Privacy policy

Manuel Tavares, Lda., Portuguese tax and company registration number 500 495 491, is the controller of personal data processed for the purposes it determines, including operation of this website and management of customer relationships.

Address: Rua da Betesga, 1 A e B, 1100-090 Lisbon, Portugal

Email: info@manueltavares.com | Telephone: +351 213 424 209

The categories of personal data processed depend on your relationship with us and the features you use. They may include:

• Identity and contact details: name, email address, telephone number, billing and delivery addresses, and tax identification number where necessary.
• Purchases and customer support: products ordered, amounts paid, order status, communications and incidents.
• Customer account: registration and authentication information where you choose to create an account. Guest checkout is available.
• Marketing communications: email address, subscription preferences and records relating to consent or objections.
• Browsing and security: IP address, technical logs and information associated with cookies and similar technologies, depending on their purpose and configuration.
• Enquiries and job applications: information you voluntarily provide when contacting us or applying for a position, where applicable.

Fields marked as mandatory are necessary for the purpose indicated on the relevant form. Without this information, we may be unable to process your request or order.

We do not rely on consent as a general legal basis for all activities. The applicable legal basis depends on the specific purpose:

When processing relies on legitimate interests, we weigh Manuel Tavares' interests against individuals' rights and freedoms. Where specific consent is required, it must be requested for the relevant purpose.

Information needed to fulfil an order is used to confirm purchases, prepare products, process payments, issue invoices, arrange delivery or collection and provide after-sales support.

We may share strictly necessary data with payment service providers, carriers and logistics partners, depending on the chosen service. Manuel Tavares works with more than one payment provider and does not identify a single exclusive provider in this policy.

Our Online Shop allows guest checkout. Information required to fulfil an order is processed even if the customer does not create an account.

Our newsletter is used to share news, campaigns and promotional information about Manuel Tavares, in accordance with applicable legal requirements.

To manage these communications, we use specialised services, including the E-goi platform where it is used for campaigns. Data processed may include email addresses, subscription records and information needed to manage communications.

Recipients may object to direct marketing and, where processing relies on consent, withdraw that consent at any time, including through the unsubscribe option provided in messages. Withdrawal does not affect the lawfulness of earlier processing.

We use cookies that are necessary for essential website functions, including sessions, shopping baskets and security features.

The website also displays a preferences panel for additional categories, including Preferences and Statistics. The actual use and purposes of non-essential cookies depend on the technical services implemented and on consent choices, where consent is legally required.

More detailed information about cookie categories, duration and third parties should be available in the website's cookie information and declaration. For assistance with changing or withdrawing consent, contact us at info@manueltavares.com.

The option to reopen the preferences panel directly after an initial choice is currently undergoing technical review.

Access to personal data is limited to people and organisations that need it for legitimate purposes. Depending on the activity, recipients may include:

• Website hosting, maintenance and IT service providers.
• Payment processing and fraud prevention providers.
• Carriers and logistics service providers.
• Email, newsletter and marketing communications providers.
• Accounting, legal and administrative advisers.
• Public authorities, regulators or courts where there is a legal basis for disclosure.

Where service providers act as processors, they must comply with applicable data protection obligations. We do not sell customers' personal data as a product.

Some technology or communication services may involve processing personal data outside the European Economic Area, depending on the providers used and their configuration.

Where international transfers fall under the GDPR, the relevant legal safeguards must be observed, including adequacy decisions or appropriate safeguards, as applicable.

The specific providers, destination countries and transfer mechanisms are subject to verification in Manuel Tavares' processing and supplier records. You may request further information through our privacy contact details.

We retain personal data for as long as necessary for the purposes described and to comply with legal obligations, including applicable tax and accounting retention periods.

• Orders and invoices: for the periods required to fulfil the contract and comply with statutory record-keeping obligations.
• Enquiries: for the time necessary to respond and manage related matters.
• Newsletter: for as long as there is a valid basis for sending communications and, after an objection or withdrawal of consent, only the records needed to respect that choice, where applicable.
• Technical logs: for the periods necessary for security and operational purposes, subject to applicable retention rules.
• Job applications: according to the purpose of the recruitment process and applicable legal criteria.

Retention periods may differ between systems. A detailed review of these periods forms part of our assessment of processing activities.

Manuel Tavares seeks to apply technical and organisational measures appropriate to the risks of processing personal data, including access controls, IT security measures and suitable internal procedures.

Access by employees and service providers should be restricted to what is necessary for their respective duties. No transmission or storage system can guarantee the complete absence of risk.

Subject to the conditions and limits established by law, you may request:

• Access to your personal data.
• Correction of inaccurate or incomplete data.
• Erasure of data, where applicable.
• Restriction of processing in certain circumstances.
• Objection to processing, including direct marketing.
• Data portability, where the legal requirements are met.
• Withdrawal of consent at any time where processing is based on consent.

To exercise your rights, write to info@manueltavares.com. We may request only the information necessary to verify your identity.

We respond within the periods established by the GDPR, normally within one month, subject to legally permitted extensions and exceptions.

If you believe that the processing of your personal data breaches applicable law, you have the right to lodge a complaint with the relevant supervisory authority, without prejudice to other legal remedies.

CNPD | Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados) | Av. D. Carlos I, 134, 1.º | 1200-651 Lisbon | www.cnpd.pt

This Privacy Policy may be updated to reflect legal, operational or technological changes. The updated version will be made available on this page, indicating the month and year.

Where a change involves a new processing purpose or requires further information or consent, the corresponding legal requirements will be observed.

Last updated: October 2026.