Privacy policy

Privacy Policy

Last updated: 25 September 2026

This Privacy Policy explains how personal data is processed when you visit or use Synarava Shop, make a purchase or contact Synarava.

1. Personal Data We Collect

Depending on how you use Synarava Shop, we may process:

  • Contact and identification data, such as your name, email address, telephone number, billing address and delivery address.
  • Order and transaction data, such as products purchased, order history, returns, refunds and delivery information.
  • Payment information. Payments are processed through payment providers. Synarava Shop does not store complete payment card details.
  • Customer account data, such as account information, preferences and order history.
  • Communications, including information you provide when contacting Synarava.
  • Website and device data, such as IP address, browser and device information and interactions with the website.
  • Privacy and marketing preferences, including cookie and consent choices.

2. How We Use Personal Data

Personal data may be processed to:

  • provide and manage customer accounts;
  • process orders, payments, delivery, returns and refunds;
  • send order and delivery communications;
  • respond to questions, requests and complaints;
  • prevent fraud and protect the security of the shop;
  • comply with legal, tax and accounting obligations;
  • establish, exercise or defend legal claims;
  • provide analytics, personalisation or marketing where permitted by law and, where required, with your consent.

3. Legal Basis

Depending on the purpose, personal data is processed on one or more of the following legal bases:

  • Contract, where processing is necessary to take steps before a purchase or fulfil an order.
  • Legal obligation, where processing is required by applicable law.
  • Legitimate interests, where necessary for fraud prevention, security, customer service or the protection of legal rights, provided those interests are not overridden by your rights and freedoms.
  • Consent, where consent is required, including for certain cookies, analytics, personalisation or marketing. You may withdraw your consent at any time.

4. Shopify and Data Sharing

Synarava Shop is hosted by Shopify. Shopify collects and processes personal data to provide the ecommerce platform and related services, including Shopify Enhanced Services where enabled.

Information about your activity on Synarava Shop may be shared with Shopify and service providers, including providers located in other countries, to provide these services. Shopify may process certain personal data as an independent controller for its Enhanced Services.

Personal data may also be shared, where necessary, with payment providers, delivery and logistics providers, technology and security providers, professional advisers and public authorities.

Where required, appropriate safeguards or other lawful mechanisms are used for transfers of personal data outside the European Economic Area.

For more information about Shopify's processing of personal data and applicable privacy choices, see the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers

Shopify Privacy Portal:
https://privacy.shopify.com/

5. Retention

Personal data is kept only for as long as necessary for the purposes for which it was collected and to meet applicable legal, tax, accounting and regulatory requirements.

Retention periods depend on the type of data, the purpose of processing and applicable legal requirements. When personal data is no longer required, it is deleted or anonymised unless continued retention is required or permitted by law.

6. Your Rights

Subject to applicable data protection law, you may have the right to:

  • access your personal data;
  • correct inaccurate or incomplete personal data;
  • request deletion of personal data;
  • request restriction of processing;
  • object to certain processing;
  • request data portability where applicable;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with a competent supervisory authority.

In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).

To exercise your rights regarding data controlled by Synarava, contact shop@synarava.com.

For data processed independently by Shopify for its Enhanced Services, applicable rights can also be exercised through the Shopify Privacy Portal.

7. Cookies

Synarava Shop uses cookies and similar technologies necessary for the operation of the website.

Optional cookies and similar technologies are used only where permitted by law and, where required, with your consent.

You can manage optional cookies through Cookie Settings.

8. Security

Reasonable technical and organisational measures are used to protect personal data against accidental or unlawful loss, alteration, disclosure or access.

9. Data Controller and Contact

Information about the data controller and contact details is available in the Contact Information section of the website.