Privacy policy
PRIVACY POLICY
Last updated: August 1, 2026
1. INTRODUCTION
Altessa Maison is an online retail brand operated by Matheus Soares, established in Portugal.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit, use or make a purchase from our website, altessamaison.com, communicate with us or otherwise interact with our services.
In this Privacy Policy, “Altessa Maison”, “we”, “us” and “our” refer to Matheus Soares, trading as Altessa Maison.
“Services” refers to our website, online store, products, customer support, communications, advertising and any related services provided by Altessa Maison.
By using our Services, you acknowledge that your personal information will be handled as described in this Privacy Policy.
This Privacy Policy does not override any rights that cannot legally be excluded under the laws applicable in your country.
2. DATA CONTROLLER
For the purposes of the European Union General Data Protection Regulation, the United Kingdom General Data Protection Regulation and other applicable privacy laws, the data controller responsible for your personal information is:
Altessa Maison
Operated by Matheus Soares
Business address:
Rua Biologia 90
2870-271 Montijo
Portugal
Email: contact@altessamaison.com
Phone: +351 916 854 538
3. PERSONAL INFORMATION WE COLLECT
The personal information we collect depends on how you interact with our Services.
We may collect the following categories of information:
3.1 Identity and contact information
This may include:
• Full name;
• Billing address;
• Shipping address;
• Email address;
• Telephone number;
• Country or region;
• Customer account information;
• Communication preferences.
3.2 Order and transaction information
This may include:
• Products purchased or considered;
• Product size, colour and variant selections;
• Order number;
• Purchase date;
• Order value;
• Currency;
• Discounts and promotional codes;
• Shipping method;
• Delivery status;
• Returns, exchanges and refunds;
• Customer support history;
• Information relating to payment disputes or chargebacks.
3.3 Payment information
Payments are processed by Shopify Payments and other payment providers made available during checkout.
Depending on the payment method selected, payment providers may collect:
• Payment card details;
• Bank account information;
• Billing information;
• Payment authentication information;
• Transaction identifiers;
• Fraud and security information.
Altessa Maison does not normally receive or store your complete payment card number, card security code or full banking credentials.
Payment providers process payment information according to their own privacy policies and legal obligations.
3.4 Device and technical information
When you access our website, we and our service providers may automatically collect:
• Internet Protocol address;
• Browser type and version;
• Device type;
• Operating system;
• Device identifiers;
• Language and time-zone settings;
• Referring website;
• Pages viewed;
• Links clicked;
• Products viewed;
• Shopping cart activity;
• Date and time of access;
• Session information;
• Approximate location derived from the IP address;
• Cookie and similar technology identifiers;
• Website performance and diagnostic information.
3.5 Communications and customer support information
When you contact us, we may collect:
• Emails and messages;
• Customer service requests;
• Telephone communications;
• Return and refund requests;
• Product complaints;
• Photographs and videos submitted as evidence;
• Delivery or damage information;
• Feedback and survey responses;
• Any information you voluntarily provide to us.
3.6 Marketing and preference information
This may include:
• Newsletter subscription status;
• Email and SMS marketing preferences;
• Cookie preferences;
• Advertising preferences;
• Products and categories that may interest you;
• Responses to marketing campaigns;
• Information about whether marketing communications were opened or clicked.
3.7 Reviews and user-submitted content
If you submit a product review, photograph, testimonial or other content, we may collect and publish:
• Your chosen display name;
• Review rating;
• Review text;
• Photographs or videos;
• Product purchased;
• Date of the review;
• Verified-purchase status, where available.
Please do not include sensitive, private or unnecessary personal information in publicly submitted content.
3.8 Fraud prevention and security information
We may collect or receive information used to identify suspicious transactions, protect accounts and prevent fraud, including:
• IP address;
• Device information;
• Transaction history;
• Billing and shipping inconsistencies;
• Payment verification results;
• Risk indicators;
• Suspected fraudulent activity;
• Chargeback or dispute information.
4. HOW WE COLLECT PERSONAL INFORMATION
We may collect personal information from the following sources:
4.1 Directly from you
We collect information when you:
• Visit or browse our website;
• Create or use a customer account;
• Add products to your cart;
• Place an order;
• Enter payment or delivery information;
• Subscribe to marketing communications;
• Contact customer support;
• Request a return or refund;
• Submit a review;
• Participate in a survey or promotion;
• Communicate with us through email, telephone, social media or another channel.
4.2 Automatically
We may automatically collect technical and usage information through:
• Cookies;
• Pixels;
• Tags;
• Software development kits;
• Server logs;
• Local storage;
• Analytics technologies;
• Advertising technologies;
• Similar tracking tools.
4.3 From service providers and business partners
We may receive information from:
• Shopify;
• Payment processors;
• Fraud-prevention providers;
• Shipping carriers;
• Fulfilment partners;
• Warehouses and suppliers;
• Returns providers;
• Analytics providers;
• Advertising platforms;
• Social media platforms;
• Customer support tools;
• Email and SMS service providers.
5. HOW WE USE PERSONAL INFORMATION
We may use personal information for the following purposes:
5.1 Providing our Services and fulfilling orders
We use personal information to:
• Process and confirm orders;
• Receive and verify payments;
• Prepare and fulfil purchases;
• Arrange shipping and delivery;
• Provide tracking information;
• Communicate order updates;
• Process returns, refunds and cancellations;
• Manage customer accounts;
• Respond to questions and requests;
• Provide customer support;
• Maintain records of transactions.
5.2 Communicating with you
We may use your contact information to send:
• Order confirmations;
• Payment confirmations;
• Shipping and delivery updates;
• Return or refund communications;
• Security notices;
• Important service information;
• Responses to customer support requests;
• Changes to our policies or Services.
5.3 Improving and personalising our Services
We may use information to:
• Understand how customers use our website;
• Improve website navigation and performance;
• Analyse product demand;
• Improve our product selection;
• Personalise content and recommendations;
• Diagnose technical problems;
• Test new website features;
• Measure customer satisfaction.
5.4 Marketing and advertising
Where permitted by law, we may use personal information to:
• Send promotional emails or messages;
• Recommend products;
• Measure marketing performance;
• Create advertising audiences;
• Display relevant advertisements;
• Limit repeated advertisements;
• Understand whether advertising resulted in visits or purchases.
Where consent is legally required, we will use advertising cookies, personalised advertising technologies or electronic marketing only after obtaining the appropriate consent.
You may withdraw your marketing consent or unsubscribe at any time.
5.5 Fraud prevention, security and enforcement
We may use information to:
• Verify transactions;
• Detect and prevent fraud;
• Protect our website and customers;
• Investigate suspicious activity;
• Prevent unauthorised account access;
• Respond to chargebacks and payment disputes;
• Enforce our terms and policies;
• Protect our legal rights and property;
• Protect the safety of customers, service providers and the public.
5.6 Compliance with legal obligations
We may process information to:
• Maintain tax and accounting records;
• Comply with consumer protection obligations;
• Respond to lawful requests from authorities;
• Comply with court orders and legal processes;
• Investigate or defend legal claims;
• Meet customs, product safety and regulatory requirements;
• Comply with applicable privacy and data protection laws.
6. LEGAL BASES FOR PROCESSING
Where the European Union GDPR, United Kingdom GDPR or a similar law applies, we rely on one or more of the following legal bases:
6.1 Performance of a contract
We process personal information when necessary to:
• Process your order;
• Receive payment;
• Deliver products;
• Provide customer support;
• Process returns and refunds;
• Perform our contractual obligations;
• Take steps at your request before entering into a contract.
6.2 Compliance with a legal obligation
We process information when necessary to comply with:
• Tax and accounting obligations;
• Consumer protection laws;
• Product safety requirements;
• Customs requirements;
• Court orders;
• Regulatory requests;
• Other applicable legal obligations.
6.3 Legitimate interests
We may process information where necessary for our legitimate interests or those of a third party, provided that those interests are not overridden by your fundamental rights and freedoms.
These interests may include:
• Operating and improving our business;
• Securing our website;
• Preventing fraud;
• Providing customer support;
• Managing disputes;
• Measuring business performance;
• Understanding product demand;
• Protecting our legal rights;
• Sending certain communications to existing customers where legally permitted.
6.4 Consent
We rely on consent when legally required, including for:
• Non-essential cookies;
• Personalised advertising;
• Certain analytics technologies;
• Email or SMS marketing;
• Other optional processing activities.
You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.
6.5 Legal claims and substantial public interests
Where applicable, we may process information when necessary to establish, exercise or defend legal claims or where otherwise authorised by applicable law.
7. COOKIES AND SIMILAR TECHNOLOGIES
We and our service providers use cookies and similar technologies to operate, secure, analyse and improve our website.
Cookies are small files stored on your browser or device.
We may use the following categories of cookies:
7.1 Strictly necessary cookies
These cookies are required for essential website functions, including:
• Shopping cart functionality;
• Checkout;
• Payment processing;
• Account login;
• Security;
• Fraud prevention;
• Cookie preference storage;
• Website navigation.
These cookies generally cannot be disabled through our cookie banner because the website may not function correctly without them.
7.2 Functional cookies
These cookies help remember choices such as:
• Language;
• Country;
• Currency;
• Account preferences;
• Recently viewed products.
7.3 Analytics cookies
These cookies help us understand:
• How visitors use our website;
• Which pages are most frequently viewed;
• Whether errors occur;
• How marketing campaigns perform;
• How website performance can be improved.
7.4 Advertising cookies
Where enabled and legally permitted, advertising cookies may be used to:
• Measure advertisements;
• Create advertising audiences;
• Personalise advertisements;
• Understand interactions across websites;
• Reduce repeated advertisements;
• Attribute purchases to advertising campaigns.
7.5 Managing cookie preferences
Where required by law, non-essential cookies will not be activated until you provide consent.
You can manage or withdraw your consent through the cookie banner or privacy preference controls available on our website.
You can also adjust cookie settings through your browser. Disabling certain cookies may affect website functionality.
Withdrawal of consent does not affect processing that occurred before the withdrawal.
8. SHOPIFY
Our online store is hosted by Shopify.
Shopify provides the e-commerce platform that allows us to display products, manage orders, process checkout and operate our online store.
Shopify may process personal information on our behalf as a service provider. For certain services and features, Shopify may also process information for its own purposes as described in its privacy policies.
Shopify and its affiliated companies may process personal information in countries other than the country where you live.
You can learn more about how Shopify processes consumer information at:
https://www.shopify.com/legal/privacy/consumers
You can exercise privacy choices relating to certain processing performed by Shopify through the Shopify Privacy Portal:
https://privacy.shopify.com/
9. SHOPIFY NETWORK INTELLIGENCE AND ENHANCED SERVICES
Where Shopify Network Intelligence or related Enhanced Services are enabled for our store, Shopify may use customer information together with information from interactions with other Shopify merchants to improve services, personalisation, fraud prevention, advertising measurement or advertising relevance.
Where required in the European Economic Area, United Kingdom or Switzerland, this processing for personalised advertising will be subject to consent.
You may manage consent through our cookie and privacy controls and may exercise certain choices through the Shopify Privacy Portal:
https://privacy.shopify.com/
10. HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information only where reasonably necessary for the purposes described in this Privacy Policy.
10.1 Shopify
We disclose information to Shopify so that Shopify can host and operate our online store and provide checkout, account, security, fraud-prevention and e-commerce services.
10.2 Payment providers
We disclose transaction and payment-related information to payment providers to:
• Process payments;
• Authenticate transactions;
• Detect fraud;
• Issue refunds;
• Resolve disputes and chargebacks.
10.3 Shipping, fulfilment and returns providers
We may disclose your name, address, telephone number, email address and order information to:
• Shipping carriers;
• Postal services;
• Fulfilment centres;
• Warehouses;
• Product suppliers;
• Customs agents;
• Returns providers.
These recipients use the information to prepare, ship, deliver, track, clear through customs or return your order.
10.4 Technology and business service providers
We may use service providers for:
• Website hosting;
• Customer support;
• Email delivery;
• SMS delivery;
• Cloud storage;
• Cybersecurity;
• Fraud prevention;
• Analytics;
• Review management;
• Accounting;
• Tax compliance;
• Business administration.
These providers may access personal information only as necessary to provide their services and subject to contractual or legal obligations.
10.5 Advertising and analytics partners
Where permitted and, where required, after obtaining consent, we may disclose online identifiers, website activity and purchase-related information to analytics and advertising partners.
Under certain United States privacy laws, some advertising disclosures may be considered “selling”, “sharing” or processing for “targeted advertising”, even when no money is exchanged.
10.6 Professional advisers
We may disclose information to:
• Accountants;
• Lawyers;
• Insurers;
• Auditors;
• Tax advisers;
• Consultants.
This may occur when necessary to operate our business, comply with law or establish, exercise or defend legal claims.
10.7 Authorities and legal processes
We may disclose information when we reasonably believe disclosure is necessary to:
• Comply with applicable law;
• Respond to a valid court order;
• Respond to a lawful government request;
• Investigate fraud or illegal activity;
• Protect our rights;
• Protect customers or the public;
• Enforce our agreements and policies.
10.8 Business transfers
If Altessa Maison is involved in a sale, merger, restructuring, financing, transfer of assets or similar transaction, personal information may be disclosed to advisers and potential parties involved in the transaction.
Any recipient will be required to handle personal information in accordance with applicable law.
11. SALE, SHARING AND TARGETED ADVERTISING
Altessa Maison does not sell personal information in exchange for money.
However, the use of certain advertising, analytics or personalisation technologies may be considered a “sale”, “sharing” or “targeted advertising” activity under privacy laws in some United States jurisdictions.
Where applicable, you may opt out by:
• Using the “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” control displayed on our website;
• Changing your cookie preferences;
• Enabling a legally recognised browser-based opt-out signal, such as Global Privacy Control;
• Contacting us at contact@altessamaison.com.
We do not knowingly sell or share the personal information of children for targeted advertising.
12. INTERNATIONAL DATA TRANSFERS
Altessa Maison is established in Portugal, but Shopify and some of our service providers may operate in other countries, including countries outside the European Economic Area, Switzerland or the United Kingdom.
As a result, personal information may be transferred to or processed in countries whose data protection laws differ from those in your country.
Where required, we use appropriate legal safeguards for international transfers, which may include:
• European Commission adequacy decisions;
• United Kingdom adequacy regulations;
• European Commission Standard Contractual Clauses;
• The United Kingdom International Data Transfer Agreement;
• The United Kingdom Addendum to the Standard Contractual Clauses;
• Other transfer mechanisms permitted by law.
You may contact us for additional information about the safeguards applicable to a particular transfer.
13. DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, tax, accounting, security, fraud-prevention and dispute-resolution purposes.
Retention periods depend on:
• The nature of the information;
• The purpose for which it was collected;
• Whether you maintain an account with us;
• Whether an order or dispute remains open;
• Applicable legal requirements;
• Relevant limitation periods;
• The need to prevent fraud or enforce agreements.
13.1 Order, invoice and tax records
Order, transaction, invoice and related accounting records may be retained for up to 10 calendar years, or for a longer period where required by applicable law.
13.2 Customer accounts
Customer account information may be retained while the account remains active and afterwards where necessary to comply with legal obligations, resolve disputes or prevent fraud.
13.3 Customer support and disputes
Customer communications, returns, refunds, complaints and dispute records may be retained for as long as necessary to resolve the matter and for the applicable legal limitation period.
13.4 Marketing information
Marketing information is retained until:
• You unsubscribe;
• You withdraw consent;
• The information is no longer needed;
• Retention is no longer permitted by law.
We may retain limited suppression-list information to ensure that we respect an unsubscribe or opt-out request.
13.5 Cookie and analytics information
Cookie and analytics information is retained according to the duration of the relevant cookie, consent choice, service configuration and applicable legal requirements.
When personal information is no longer required, we will delete, anonymise or securely isolate it, unless continued retention is legally required.
14. DATA SECURITY
We use reasonable administrative, organisational and technical measures designed to protect personal information against:
• Unauthorised access;
• Accidental loss;
• Misuse;
• Alteration;
• Disclosure;
• Destruction.
These measures may include:
• Encrypted connections;
• Access restrictions;
• Authentication controls;
• Secure payment providers;
• Fraud detection;
• Service-provider reviews;
• Security monitoring.
No method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security.
You are responsible for keeping your account credentials confidential and should contact us immediately if you suspect unauthorised use of your account.
15. AUTOMATED PROCESSING AND FRAUD SCREENING
We and our service providers may use automated tools to analyse transactions and identify suspected fraud, abuse, security threats or payment risks.
These tools may consider information such as:
• IP address;
• Device information;
• Transaction value;
• Order history;
• Payment verification;
• Billing and shipping inconsistencies;
• Fraud indicators.
A transaction may be flagged for additional review, delayed or cancelled where we reasonably believe it presents a fraud or security risk.
We do not intend to make decisions that produce legal or similarly significant effects solely through automated processing, except where permitted by law and subject to appropriate safeguards.
16. YOUR PRIVACY RIGHTS
Depending on where you live, you may have some or all of the following rights:
16.1 Right of access
You may request confirmation of whether we process your personal information and request a copy of that information.
16.2 Right to correction
You may request correction of inaccurate or incomplete personal information.
16.3 Right to deletion
You may request deletion of personal information, subject to legal exceptions.
We may retain certain information where necessary to:
• Comply with law;
• Maintain tax or transaction records;
• Complete a contract;
• Prevent fraud;
• Resolve disputes;
• Establish, exercise or defend legal claims.
16.4 Right to restriction
You may request that we temporarily restrict certain processing activities.
16.5 Right to object
You may object to processing based on legitimate interests.
You have the right to object at any time to processing for direct marketing purposes.
16.6 Right to data portability
Where legally applicable, you may request personal information in a structured, commonly used and machine-readable format or request that it be transmitted to another controller.
16.7 Right to withdraw consent
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal will not affect processing performed before consent was withdrawn.
16.8 Right to opt out of sale, sharing or targeted advertising
Where applicable under United States state privacy laws, you may opt out of:
• The sale of personal information;
• The sharing of personal information;
• Processing for targeted advertising.
16.9 Right to limit sensitive personal information
Where applicable, you may request that the use or disclosure of sensitive personal information be limited to purposes necessary to provide the Services.
16.10 Right to non-discrimination
We will not unlawfully discriminate against you because you exercised a privacy right.
16.11 Right to complain
You may lodge a complaint with the data protection authority in your country.
Because Altessa Maison is established in Portugal, you may also contact:
Comissão Nacional de Proteção de Dados
Portugal
Website:
https://www.cnpd.pt/
17. EXERCISING YOUR PRIVACY RIGHTS
To exercise a privacy right, contact us at:
Email: contact@altessamaison.com
Phone: +351 916 854 538
Please state:
• Your name;
• Your email address;
• Your order number, where relevant;
• The country or state where you live;
• The right you wish to exercise;
• Sufficient information to identify the relevant records.
We may request additional information to verify your identity and protect your personal information.
Information collected for verification will be used only to process and document your request.
We will respond within the period required by applicable law.
In some circumstances, we may deny or limit a request where permitted by law. If this occurs, we will explain the reason unless legally prohibited from doing so.
18. AUTHORISED AGENTS
Where permitted by law, you may designate an authorised agent to submit a privacy request on your behalf.
We may require:
• Written proof of the agent’s authority;
• Verification of your identity;
• Direct confirmation that you authorised the request.
This does not prevent an agent acting under a legally valid power of attorney.
19. APPEALS
Residents of jurisdictions that provide a right to appeal may appeal a refusal of a privacy request by replying to our decision or emailing:
contact@altessamaison.com
Please include “Privacy Request Appeal” in the subject line.
We will review the appeal and respond within the period required by applicable law.
20. EMAIL AND SMS MARKETING
You may unsubscribe from promotional emails at any time by:
• Clicking the unsubscribe link in the email;
• Contacting contact@altessamaison.com;
• Adjusting available account or communication preferences.
If we offer SMS marketing, you may opt out by following the instructions contained in the message or by contacting us.
Even after opting out of marketing, we may continue to send necessary transactional communications concerning:
• Orders;
• Deliveries;
• Returns;
• Refunds;
• Security;
• Legal or policy updates;
• Customer support.
21. CHILDREN’S PRIVACY
Our Services are not directed to children.
We do not knowingly collect personal information from children below the minimum age at which they may legally provide consent in their jurisdiction.
If you are a parent or legal guardian and believe that a child has provided personal information to us, contact:
contact@altessamaison.com
If appropriate and legally required, we will take reasonable steps to delete the information.
22. THIRD-PARTY WEBSITES AND SERVICES
Our website may contain links to websites, applications or services operated by third parties.
We do not control and are not responsible for the privacy, content or security practices of those third parties.
You should review the privacy policy of any third-party service before providing personal information.
23. USER-GENERATED AND PUBLIC INFORMATION
Information submitted in a public review, testimonial, social media post or other public area may be visible to other people.
Do not include information that you do not want to be publicly available.
Where permitted, you may contact us to request removal of content you submitted. Removal from our website may not remove copies previously shared or indexed elsewhere.
24. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy periodically to reflect:
• Changes to our Services;
• Changes to our business practices;
• New technologies;
• New service providers;
• Legal or regulatory requirements.
The updated version will be published on this page with a revised “Last updated” date.
Where required by law, we will provide additional notice or request renewed consent.
25. CONTACT US
For questions, complaints or privacy requests, contact:
Altessa Maison
Operated by Matheus Soares
Rua Biologia 90
2870-271 Montijo
Portugal
Email: contact@altessamaison.com
Phone: +351 916 854 538