Privacy Policy

Privacy Policy

Last updated: 20/02/2026

1. Who We Are

This website is operated by Natives’ Dawn, a Portuguese sole proprietorship.

  • Business owner: Ana Filipa Ferreira Ribeiro Brízido
  • Commercial name: Natives’ Dawn
  • Tax ID (NIF): [INSERT NIF]
  • Registered address: [INSERT FISCAL ADDRESS]
  • Email: nativesdawn@gmail.com
  • Country: Portugal

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR), Portuguese data protection legislation and applicable EU consumer law.

2. Categories of Personal Data Collected

2.1 Order & Transaction Data

  • Name
  • Billing and shipping address
  • Email address
  • Phone number (if provided)
  • Order details and product selections
  • Payment confirmation information (processed by secure third-party providers)

2.2 Account Data (if account is created)

  • Login credentials (username/email)
  • Order history
  • Saved billing/shipping details

2.3 Communication Data

  • Email correspondence
  • Messages submitted via contact forms

2.4 Technical & Usage Data

  • IP address
  • Browser and device information
  • Pages visited and interaction data
  • Security-related technical data
  • Cookie-based data (see Cookie Policy)

3. Legal Bases for Processing (Article 6 GDPR)

  • Performance of a contract (Art. 6(1)(b)): order processing, payments, delivery.
  • Legal obligation (Art. 6(1)(c)): compliance with Portuguese tax and accounting laws.
  • Legitimate interests (Art. 6(1)(f)): website security, fraud prevention, system integrity and service improvement. Such legitimate interests are carefully balanced against the fundamental rights and freedoms of users.
  • Consent (Art. 6(1)(a)): non-essential cookies and analytics, where applicable.

4. Purposes of Processing

  • To fulfil purchase contracts
  • To provide customer support
  • To comply with regulatory obligations
  • To improve website usability and performance
  • To prevent fraud and misuse (including via reCAPTCHA and payment security systems)

5. Data Minimisation & Storage Limitation

We only collect personal data that is necessary for the specified purposes. Data is retained only for as long as legally required or necessary for contractual or legitimate business purposes.

  • Accounting & invoicing data: retained for 10 years (Portuguese tax law).
  • Analytics data: retained up to 14 months.
  • Customer communications: typically retained for up to 3 years unless required for ongoing legal or contractual reasons.

6. Data Sharing & Processors

We do not sell personal data.

We share data only with service providers necessary to operate our business:

  • Payment processors: Stripe (WooPayments) and PayPal
  • Website analytics: Google Analytics (Google Signals disabled)
  • Security services: Google reCAPTCHA
  • Hosting provider: Namecheap (EasyWP)
  • Shipping providers: Postal and courier services
  • Legal authorities where legally required

7. International Data Transfers

Certain providers (e.g., Google, Stripe, PayPal) may process data outside the EEA, including in the United States.

Transfers are safeguarded through appropriate mechanisms such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms in compliance with GDPR.

Where applicable, we assess whether supplementary measures are necessary to ensure an equivalent level of protection.

8. Profiling & Automated Decision-Making

We do not conduct profiling for behavioural marketing, customer scoring or personalised automated decision-making.

We do not make decisions based solely on automated processing that produce legal effects or similarly significant effects within the meaning of Article 22 GDPR.

However, our payment providers (e.g., Stripe, PayPal) may use automated fraud detection mechanisms under their own privacy policies and, where applicable, as independent data controllers.

9. Your Rights Under GDPR

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to object
  • Right to data portability
  • Right to withdraw consent at any time

Requests may be sent to nativesdawn@gmail.com. We respond within one month as required by law.

You may lodge a complaint with the Portuguese Data Protection Authority (CNPD):
https://www.cnpd.pt

10. Security Measures

  • SSL encryption
  • Secure payment gateways
  • Access controls and password protection
  • Regular software updates
  • Fraud prevention systems

11. Relationship with Cookie Policy

This Privacy Policy should be read together with our separate Cookie Policy, which explains how cookies and similar technologies are used in compliance with the ePrivacy Directive and GDPR.

12. Changes to This Policy

We may update this Privacy Policy periodically. Where changes materially affect data processing activities, users will be informed appropriately and, where required by law, new consent will be requested.

13. Contact

Email: nativesdawn@gmail.com
Country: Portugal

⟵ Back to Home