Privacy and GDPR

1. Data controller

The controller responsible for your data is [trader name] (sole trader), professional contact address [contact address — non-residential], reachable at mydotchi@gmail.com.

2. What data we collect

• Identification and contact data: name, email, phone, delivery address.
• Order data: products purchased, order history, cashback balance.
• Payment data: processed directly by the payment provider; we do not store your card details.
• Browsing data: cookies and site usage metrics (see point 7).

3. What we use your data for

• Processing and delivering your orders.
• Managing cashback and the referral program.
• Providing customer support.
• Sending marketing communications, only with your consent.
• Meeting legal obligations (invoicing, for example).

4. Legal basis

We process your data based on the performance of the purchase contract, compliance with legal obligations, our legitimate interest in improving the service, and, for marketing, your consent, which you can withdraw at any time.

5. Who we share it with

We share only what is necessary with carriers, payment providers and suppliers who ship orders, always under data protection guarantees. We do not sell your data to third parties.

6. How long we keep it

We keep data only for as long as needed for the purposes above and for applicable legal (namely tax) retention periods.

7. Cookies

We use cookies essential to the site's operation and, with your consent, measurement and marketing cookies. You can manage your preferences in your browser.

8. Your rights

You have the right to access, rectify, erase, restrict, object to the processing of, and port your data. To exercise these rights, write to mydotchi@gmail.com. You also have the right to lodge a complaint with the national data protection authority (in Portugal, the CNPD).