This Privacy Policy explains what personal data GLEAMORI collects when you visit gleamori.shop, place an order or contact us, why we use it, who we share it with and what rights you have. It applies to the whole shop.
Who is responsible for your data
The controller is EIRATEXTIL – INDUSTRIA DE CONFECÇÕES, LDA, a Portuguese private limited company (sociedade por quotas), registered office Lugar do Eirado, 4480-250 Ferreiró, Vila do Conde, Portugal. GLEAMORI is the brand under which it sells online.
For anything to do with privacy, write to support@gleamori.shop or call +351 913 650 284 (Portuguese mobile number, international rates may apply), Monday to Friday, 9:00–17:00 Lisbon time.
What we collect
| Category | What it includes |
|---|---|
| Order data | Your name, delivery and billing address, email address, telephone number if you give one, the items you order, the prices and currency shown, your delivery country, and confirmation from the payment provider that the payment was made. |
| Account data | If you create an account: your name, email address, log-in details, saved addresses and your order history. |
| Contact form | What you type in the form on our Contact page: your name, email address and message. |
| Withdrawal form | The details you give through the electronic withdrawal function at Withdraw from contract here, so that we can identify the order and process your withdrawal. |
| Technical data and strictly necessary cookies | Information needed for the site to work: your IP address, basic technical data about your browser and device, the cookies that keep your session and cart running, the cookie that remembers your language, the cookie that remembers your country and currency choice, and the fraud-prevention cookies set by the payment provider at checkout. There are no analytics, advertising or tracking cookies. |
Providing your order data is necessary to conclude and perform the contract: without your name, address and email we cannot process or deliver an order, or handle a return or withdrawal.
Why we use your data, and on what legal basis
| Purpose | Legal basis | Why this basis |
|---|---|---|
| Taking and confirming your order, taking payment, dispatching and delivering your parcel, arranging returns, handling a withdrawal, and answering questions about an order | Art. 6(1)(b) GDPR — performance of a contract | We cannot carry out the order and after-sales service you asked for without this data. |
| Issuing and keeping invoices and accounting records, complying with tax and accounting law, and dealing with consumer-law duties such as the legal guarantee and the statutory right of withdrawal | Art. 6(1)(c) GDPR — legal obligation | Portuguese tax and accounting law requires invoices and records to be kept; consumer law requires us to keep withdrawal and complaint records. |
| Answering emails you send us before or after an order, protecting ourselves in the event of a legal claim, keeping the website secure and working properly, and preventing fraudulent payments | Art. 6(1)(f) GDPR — legitimate interests | We have a legitimate interest in running and protecting the shop and in supporting customers. We have balanced this against your rights, and you may object (see Your rights below). |
We send no newsletters and no marketing emails without your separate consent, and we carry out no automated decision-making and no profiling.
Who receives your data
| Recipient | What they receive, and why |
|---|---|
| Hostinger | Website hosting and email. The site, and the data on it, are stored on their servers, and our customer service mailbox runs through them. |
| Stripe (Stripe Payments Europe, Ltd., Ireland) | Card payments. They receive the payment data needed to process your card payment. |
| PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg) | Where PayPal is offered at checkout and you choose it, PayPal receives the payment data needed for that payment. |
| Delivery carriers | Your name, delivery address, telephone number if you gave one, and email address, so that the parcel can be delivered and tracked. |
| Our accountant | Invoices and accounting data, as required for bookkeeping. |
| Tax authorities | Invoices and tax information, where the law requires it. |
We do not sell your personal data, and we do not share it for advertising. These providers act on our instructions (as processors) or handle data in their own right where the law requires it. Only the payment methods shown at checkout are available.
Transfers outside the EEA
Our providers are mainly in the European Union. Where a provider processes personal data outside the EEA, the transfer is based either on a European Commission adequacy decision — for example the EU-US Data Privacy Framework for certified recipients, or the adequacy decisions for the United Kingdom and Switzerland — or on the European Commission’s Standard Contractual Clauses. You can ask us for more detail at support@gleamori.shop.
How long we keep your data
| Data | Retention period | Reason |
|---|---|---|
| Orders and invoices | 10 years | Portuguese tax and accounting law. |
| Support emails | 2 years after the last message in the exchange | So we can help with follow-up questions about the same order. |
| Withdrawal and complaint records | 3 years | To show that we handled a withdrawal or complaint correctly. |
| Customer account | Until you delete the account | You stay in control of your account. |
| Cookies and technical data | For the periods described in our Cookie Policy | Strictly necessary cookies are kept only as long as they are needed for the cart, checkout, language and country or currency choice and fraud prevention. You can clear them in your browser at any time. |
Your rights
You have the right to:
- access the personal data we hold about you, and receive a copy;
- have incorrect or incomplete data corrected;
- have your data erased, where we are not required to keep it (for example, invoices kept under tax law);
- restrict how we use your data;
- receive the data you gave us in a portable, machine-readable format, or have it sent to another provider where technically possible;
- object to processing based on our legitimate interests, and to object at any time to any use of your data for direct marketing — we do not carry out direct marketing;
- withdraw any consent you have given at any time; withdrawing consent does not affect processing carried out before you withdrew it.
How to exercise your rights
Email support@gleamori.shop, or write to us at Lugar do Eirado, 4480-250 Ferreiró, Vila do Conde, Portugal. Please tell us what you would like us to do. We may ask you to confirm your identity — for example by writing from the email address used on the order, or giving the order number — so that we do not hand your data to someone else.
We reply within one month. You do not have to give a reason for most requests.
Contact for privacy questions: support@gleamori.shop — email replies within two business days.
Complaining to a supervisory authority
If you think we have handled your data wrongly, please tell us first — we will try to put it right. You also have the right to complain to a supervisory authority at any time.
Our supervisory authority is CNPD — Comissão Nacional de Proteção de Dados, Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal, www.cnpd.pt. You may also complain to the supervisory authority in your own country, for example Datatilsynet in Denmark.
Cookies
We use only strictly necessary cookies: the WooCommerce session and cart cookies, the gl_lang cookie for your language, the cookie that remembers your country and currency choice, and the fraud-prevention cookies set by the payment provider at checkout when those payment methods are used. There are no analytics, advertising or tracking cookies and no social media plugins. The note you see about cookies is remembered in your browser’s local storage (gl_cookie_ok), not in a cookie, which is why there is an information note rather than a consent banner. Read the Cookie Policy for the full list and how to manage or clear cookies.
Children
Our shop is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child under 16 has given us personal data, email support@gleamori.shop and we will delete it.
Security
Our site runs over HTTPS. Payment data is handled by PCI DSS certified payment providers; card numbers are never stored on our servers. Access to personal data is limited to those who need it to do their work, and our providers are bound to keep it confidential.
Changes to this policy
We may update this policy if our shop, our providers or the law change. The current version always appears on this page with the date below. This version is dated 12 October 2026.