Privacy Policy

Privacy Policy

Last updated: May 2026

1. Identification of the Data Controller

NIXOFY — Sole Proprietorship
Ana Catarina de Freitas Diogo
Tax ID (NIF): PT217375251
Av. do Atlântico, Edifício Panoramic, n.º 16, 14.º Piso, Escritório 8
Parque das Nações, 1990-019 Lisbon, Portugal
Email: suporte@nixofy.com
Website: www.nixofy.com

2. Scope and Application

This Privacy Policy applies to the processing of personal data carried out by NIXOFY within the scope of its e-commerce activity, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Portuguese legislation.

3. Personal Data Collected

Identification and contact data:

  • Full name
  • Email address
  • Phone number (optional)
  • Delivery and billing address

Transaction data:

  • Order history
  • Payment method (reference only, never full card details)
  • Delivery preferences

Browsing data:

  • IP address
  • Browser and device type
  • Pages visited and visit duration
  • Cookies (see Cookie Policy)

4. Purposes and Legal Bases for Processing

  • Order and payment processing — Contract performance (Art. 6(1)(b) GDPR)
  • Invoice issuance and tax compliance — Legal obligation (Art. 6(1)(c) GDPR)
  • Sending order confirmations and updates — Contract performance
  • Customer service and complaint resolution — Legitimate interest (Art. 6(1)(f) GDPR)
  • Sending newsletters and marketing communications — Consent (Art. 6(1)(a) GDPR)
  • Website improvement and statistical analysis — Legitimate interest
  • Fraud prevention — Legitimate interest

5. Data Sharing with Third Parties

Your data may be shared with the following entities:

Fulfillment and logistics partners:

  • Syncee and its partner suppliers — order processing and shipping
  • Carriers (CTT, DPD, GLS, DHL, and others) — order delivery

Payment service providers:

  • Shopify Payments (Stripe) — card processing
  • Easypay — MB WAY and Multibanco

Technology service providers:

  • Shopify Inc. — e-commerce platform
  • InvoiceXpress — AT certified invoicing

Public authorities:

  • Tax and Customs Authority (AT) — tax obligations

We do not sell, transfer, or share your personal data with third parties for their own commercial purposes.

6. International Data Transfers

Some suppliers may be located outside the European Economic Area. In these cases, we ensure that transfers are carried out based on appropriate legal mechanisms, namely Standard Contractual Clauses approved by the European Commission.

7. Data Retention

  • Order and invoice data: 10 years (Portuguese tax legal obligation)
  • Customer account data: While the account is active + 2 years
  • Browsing data and cookies: Maximum 13 months
  • Marketing communications: Until consent is withdrawn
  • Complaints: 3 years

8. Data Subject Rights

Under the GDPR, you have the following rights:

  • Right of access — to know what data we hold about you
  • Right to rectification — to correct inaccurate or incomplete data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent

To exercise any right: suporte@nixofy.com

You can also file a complaint with the National Data Protection Commission (CNPD): www.cnpd.pt

9. Data Security

We adopt appropriate technical and organisational measures to protect your personal data, including encrypted transmission (HTTPS/TLS), restricted access by authorised personnel, and PCI DSS certified payment providers.

10. Minors

Our services are not intended for individuals under 16 years of age. We do not knowingly collect data from minors.

11. Changes

We may update this policy periodically. The last updated date is indicated at the top of this document.

12. Contact

For any questions regarding privacy or to exercise your rights:

Email: suporte@nixofy.com

NIXOFY — Tax ID PT217375251 | suporte@nixofy.com | www.nixofy.com