Privacy Policy

Last Updated: 25 Aug 2026

1. Introduction

Welcome to Turcooza. We respect your privacy and are committed to protecting your personal data. This privacy policy informs you how we look after your personal data when you visit our website and tells you about your privacy rights under Portuguese and EU law.

2. The Data We Collect

We may collect, use, and store different kinds of personal data about you, including:

Identity Data: Name, username, or similar identifier.
Contact Data: Billing address, delivery address, email address, and telephone numbers.
Financial Data: Payment card details (processed securely via Shopify Payments and associated providers).
Transaction Data: Details about payments to and from you and other details of products (such as textiles or kitchen equipment) you have purchased.
Technical Data: IP address, browser type, time zone setting, and location.

3. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:

Performance of a Contract: To process and deliver your order.
Legitimate Interests: To improve our services and your experience.
Compliance with Legal Obligations: To comply with Portuguese tax and accounting laws.
Consent: When you opt-in to receive our newsletter.

4. Data Sharing

We share your data with trusted third parties to provide our services:

Service Providers: Shopify (e-commerce platform), IT, and system administration services.
Logistics: Delivery companies in Portugal and internationally.
Payment Gateways: To securely process transactions.
Professional Advisers: Lawyers, auditors, and insurers.

5. International Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure a similar degree of protection is afforded to it by ensuring at least one of the safeguards permitted by the GDPR is implemented.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees and partners who have a business need to know.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (usually 10 years for fiscal documents in Portugal).

8. Your Legal Rights

Under the GDPR, you have the following rights:

Access: Request a copy of your personal data.
Correction: Request correction of incomplete or inaccurate data.
Erasure: Request deletion of your data where there is no good reason for us to continue processing it.
Object: Object to processing where we are relying on a legitimate interest.
Withdraw Consent: At any time where we are relying on consent to process your data.