Privacy Policy

Privacy Policy

Last updated: 16/05/2026

This Privacy Policy explains how Joana d’Arq (“we”, “us”, “our”) collects, uses and protects your personal information when you browse or shop on this website.

By using this website, you agree to the terms described below.

1. Who We Are

Business Name: Joana d’Arq
Legal Form: ENI – Empresário em Nome Individual
Business Address: Rua do Engenho, 132 A, 4795-466 São Martinho do Campo, Portugal
Email: hello@joanadarq.pt
VAT: PT223219509

We are the data controller responsible for the information you provide.

2. What Personal Data We Collect

We collect personal data only when necessary to process your order or provide services.
This may include:

Information you provide directly

  • Name

  • Email address

  • Billing and shipping address

  • Phone number (if voluntarily provided)

  • Payment details (processed securely by our payment providers, not stored by us)

  • Order information

  • Any information sent via email or contact form

Information collected automatically

Our website is hosted on Squarespace, which automatically collects basic technical data such as:

  • IP address

  • Browser type

  • Device information

  • Pages visited

  • Cookies strictly necessary for website functionality

We do not use Google Analytics, advertising trackers, or any other third-party marketing cookies.

3. Legal Basis for Processing

We process personal data under the following legal bases, according to the GDPR:

  • Contractual necessity: to process your order, ship products, handle returns/exchanges, or provide customer support.

  • Legal obligation: tax and accounting records required by Portuguese law.

  • Consent: for optional cookies (if applicable), or if you subscribe to a newsletter (if added in the future).

  • Legitimate interests: to maintain website security and prevent fraud.

4. How We Use Your Personal Data

Your information may be used to:

  • Process and fulfill orders

  • Communicate with you about your order

  • Respond to customer service inquiries

  • Issue invoices and comply with legal obligations

  • Improve site functionality and prevent misuse

  • Maintain internal records

We do not sell, trade, or rent your personal data.

5. Sharing Your Information

We only share your data with trusted third parties necessary for running our business:

  • Squarespace: site hosting, infrastructure, and secure checkout

  • Payment processors: Multibanco, MB Way, Visa, Mastercard (we never see or store your card details)

  • Shipping carriers: for delivery of orders

  • Accounting services (if applicable): for tax compliance

All third parties process data in accordance with GDPR.

We do not share your data with advertisers or external analytics providers.

6. International Transfers

Your data may be stored on servers operated by Squarespace, which may be located outside the EU.
Squarespace complies with GDPR requirements through appropriate safeguards such as Standard Contractual Clauses.

7. Data Retention

We keep your data only for as long as necessary:

  • Order and invoicing data: minimum 10 years (legal obligation in Portugal)

  • Customer messages: as long as needed to respond

  • Cookies: according to their expiration time

After these periods, data is securely deleted.

8. Your Rights (GDPR)

You have the right to request:

  • Access to your data

  • Correction of inaccurate data

  • Deletion (“right to be forgotten”)

  • Restriction of processing

  • Portability

  • Objection to certain types of processing

  • Withdrawal of consent, when consent applies

To exercise your rights, contact: hello@joanadarq.pt

If you believe your data is misused, you may lodge a complaint with the Portuguese Data Protection Authority (CNPD).

9. Cookies

We use cookies necessary for website function and basic Squarespace performance features.

We do not use advertising, profiling, or third-party marketing cookies.

10. Security

We take reasonable technical and organizational measures to protect your data from loss, unauthorized access or disclosure.

However, no online system can be 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time.
The latest version will always be available on this page with an updated date.

12. Contact

For questions about privacy, data protection or this policy, contact:
hello@joanadarq.pt