Privacy Policy

Privacy Policy

Last updated: 22 September 2026

This policy explains how Sweet Apple collects, uses and protects your personal data when you visit or buy at www.sweetapple.pt. It is written under Regulation (EU) 2016/679 — the General Data Protection Regulation (GDPR) — and Portuguese Law 58/2019.

1. Who is the data controller

Primavera Relaxante Unipessoal, Lda., trading as Sweet Apple ®
Registered office: Rua Monges de Cister S/N — Centro Comercial Neomáquina, 2475-131 Benedita, Portugal
Company and VAT number: 509 610 536 — Commercial Registry of Alcobaça
Share capital: €15,000
E-mail: geral@sweetapple.pt
Telephone: +351 262 921 534 (national landline rate)

For any question about your personal data, write to geral@sweetapple.pt with the subject "Data Protection".

2. What data we collect

Category Data When
Identity and contact Name, e-mail, telephone, date of birth (optional) When you create an account or order
Address Billing and delivery address When you order
Tax Tax number, when you ask for an invoice with it When you order
Orders Items, amounts, history, returns When you buy
Payment Method chosen and transaction confirmation. We never store card numbers — they are handled directly by SIBS and Klarna When you pay
Browsing IP address, device and browser type, pages visited, cookies When you visit the site
Communications Messages you send us through the contact form or by e-mail When you contact us

3. Why we use your data and on what legal basis

Purpose Legal basis (GDPR art. 6)
Process your order, deliver it and provide customer support Performance of a contract — (b)
Issue invoices and meet tax and accounting obligations Legal obligation — (c)
Handle returns, exchanges and warranties Contract and legal obligation — (b) and (c)
Send our newsletter and commercial communications Consent — (a). You may withdraw it at any time
Analytics and marketing cookies Consent — (a), given in the cookie banner
Site security and fraud prevention Legitimate interest — (f)

4. Who we share it with

We share only what is strictly necessary, and only with those who need the data to provide us a service:

  • Carriers — CTT, to deliver your order (name, address, telephone).
  • Payment providers — SIBS (Multibanco, MB WAY, card) and Klarna, who handle the transaction as independent controllers.
  • Hosting and e-mail — our web hosting provider, within the European Union.
  • Accounting — to meet tax obligations.
  • Authorities — where the law requires it.

We do not sell or otherwise transfer your personal data to third parties for commercial purposes.

5. Transfers outside the European Union

Our servers are located in the European Union. Some analytics and advertising services we use, when you authorise them in the cookie banner, may involve transfers to third countries, under the European Commission's standard contractual clauses or an adequacy decision.

6. How long we keep it

  • Invoicing data — 10 years, as required by Portuguese tax law.
  • Customer account — for as long as you keep it active. If you ask for deletion, we erase everything we are not legally required to keep.
  • Warranties — 3 years after delivery, the length of the legal guarantee.
  • Newsletter — until you withdraw consent.
  • Cookies — as set out in our Cookie Policy.

7. Your rights

Under the GDPR you have the right to:

  • Access the data we hold about you and obtain a copy;
  • Rectify inaccurate or incomplete data;
  • Erase your data ("right to be forgotten"), where no legal obligation requires us to keep it;
  • Restrict processing in certain situations;
  • Portability — receive your data in a structured, commonly used format;
  • Object to processing based on legitimate interest;
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, write to geral@sweetapple.pt. We reply within one month. We may ask you for proof of identity so that we do not hand your data to someone else.

8. Complaints

If you believe your data is not being handled as it should be, you may lodge a complaint with the supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134 — 1st floor, 1200-651 Lisbon, Portugal
www.cnpd.pt

9. Security

The site runs entirely over an encrypted connection (HTTPS). Payment data never passes through our servers. We apply appropriate technical and organisational measures to protect information against unauthorised access, loss or destruction.

10. Minors

This site is not intended for anyone under 16. We do not knowingly collect data from minors without the authorisation of a parent or guardian.

11. Changes to this policy

We may update this policy. The date of the last update is shown at the top. Substantial changes will be announced on the site or by e-mail.