Privacy Policy

1. Data controller

Shop Spot, Unipessoal Lda, NIPC 515638226, with registered office at Rua da República, n.º 31, 6300-854 Guarda, Portugal. For any question about personal data: info@shopeasy.pt.

2. What data we collect

• Contact form: name, company, email, phone, area of interest and the message you write. Only name, email and message are required.
• Direct contact: the data you send us by email, phone or WhatsApp.
• Technical data: for security reasons, the server logs the IP address, date and time and the page requested.

3. Why we use the data and on what legal basis

• To reply to your request and prepare a possible proposal — steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to enquiries (Art. 6(1)(f)).
• To keep the website secure and working properly — legitimate interest (Art. 6(1)(f)).
• To comply with legal obligations, where applicable (Art. 6(1)(c)).

We do not use your data for marketing without your consent, we do not sell it, and we do not make automated decisions based on it.

4. How long we keep it

Contact messages are kept for as long as needed to handle the request and at most 2 years after the last contact, unless a contractual relationship follows (in which case the legal retention periods apply, namely tax rules). Server technical logs are deleted automatically after a few weeks.

5. Who has access

Data is handled by the Shop Spot team. We use service providers acting on our behalf and only for these purposes: website hosting (server in the European Union), email service and, if you allow it, usage statistics (Google Analytics — see section 6). Google may process data in the United States under the EU-US Data Privacy Framework and standard contractual clauses approved by the European Commission.

6. Cookies

Session cookie (strictly necessary): protects the contact form and is deleted when you close your browser. It does not require consent.

Statistics cookies (Google Analytics 4, Google Ireland Limited): only enabled if you click “Accept” in the cookie notice. They count visits and show which pages are viewed most, in aggregate. Cookies used: _ga and _ga_*, lasting up to 2 years. Legal basis: your consent (Art. 6(1)(a) GDPR and Portuguese Law 41/2004).

You can change your choice at any time under Cookie preferences (also in the footer). More about Google: policies.google.com/privacy.

We do not use advertising cookies. The website's typeface is hosted on our own server.

7. Your rights

At any time you may request access to, rectification or erasure of your data, restriction of processing, data portability, and object to processing based on legitimate interest. Just write to info@shopeasy.pt. We will reply within one month at most.

You also have the right to lodge a complaint with the supervisory authority, the Portuguese Data Protection Authority (CNPD): www.cnpd.pt.

8. Security

The website uses an encrypted connection (HTTPS) and the form is protected against automated submissions. Access to the data is limited to those who need it to reply to your request.

9. Changes

This policy may be updated. The version in force is always the one published on this page. See also the Legal notice.

Last updated: 5 October 2026 (statistics cookies).