Privacy · GDPR
Privacy policy
Last updated: May 2026
Bruta, operated by Rita Lima (“we”, “us”, “our”), is committed to protecting your personal data. This Privacy Policy explains how we collect, use and protect your information when you visit our store at soubruta.pt or make a purchase.
Data we collect
When you visit or make a purchase, we may collect:
- Contact information: name, email address, phone number, billing and delivery address
- Payment information: processed securely by Shopify Payments — we do not store card details
- Order information: products purchased, order history, returns
- Device and browsing information: IP address, browser type, pages visited, via cookies
How we use your data
- To process and deliver your orders
- To send order confirmation and shipping updates
- To respond to customer service enquiries
- To improve our website and products
- To comply with legal obligations
Legal basis (GDPR)
We process your data on the following legal bases:
- Contract performance: to fulfil your order
- Legitimate interest: to improve our services and prevent fraud
- Legal obligation: to comply with tax and consumer protection laws
- Consent: for marketing communications (you can withdraw at any time)
Data sharing
We share your data with:
- Shopify Inc. — our e-commerce platform provider
- Shipping carriers (CTT, DPD, Correos Express, DHL) — to deliver your orders
- Payment processors — for secure payment processing
We do not sell your personal data to third parties.
Data retention
We retain your personal data for as long as necessary to fulfil the purposes described above, typically for the duration of our contractual relationship plus 6 years for tax compliance.
Your rights
Under GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request erasure of your data
- Object to or restrict processing
- Data portability
- Lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados)
Cookies
We use essential, analytics and marketing cookies. For full details, see our Cookie Policy.
Contact
For any privacy-related enquiries or to exercise your rights: bruta.streetwear@gmail.com
You may also contact the CNPD: www.cnpd.pt
To exercise your rights or submit a complaint, you can also contact the CNPD (National Data Protection Commission). CNPD.