GDPR Compliance

Privacy Policy

At Vivelon, we value your privacy and are committed to protecting your personal data with maximum transparency and security.

Last updated: November 14, 2025

At Vivelon, we value your privacy. This Policy explains how we collect, use, store, and protect your personal data when you use our website and e-commerce services. We comply with the GDPR and applicable Portuguese legislation.

If you have any questions, please contact us at privacidade@vivelon.pt

Who we are

Vivelon is responsible for processing your personal data associated with the online store.

Headquarters: Rua Exemplo, 100, 1000-000 Lisbon, Portugal.

Data Protection Officer (DPO) email address:
privacy@vivelon.pt

What data do we collect?

We only collect the data necessary to provide our services:

Account details

Name, email, password (encrypted), language, preferences.

Order data

Billing/shipping address, CNPJ (optional), products purchased, purchase history.

Payments

Processed by certified partners (e.g., payment institutions). We only receive the transaction status; we do not store complete card details.

Support/WhatsApp

Messages, optional attachments, and technical metadata.

Purposes of treatment

We use your data to:

Process orders and provide service (delivery, invoicing, customer support).
Manage your account and purchase history.
Transactional communications (order status, security alerts).
Marketing with consent (newsletters, campaigns, recommendations).
Website analysis and improvement, and fraud prevention.
Legal compliance (invoicing, tax and warranty obligations).

Legal basis (GDPR)

We process data based on:

Contract execution

To process your orders and provide services.

Legal obligation

Billing and tax obligations.

Legitimate interest

Improved service and fraud prevention, while respecting your rights.

Consent

Marketing and communications. You can opt out at any time.

storage period

We only keep the data for as long as necessary.

  • Inactive accounts for up to 24 months after the last interaction, unless legally required.
  • Billing documents: 10 years (legal requirement).
  • Support records: up to 24 months.
  • Cookies: according to their category (see the Cookies section).

Data sharing

We can share data with:

Service providers (payments, logistics/transportation, hosting, support, and marketing/analytics tools) under data processing agreements.
Authorities when required by law.

We never sell your data.

International transfers

When data transfers occur outside the European Economic Area, we ensure standard contractual clauses or equivalent mechanisms approved by the European Commission, guaranteeing an adequate level of protection for your personal data.

Cookies and similar technologies

We use cookies for website functionality, preferences, statistics, and marketing.

Types of cookies:

  • Strictly necessary (always active)
  • Functional
  • Statisticians
  • Marketing

You can manage your preferences in the Cookie Manager and in your browser. For more details, please see the Cookie Policy below.

Cookie notice: "We use cookies to improve your experience, analyze traffic, and personalize content. You can accept all or manage preferences."

Your rights

Under the GDPR, you have the following rights:

Access

Knowing what data we hold about you

Rectification

Correct incorrect or incomplete data.

Erasure

Request the deletion of your data.

Limitation

Restricting treatment in certain situations

Portability

Receiving your data in a structured format

Opposition

To oppose certain treatments

To exercise your rights, please contact privacidade@vivelon.pt

We will respond within the legal timeframe of 30 days.

Right to complain: You also have the right to file a complaint with the CNPD (National Data Protection Commission).

Security

We apply appropriate technical and organizational measures to protect your data:

  • Encryption of confidential data (SSL/TLS)
  • Strict access control and authentication.
  • Regular and secure backups
  • Continuous security monitoring
  • Regular training for teams in data protection.

Important note: Despite our best efforts, no system is 100% foolproof. In the event of a security incident affecting your data, we will notify you as required by law.

Minors

Our services are not intended for individuals under the age of 16. If we become aware that we have collected data from a minor without valid consent from their parents or guardians, we will remove that information as quickly as possible.

If you are a parent or guardian and you know that your child has provided us with personal information, please contact us immediately.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legislation, or for operational reasons.

We will always publish the most recent version on this page, along with the update date. We recommend that you check this page regularly to stay informed.

Last updated: November 9, 2025

Contacts

For any questions related to the privacy of your data or to exercise your rights, please contact our Data Protection Officer:

Data Protection Officer

location Household
Example Street, 100
1000-000 Lisbon, Portugal

Cookie Policy

What are cookies?

Cookies are small text files stored on your device that allow our website to recognize you and save your preferences, improving your browsing experience.

How we use cookies

  • Authentication and security of your session.
  • Saving the contents of your shopping cart
  • Website performance and behavior analysis
  • Content personalization and recommendations
  • Targeted marketing and advertising campaigns
Strictly necessary
Essential for the site to function. Always active.
Functional

They save personalized preferences and settings.

Statisticians

They help us understand how you use the site.

Marketing

They allow for personalized and relevant advertising.

Cookie management

You can change your cookie preferences at any time through the Cookie Manager or in your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

Managing Cookie Preferences

Duration

Session cookies: These are automatically deleted when you close your browser.

Persistent cookies: These remain on your device for a defined period or until they are manually removed.

Third-party cookies

Some cookies are set by external partners (e.g., Google Analytics, advertising platforms). A complete list of partners and their cookies is available in the Cookie Manager.

Frequently Asked Questions

Do you have questions about privacy?

Find quick answers to the most common questions about data protection.

Didn't find the answer you were looking for?

Contact our DPO