Cork Matters
Shop
Home
About us
News
Cork
Your Cork Project
Downloads
Contact

Privacy Policy

This Privacy Policy describes how Cork Matters ("we", "us", or "our") collects, uses, and shares your personal information when you visit our website or make a purchase from us. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable laws in Portugal and the EU. This policy should be read in conjunction with our Terms and Conditions and Cookies Policy.

Cork Matters (CARLOS SANTOS MENDONÇA, UNIPESSOAL LDA) is the data controller for your personal data. Our contact details are: Rua Anselmo Braancamp 86, 4000-078 Porto, Portugal. Email: corkmatters.online@gmail.com. Taxpayer number: 510507603. Registration number: 510507603.

Personal Data We Collect

We collect the following types of personal data:

  • Identity and Contact Data: Name, email address, phone number, billing and shipping address.
  • Transaction Data: Details of purchases, including items ordered and payment method (but not full payment card details, as these are handled by Shopify).
  • Technical Data: IP address, browser type, device information, and usage data collected via cookies and similar technologies (see our Cookies Policy).
  • Marketing and Communications Data: Your preferences for receiving marketing from us and your communication preferences.
  • Analytics Data: With your consent, interaction data collected via Google Analytics, such as pages viewed, add-to-cart events, and purchase events.

We do not collect sensitive personal data unless required for specific purposes, and only with your explicit consent.

How We Collect Your Data

We collect data directly from you when you:

  • Create an account or place an order.
  • Subscribe to our newsletter or contact us via forms.
  • Interact with our site (e.g., adding items to cart).

With your consent, we also collect data automatically via cookies, Google Analytics, Google Ads and the Meta Pixel (see Cookies Policy for details). Payment data is collected and processed securely by Shopify during checkout.

Purposes and Legal Bases for Processing

We process your data for the following purposes:

  • To fulfill your orders: Process purchases, deliver products, and provide customer support. Legal basis: Performance of a contract.
  • To manage payments: We use Shopify for payment processing. Shopify handles your payment card details securely. Legal basis: Performance of a contract.
  • To improve our website: Analyze usage via Google Analytics to enhance user experience, if you consent. Legal basis: Consent.
  • For marketing: Send promotional emails or display targeted ads via Google Ads and Meta (Facebook and Instagram), if you consent. Legal basis: Consent.
  • To comply with legal obligations: Such as tax reporting or responding to authorities. Legal basis: Legal obligation.
  • To prevent fraud: Monitor transactions for security. Legal basis: Legitimate interests (protecting our business).

Sharing Your Data

We share your data with third parties only when necessary:

  • Shopify: For payment processing and order fulfillment. Shopify's privacy policy applies: https://www.shopify.com/legal/privacy.
  • Google (Analytics and Ads) and Meta (Facebook and Instagram): For analytics and advertising, if you consent. See Google's Privacy Policy: https://policies.google.com/privacy and Meta's Privacy Policy: https://www.facebook.com/privacy/policy.
  • Shipping Providers: Such as CTT / MBE Ship to deliver your orders.
  • Other Service Providers: IT support, email services, or legal advisors, all under GDPR-compliant agreements.
  • Authorities: If required by law.

We do not sell your data. International transfers (e.g., to Shopify in Canada) are protected by adequacy decisions or standard contractual clauses.

Data Retention

We retain your data only as long as necessary:

  • Order data: Up to 10 years for tax and accounting purposes.
  • Account data: Until you request deletion or after 2 years of inactivity.
  • Analytics data: As per Google's retention policies (typically 14-26 months).
  • Marketing data: Until you withdraw consent.

Data is securely deleted or anonymized when no longer needed.

Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Access: Request a copy of your data.
  • Rectification: Correct inaccurate data.
  • Erasure: Request deletion (subject to legal obligations).
  • Restriction: Limit processing in certain cases.
  • Portability: Receive your data in a transferable format.
  • Objection: Object to processing based on legitimate interests or for marketing.
  • Withdraw Consent: At any time, where processing relies on consent.

To exercise these rights, contact us at corkmatters.online@gmail.com. We will respond within one month. You can also complain to Portugal's CNPD (www.cnpd.pt) or your local data protection authority.

Data Security

We use appropriate technical and organizational measures to protect your data, including encryption, access controls, and secure servers. However, no method is 100% secure, so we cannot guarantee absolute security.

Children’s Privacy

Our services are not directed to children under 16. We do not knowingly collect data from children. If we become aware of such data, we will delete it.

Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify you via email or a website notice for significant changes. Your continued use of the site after changes constitutes acceptance.

Contact Information

If you have questions about this Privacy Policy, please contact us at corkmatters.online@gmail.com.

Last updated: 17 October 2026