Privacy Policy

Last updated: 5 November 2025

Who We Are

This Privacy Policy explains how 26retrorevive (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website, place an order, subscribe to our updates, or contact us.

For the purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR), the data controller is 26retrorevive, based in Coimbra, Portugal. Our online store is operated on the Shopify platform.

If you have any questions regarding this policy or your privacy, you can contact us at any time at support@26retrorevive.com.

Personal Data We Collect

We collect personal data only for clear, specified, and lawful purposes. The information we gather depends on how you interact with us.

  • When you browse our website: We automatically receive technical data, which may include your IP address, device and browser type, the pages you viewed, the time spent on those pages, and referring URLs. This information is collected using cookies and similar technologies, which are detailed in our separate Cookie Policy.

  • When you place an order: We process the information necessary to fulfil your purchase. This includes your name, billing and shipping addresses, email address, phone number, the contents of your order, and transaction identifiers. Your payment details are processed securely by our payment providers; we do not store your full card numbers.

  • When you contact us: If you reach out to our support team, we process your name, email address, and the content of your message or enquiry.

  • When you subscribe to emails: We process your email address and your communication preferences. If you create a customer account (where this feature is enabled), we also process your account credentials and any saved addresses.

How and Why We Use Your Data

We use your personal data for the following specific purposes:

  • To provide our services and fulfil your order: This is our primary purpose. It includes processing your payment, preparing and shipping your parcel, sending you tracking updates, and handling any subsequent returns or support requests.

  • To maintain and improve our website: We analyse aggregated usage data to understand how our site is performing. This allows us to improve page performance, product discovery, and the overall checkout experience.

  • To communicate with you: We send essential service emails regarding your orders. Separately, and only with your explicit consent, we may send marketing emails with product news and offers, which you can unsubscribe from at any time.

  • To prevent fraud and ensure security: We use safeguards and tools provided by our platform to reduce fraudulent transactions and protect the security of our website and customer accounts.

  • To comply with legal obligations: We are required to keep certain records, such as for accounting and tax purposes, and to respond to lawful requests from authorities when necessary.

Our Legal Bases for Processing (Under GDPR)

We rely on the following lawful bases to process your personal data:

  • Contract: We process data as necessary to perform our contract with you, which is formed when you place an order. This includes all steps from processing payment to delivery and customer support.

  • Legitimate Interests: We rely on our legitimate interests to maintain site security, prevent fraud, and analyse site performance to improve our services. We always balance these interests against your rights and freedoms.

  • Consent: We rely on your clear, affirmative consent for sending marketing communications and for setting all non-essential cookies. You have the right to withdraw this consent at any time.

  • Legal Obligation: We process certain data, such as information on invoices, to comply with our legal obligations under Portuguese tax and accounting laws, as well as consumer protection rules.

Who We Share Your Data With

We do not sell or rent your personal data to third parties. We share personal data only with trusted service providers who require it to perform specific functions on our behalf. These include:

  • Shopify: Our e-commerce platform and hosting provider.

  • Payment Processors: Such as Shopify Payments or PayPal, to handle secure transactions.

  • Carriers and Logistics Partners: To deliver your order and provide tracking information.

  • Email and Customer Support Tools: To manage service messages and your enquiries.

  • Analytics and Anti-Fraud Tools: Configured with privacy-respecting settings where available.

Each provider processes data under a strict contract that requires confidentiality, security, and compliance with the GDPR.

International Data Transfers

As we use global service providers like Shopify, your personal data may be processed in countries outside of the European Union (EU) or European Economic Area (EEA), such as Canada or the United States. When this happens, these transfers are protected by lawful safeguards, such as Adequacy Decisions or Standard Contractual Clauses (SCCs) as recognised by the European Commission, ensuring your data receives an equivalent level of protection.

Data Retention

We keep personal data only for as long as it is necessary for the purpose for which it was collected, or as required by law.

Order and invoice data is generally retained for up to ten (10) years to meet Portuguese accounting and tax requirements. Customer service enquiries are typically kept for up to twelve (12) months after resolution. Data processed for marketing purposes is kept until you unsubscribe or withdraw your consent. When the retention period ends, we either delete or anonymise the data in a secure manner.

Cookies and Similar Technologies

Our website uses cookies for essential functions, performance, and, where you agree, advertising. You can review and change your cookie preferences at any time using the cookie banner or settings link on our site. For full details, please see our Cookie Policy.

Your Rights Under the GDPR

As a user, you have specific rights regarding your personal data under the GDPR. These include:

  • The right to Access the personal data we hold about you.

  • The right to Rectify inaccurate or incomplete data.

  • The right to Erase your data in certain circumstances (the “right to be forgotten”).

  • The right to Restrict or Object to our processing of your data in certain cases.

  • The right to Data Portability, allowing you to receive your data in a structured, commonly used format.

  • The right to Withdraw Consent at any time, where our processing relies on your consent.

To exercise any of these rights, please email us at support@26retrorevive.com. We may need to verify your identity before acting on your request. You also have the right to lodge a complaint with the Portuguese Data Protection Authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

Children's Privacy

Our website is intended for an adult audience and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us at support@26retrorevive.com, and we will take steps to delete that information where required.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include encryption, access controls, and secure data storage policies. While no method of transmission or storage is completely secure, we are committed to safeguarding your information.

Marketing Communications

If you subscribe to our newsletter, we will send you product updates, launch news, and occasional offers. You can opt out of these communications at any time by using the "unsubscribe" link provided in every email or by contacting us directly. Even if you opt out of marketing, we will continue to send you essential service messages related to your orders.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, our providers, or applicable law. We will post the new version on this page and update the "Last updated" date at the top. If the changes are material, we may also provide a notice on our website.

How to Contact Us

If you have any questions about this Privacy Policy, how we handle your personal data, or your rights as a data subject, please email us at support@26retrorevive.com.