; we do not store full payment card numbers or security credentials on our servers.
• Trade/HORECA account data: Business name, tax registration number (VAT/NIF), and official business documentation submitted for wholesale account verification.
• Technical data: IP address, browser configuration, page interactions, and device metadata collected via cookies and similar web analytics mechanisms (see Section 6).

3. Why We Process Your Data and Legal Basis (Article 6 GDPR)

• Order processing and account management: Necessary for the performance of a contract to fulfill orders and manage user accounts.
• Compliance and accounting: Legal obligations under Portuguese tax, accounting, and international customs laws.
• Marketing communications: Based on your explicit consent, which you may withdraw at any time.
• Analytics and advertising measurement: Operating Google Analytics 4 and Meta Pixel based strictly on prior consent provided via our cookie management banner.
• Fraud prevention and age verification: Legitimate interest and legal compliance to ensure customers meet minimum legal drinking age requirements.

4. Who We Share Your Data With

We share data strictly on a need-to-know basis with trusted third-party providers:

• Stripe: For secure payment processing and currency conversions at checkout.
• Delivery and logistics partners: For order dispatch, shipping, and customs handling.
• Analytics and Advertising: Google (Google Analytics 4) and Meta (Meta Pixel), active only after explicit consent given via our cookie banner.
• Tax and regulatory authorities: When legally mandatory under European Union or international regulations.

We do not sell, rent, or trade your personal data to third parties under any circumstances.

5. International Transfers

Certain service providers (such as Google, Meta, and Stripe) may store or process data outside the European Economic Area (EEA). Where international transfers occur, we ensure compliance through European Commission adequacy decisions or standard contractual clauses (SCCs) in accordance with Articles 44–49 of the GDPR.

6. Cookies

We utilize essential cookies to enable fundamental site functions and shopping cart persistence. Non-essential cookies—such as Google Analytics 4 and Meta Pixel—are only loaded after you give prior explicit consent through our cookie consent banner. You can adjust or withdraw your cookie preferences at any time using the link in the website footer.

7. Data Retention

We retain transactional, order, and invoicing records for the statutory period mandated by Portuguese tax law (currently 10 years for accounting audits). Account details and marketing consent data are retained for as long as your account remains active or until you request account deletion or withdraw consent.

8. Your Rights (Articles 15–22 GDPR)

Under the General Data Protection Regulation, you hold the right to access, rectify, port, erase, or restrict the processing of your personal data. To exercise any of these rights, please contact our privacy compliance team at comercial@cordeirovinos.com. You also maintain the statutory right to file a formal complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados - CNPD) at www.cnpd.pt.

9. Children and Age Limits

Our Site sells alcoholic beverages and is not directed at or intended for individuals under the legal minimum drinking age in their respective country of residence (e.g., 18 in the EU/UK, 20 in Japan). We do not knowingly collect or process personal data from underage individuals.

10. Changes to This Policy

We reserve the right to amend this Privacy Policy periodically. Any updates will take effect immediately upon publication on cordeirovinos.com.