01 – Introduction
Hosaraz is a brand of Helena Manso, Lda. (VAT No.: 502488123), headquartered at Rua Estação dos Caminhos de Ferro 41 A-1º-dto, 7540-157 Santiago do Cacém, Portugal. Hosaraz operates the online shop www.hosaraz.com.
This Privacy and Cookies Policy explains how we collect, use, share, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and Portuguese law.
Personal data means any information that, directly or indirectly, identifies an individual (e.g., name, email, address, phone number, location data, etc.).
02 – Data Controller
Helena Manso, Lda. is the entity responsible for processing your personal data.
For privacy-related queries, you may contact us via:
- Email: privacidade@helenamanso.pt
- Registered post: Rua Estação dos Caminhos de Ferro 41 A-1º-dto, 7540-157 Santiago do Cacém
03 – What Personal Data Do We Collect and For What Purpose?
We only collect data necessary for the following purposes:
| Purpose | Data Collected | Legal Basis | Retention Period |
|---|---|---|---|
| Customer Management | Name, address, email, phone, VAT number (optional) | Performance of a contract | 2 years after inactivity |
| Order Processing | Delivery address, payment details (e.g., credit card, IBAN) | Performance of a contract | 10 years (legal accounting obligation) |
| Marketing & Newsletters | Email, purchase history | Consent (revocable at any time) | 2 years after inactivity |
| Profiling | Purchase history, preferences | Legitimate interest (service improvement) | 2 years after inactivity |
| Customer Support | Contact details, communication history | Consent or legitimate interest | Until request resolution |
04 – Cookies: What Are They and How Do We Use Them?
Cookies are small text files stored on your device (computer, mobile, or tablet) when you visit our website. We use cookies to:
- Improve navigation (e.g., save language preferences).
- Analyse traffic (e.g., identify most visited pages).
- Personalise content (e.g., recommend products based on your history).
- Ensure security (e.g., protect against fraud).
Types of Cookies We Use
| Type | Description | Example |
|---|---|---|
| Essential | Necessary for website functionality (e.g., login, shopping cart). | Session cookies for authentication. |
| Functionality | Store user preferences (e.g., language, currency). | Cookies to remember font size. |
| Analytical | Collect anonymous data on website usage (e.g., pages visited). | Google Analytics. |
| Advertising | Display personalised ads (e.g., campaigns on Facebook or Google). | Facebook Pixel cookies. |
How to Manage Cookies?
- Accept/Reject Cookies: When you visit the site, a consent banner will allow you to accept, reject, or customise your preferences.
- Change Preferences: You can manage cookies at any time in your browser settings (e.g., Chrome, Firefox, Safari).
- Consequences of Rejecting Cookies: Some cookies are essential for website functionality. Blocking them may limit certain features.
Note: We do not use cookies to collect sensitive personal data without your explicit consent.
05 – Sharing of Personal Data
Your data may be shared with trusted third parties for the following purposes:
| Third Party | Purpose | Data Shared |
|---|---|---|
| Nacex/Couriers | Order delivery | Name, address, phone |
| Lusopay/PayPal | Payment processing | Name, email, payment details |
| Google Analytics | Website traffic analysis | Anonymous navigation data |
| E-Goi | Marketing automation (e.g., newsletter dispatch) | Email, purchase history |
| Jasmim (Cegid) | Invoicing and accounting | Fiscal data |
| Karma Design | Website hosting and maintenance | Technical data (e.g., IP) |
Security Guarantees:
- All third parties are obliged to protect your data and may not use it for other purposes.
- Data is stored within the European Union and not transferred to countries without adequate protection.
06 – Data Security
We implement technical and organisational measures to protect your data, including:
- Data encryption (e.g., HTTPS protocols).
- Restricted access to internal systems.
- Staff training on data protection.
Recommendations for Users:
- Use secure networks when entering personal data.
- Keep your devices and software updated (e.g., antivirus).
- Do not share access codes with third parties.
07 – Rights of Data Subjects
Under GDPR, you have the following rights:
- Access: Request a copy of your data.
- Rectification: Correct inaccurate data.
- Erasure: Request deletion of your data (except where legal retention is required).
- Objection: Oppose the processing of your data (e.g., for marketing).
- Portability: Receive your data in a machine-readable format.
- Restriction: Request suspension of data processing.
How to Exercise Your Rights?
- Send an email to privacidade@helenamanso.pt or a registered letter to the address provided.
- Include a copy of your ID to confirm your identity.
- We will respond within 1 month.
08 – Right to Lodge a Complaint
If you believe your data is not being processed in compliance with GDPR, you may file a complaint with the Portuguese Data Protection Authority (CNPD):
- Address: R. de São Bento 148, 1200-031 Lisbon
- Website: www.cnpd.pt
09 – Changes to This Policy
This policy may be updated periodically. We will notify users via the website or email in case of significant changes.
Last updated: 2026-03-01
10 – Language
The official version of this policy is in Portuguese (Portugal). In case of discrepancy with other language versions, the Portuguese version prevails.
11 – Contact Us
For privacy-related queries:
- Email: privacidade@helenamanso.pt
- Address: Rua Estação dos Caminhos de Ferro 41 A-1º-dto, 7540-157 Santiago do Cacém