01. Personal data collected
Personal data collected
Depending on how Synarava Shop is used, the following may be processed:
Contact and delivery data, such as name, email address, telephone number, billing address and delivery address.
Order and payment data, such as products purchased, order history, returns, refunds and delivery information. Payments are processed through payment providers, and Synarava Shop does not store complete payment card details.
Account data, such as account information and preferences.
Communications, including information provided when contacting Synarava Shop.
Website and device data, such as IP address, browser and device information and interactions with the website.
Privacy and marketing preferences, including cookie and consent choices.
Providing the data needed to place and deliver an order is necessary: without it the order cannot be completed.
02. How personal data is used
How personal data is used
Personal data is processed to:
provide and manage customer accounts;
process orders, payments, delivery, returns and refunds;
send order and delivery messages;
respond to questions, requests and complaints;
prevent fraud and protect the security of the shop;
meet legal, tax and accounting obligations;
establish, exercise or defend legal claims;
provide analytics, personalisation or marketing where permitted by law and, where required, with consent.
Depending on the purpose, the legal basis is one or more of the following:
Contract, where processing is necessary to take steps before a purchase or fulfil an order.
Legal obligation, where processing is required by applicable law.
Legitimate interests, where necessary for fraud prevention, security, customer service or the protection of legal rights, provided those interests are not overridden by the rights and freedoms of the individual.
Consent, where consent is required, including for certain cookies, analytics, personalisation or marketing. Consent can be withdrawn at any time.
03. Shopify and data sharing
Shopify and data sharing
Synarava Shop is hosted by Shopify. Shopify collects and processes personal data to provide the ecommerce platform and related services, and may process certain personal data as an independent controller for its Enhanced Services where enabled. Information about activity on Synarava Shop may be shared with Shopify and service providers, including providers located in other countries, to provide these services.
Personal data may also be shared, where necessary, with payment providers, delivery and logistics providers, technology and security providers, professional advisers and public authorities.
Where required, appropriate safeguards or other lawful mechanisms are used for transfers of personal data outside the European Economic Area.
For more information about Shopify’s processing of personal data and the available privacy choices, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers
Shopify Privacy Portal:
https://privacy.shopify.com/
04. Retention
Retention
Personal data is kept only for as long as necessary for the purposes for which it was collected and to meet applicable legal, tax, accounting and regulatory requirements.
Retention periods depend on the type of data, the purpose of processing and applicable legal requirements. When personal data is no longer required, it is deleted or anonymised unless continued retention is required or permitted by law.
05. Your rights
Your rights
Subject to applicable data protection law, the following rights may apply:
access to personal data;
correction of inaccurate or incomplete personal data;
deletion of personal data;
restriction of processing;
objection to certain processing;
data portability, where applicable;
withdrawal of consent, where processing is based on consent;
a complaint to a competent supervisory authority.
In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).
To exercise rights regarding data controlled by Synarava Shop, a message to care@synarava.com is welcome.
For data processed independently by Shopify for its Enhanced Services, applicable rights can also be exercised through the Shopify Privacy Portal.
06. Cookies
Cookies
Synarava Shop uses cookies and similar technologies necessary for the operation of the website.
Optional cookies and similar technologies are used only where permitted by law and, where required, with consent.
Optional cookies can be managed through Cookie Settings.
07. Security
Security
Reasonable technical and organisational measures are used to protect personal data against accidental or unlawful loss, alteration, disclosure or access.
08. Data controller and contact
Data controller and contact
The data controller is Synarava Shop. The identification of the seller and full contact details are available in the Terms & Conditions.
Questions and requests about personal data can be sent to care@synarava.com.