Privacy Policy
Last updated: 12 October 2026
This policy explains what personal data Saline collects when you visit the site, make a purchase, subscribe to the newsletter or ask us for a made-to-order piece, what we use it for, who we share it with and what rights you have. We've written it to be read: if anything isn't clear, just ask us.
1. Who we are
The data controller is Maria Bôto, a self-employed worker, trading under the business name Saline Home Decor, with address at Rua do Sol Nascente 13, 2640-265 Encarnação, Mafra, Portugal.
For any matter regarding your data, write to geral@salinehomedecor.com.
2. What data we collect and why
| When | What data | Why | Legal basis | How long |
|---|---|---|---|---|
| You place an order | Name, shipping and billing address, email, phone, tax number (if provided), pieces purchased, order notes, chosen payment method | Preparing and sending the order, issuing the invoice, handling exchanges and returns, and talking to you about the order (including arranging a hand delivery) | Performance of the purchase contract and legal obligations (invoicing) | Billing data is kept for 10 years, as required by tax law; the remaining order data is kept for as long as necessary for warranties and returns |
| You create an account | Name, email, password (stored encrypted), addresses | Viewing your orders and shopping faster | Performance of the contract | Until you delete the account or ask us to delete it |
| You subscribe to the newsletter or the welcome popup | Name and email | Sending you the welcome coupon, new pieces, fair dates and member discounts | Consent | Until you unsubscribe |
| You request a made-to-order piece | Name, email, phone (optional), measurements, colour, description and photos you send | Preparing a proposal and making the piece | Pre-contractual steps at your request | Up to 2 years after the last contact, if no order is placed |
| You receive the review request | Name, email and order; rating, text and name to display, if you leave a review | Finding out how the piece turned out and publishing verified reviews in the shop | Legitimate interest in understanding customer satisfaction | Reviews remain published until you ask us to remove them |
| You contact us by email or Instagram | The data you send us | Replying to you | Legitimate interest | The time needed to process your order |
| You visit the site | IP address, browser, pages visited, source of the visit | Security and operation of the site; statistics and ad measurement, if you accept (see point 5) | Legitimate interest (security) and consent (statistics and marketing) | Server logs: a few weeks; statistics: up to 14 months |
The review request
About 10 days after an order is shipped, we send a single email with a personal link for you to review the pieces you bought. The review is optional. If you leave one, and after we check it, we publish the rating, the text and the name you choose to show on the piece's page, with the note "verified purchase"; your email is never published. If you don't want to receive this email, just reply or write to us. You can ask us at any time to remove your review.
3. Payments
We don't see or store card numbers. Payments are processed directly by the payment providers, who handle that data independently and according to their own privacy policies:
- Card, Apple Pay and Google Pay: WooPayments (Automattic, with Stripe);
- PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A.;
- Multibanco and MB WAY: ifthenpay.
To protect payments against fraud, checkout uses Google's reCAPTCHA.
4. Who we share your data with
We don't sell your data. We only share it with those who help us operate, to the extent necessary:
- Site and email hosting: Hostinger International Ltd., with servers in the European Union (France).
- Payment providers: those listed in point 3.
- Shipping: CTT – Correios de Portugal, S.A., which receives the name, address and phone number to make the delivery.
- Google (Google Ireland Ltd.): site statistics (Google Analytics), ad measurement (Google Ads) and checkout protection (reCAPTCHA).
- Meta (Meta Platforms Ireland Ltd.): ad measurement on Facebook and Instagram (Meta pixel).
- Accounting and Tax Authority: billing data, as required by law.
Some of these providers (Google, Meta, Stripe and PayPal) may transfer data outside the European Union, namely to the United States. These transfers are made under the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.
5. Cookies, statistics and ads
We use cookies necessary for the site to work (basket, session, language and your cookie preferences). Statistics cookies (Google Analytics, visit source) and marketing cookies (Google Ads and Meta pixel) are only activated if you accept them in the cookie notice. You can change your choice at any time.
If you accept marketing cookies and make a purchase, we send Google an encrypted (hashed) version of your contact details, such as your email, to measure which ads led to purchases ("optimised conversions"). Google does not receive this data in readable text.
The full list of cookies, with the duration of each one, is on the cookie policy.
6. Your rights
You can ask us at any time to:
- access the data we hold about you and receive a copy;
- correct wrong or incomplete data;
- delete your data, except what we're required by law to keep (for example, invoices);
- restrict or object to processing, including sending marketing communications;
- receive your data in a format you can take to another service (portability);
- withdraw consent you've given (for example, to the newsletter), without affecting anything done before.
Write to geral@salinehomedecor.com. We'll reply within one month. If you feel we haven't handled your data properly, you can file a complaint with the Comissão Nacional de Proteção de Dados (www.cnpd.pt).
7. Security
The site uses an encrypted connection (HTTPS), passwords are stored encrypted, and access to the shop's management is limited to people who work at Saline. No system is completely secure, but if a breach affecting your data occurs, we'll notify you and the CNPD, as required by law.
8. Minors
The shop is not aimed at anyone under 16 years old, and we don't knowingly collect data from minors.
9. Changes to this policy
If we change how we handle your data, we'll update this page and the date at the top. If the change is significant, we'll notify customers and subscribers by email.
