Draft — review with a lawyer. This text is an outline for the shop. It does not replace a legal opinion.
Controller
In this draft, the controller is CodePept, in Portugal, reachable at apoio@codepept.com.
The address and tax number are not published yet. They enter before commercial opening. We do not name a data protection officer who does not exist yet.
What data comes in
The contact form does not store the message on our server. It opens the email app of the person writing.
The cart stays in the browser, in localStorage. When Stripe payment returns, Stripe receives the data needed for the charge and the shipping address.
Legal bases
The bases foreseen, to confirm with a lawyer, are these: steps toward a contract, when there is an order; a legal obligation, if invoicing requires it; legitimate interest in site security.
Consent is reserved for non-essential cookies. In this version those cookies do not exist.
Retention
We do not set a number of years here. Contact messages do not stay on our server. The cart remains in your browser until you clear it.
Data that Stripe or a carrier later processes follow their period and what Portuguese law requires. The calendar will be written with a lawyer.
Rights
You may request access, rectification, erasure, restriction, portability, and objection. You may also complain to the CNPD. The request goes to apoio@codepept.com.
The deadline and the response process will be defined with a lawyer. This page does not invent them.
Processors
Stripe, for payments, when checkout is active. The carrier, for the delivery address, when there is shipment.
Analytics: none in this version of the shop. We do not list other recipients because they do not exist yet.
If Stripe or a carrier processes data outside the EEA, the appropriate mechanism will be stated after review. We do not describe a flow that is not connected yet.
What this note does not do
Research use only (RUO). Not for human consumption. Order data are not used to describe use in people.
No clinical claims. Not assessed by the EMA or INFARMED for therapeutic use.