PRIVACY POLICY
Last updated: January 1, 2026
1. Data Controller
Pigmenta, Lda., based in Lisbon, Portugal, is the entity responsible for processing personal data collected through the website pigmenta.pt, in compliance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679.
2. Data Collected
In the context of website use and purchases, we may collect the following personal data: • Identification data: full name, email, phone number • Billing and shipping data: address, postal code, city, country • Payment data: card information (processed by certified third parties) • Browsing data: IP address, cookies, pages visited, session duration • Account data: order history, wishlist, preferences
3. Purpose of Processing
Personal data collected is processed for the following purposes: • Order processing and management • Communication about order status • User account management • Sending newsletters and marketing communications (with prior consent) • Improving browsing experience and website personalization • Compliance with legal and tax obligations
4. Data Sharing
Pigmenta does not sell or transfer personal data to third parties for commercial purposes. Data may be shared with: • Payment service providers (Stripe, PayPal, SIBS/MB WAY) • Transport and logistics companies for shipment processing • Legal authorities, when required by law All partners are bound by data processing agreements in compliance with GDPR.
5. Retention Period
Personal data will be retained for the time necessary to fulfill the purposes for which it was collected, or as required by legal obligations. Billing data is retained for the legally required period (10 years). Account data is maintained while the account is active. After account closure, data is deleted within 30 days, except data subject to legal retention obligations.
6. Data Subject Rights
Under the GDPR, the data subject has the following rights: • Right of access to personal data • Right to rectification of incorrect or incomplete data • Right to erasure ("right to be forgotten") • Right to restriction of processing • Right to data portability • Right to object to processing • Right to withdraw consent at any time To exercise any of these rights, contact us at: privacy@pigmenta.pt
7. Data Security
Pigmenta implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction or alteration. We use SSL/TLS encryption in all communications and payment data is processed by PCI-DSS certified providers.
8. Contact
For questions related to data protection, you may contact our Data Protection Officer: Email: privacy@pigmenta.pt Address: R. Venceslau Ramos 64 — 4430-929 Avintes, Portugal You also have the right to file a complaint with the Portuguese Data Protection Authority (CNPD).