1. Data Controller
Who is responsible for your data
The data controller for all personal information processed through this website is NADZEYA KRYSTSIA (hereafter “Synarava”, “we”, “us”).
Email: kristianadia@gmail.com
Postal address: LARGO GIRASSOL BL B1 - APT 17 LOMBOS 2775-663 CARCAVELOS
We are committed to protecting your privacy and handling your data in full compliance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.
2. Data We Collect
What information we process
We collect only the information necessary to provide our services:
Account data
Name, email address, account identifiers, order history, and saved addresses. Customer sign-in uses a one-time code; Synarava does not collect or store a customer password.
Order data
Shipping address, phone number, order contents, payment status — collected at checkout.
Payment data
Payment status and limited transaction details. Card details are entered directly with the checkout or payment provider and are not stored on Synarava servers.
Usage data
Technical information needed to operate and secure the website, such as device, browser, IP address, and request logs. Optional analytics are used only when enabled and permitted by your consent choices.
Communication data
Content of messages you send us directly via email.
3. Legal Basis
Why we are allowed to process your data
We process your data on the following legal bases under Article 6 GDPR:
- Contractual necessity — to fulfil your order and provide customer support.
- Legitimate interests — to improve the website, prevent fraud, and ensure security.
- Consent — for optional analytics cookies and marketing communications, which you may withdraw at any time.
- Legal obligation — to comply with applicable tax, accounting, and consumer-protection laws.
4. How We Use Your Data
Purposes of processing
Your information is used solely for the following purposes:
- Processing and fulfilling your orders
- Managing your account and authentication
- Sending order confirmations and shipping notifications
- Responding to your enquiries and support requests
- Preventing fraudulent transactions and maintaining site security
- Complying with legal and regulatory obligations
- Sending marketing emails only if you have explicitly opted in
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
6. Retention
How long we keep your data
We retain personal data only as long as necessary for the purposes it was collected for, or as required by law:
- Account data — retained while your account is active and afterward only as needed to close the account, resolve disputes, or meet legal obligations.
- Order data — retained for the period required by applicable accounting, tax, consumer-protection, and warranty laws.
- Technical and analytics data — retained only as long as needed for security, operation, and the applicable analytics settings.
- Support communications — 2 years from last contact.
7. Your Rights
Rights under GDPR
Under the GDPR you have the following rights, which you may exercise free of charge:
Access
Request a copy of the personal data we hold about you.
Rectification
Ask us to correct inaccurate or incomplete data.
Erasure
Request deletion of your data where there is no lawful reason to retain it.
Restriction
Ask us to limit processing of your data in certain circumstances.
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing based on legitimate interests or for direct marketing.
To exercise any right, contact us at kristianadia@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with your national supervisory authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).
9. Security
How we protect your data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These include:
- Encrypted data transmission via HTTPS (TLS 1.2+)
- Passwordless customer sign-in using one-time codes
- Customer passwords are not collected or stored by Synarava
- Payment card details are handled directly by the checkout or payment provider
- Database access restricted to application layer only
- Regular security reviews and dependency updates
10. Contact
Get in touch
For any questions about this Privacy Policy or your personal data, please contact us:
NADZEYA KRYSTSIA
Email: kristianadia@gmail.com
Postal address: LARGO GIRASSOL BL B1 - APT 17 LOMBOS 2775-663 CARCAVELOS
We do not make decisions that produce legal or similarly significant effects using solely automated processing. Information required for an order is necessary to enter into and perform the sale; without it, we may be unable to complete the purchase.
We may update this notice when our processing changes. We will identify the update date and provide an appropriate notice for material changes. Where the law requires consent for a new purpose, we will ask for it before that processing begins.