Privacy · GDPR

Privacy policy

Last updated: May 2026

Bruta, operated by Rita Lima (“we”, “us”, “our”), is committed to protecting your personal data. This Privacy Policy explains how we collect, use and protect your information when you visit our store at soubruta.pt or make a purchase.

Data we collect

When you visit or make a purchase, we may collect:

  • Contact information: name, email address, phone number, billing and delivery address
  • Payment information: processed securely by Shopify Payments — we do not store card details
  • Order information: products purchased, order history, returns
  • Device and browsing information: IP address, browser type, pages visited, via cookies

How we use your data

  • To process and deliver your orders
  • To send order confirmation and shipping updates
  • To respond to customer service enquiries
  • To improve our website and products
  • To comply with legal obligations

Legal basis (GDPR)

We process your data on the following legal bases:

  • Contract performance: to fulfil your order
  • Legitimate interest: to improve our services and prevent fraud
  • Legal obligation: to comply with tax and consumer protection laws
  • Consent: for marketing communications (you can withdraw at any time)

Data sharing

We share your data with:

  • Shopify Inc. — our e-commerce platform provider
  • Shipping carriers (CTT, DPD, Correos Express, DHL) — to deliver your orders
  • Payment processors — for secure payment processing

We do not sell your personal data to third parties.

Data retention

We retain your personal data for as long as necessary to fulfil the purposes described above, typically for the duration of our contractual relationship plus 6 years for tax compliance.

Your rights

Under GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request erasure of your data
  • Object to or restrict processing
  • Data portability
  • Lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados)

Cookies

We use essential, analytics and marketing cookies. For full details, see our Cookie Policy.

Contact

For any privacy-related enquiries or to exercise your rights: bruta.streetwear@gmail.com

You may also contact the CNPD: www.cnpd.pt

To exercise your rights or submit a complaint, you can also contact the CNPD (National Data Protection Commission). CNPD.