Privacidade
What we hold, and for how long.
Every category of personal data this store processes, the basis for it, who else sees it, and how to make us stop.
Last updated 15 August 2026
01Who is responsible for your data
The controller of the personal data described here is AL TEI FABRICA CALCADO LDA, Rua de Pinhal Basto n.º 654, 4615-421 Macieira da Lixa, Felgueiras, Portugal.
For anything concerning your data, write to support@alteicalcado.shop with “Data protection” in the subject line, or use the postal address above. We answer within one month, as the Regulation requires, and normally within a few days.
We have not appointed a data protection officer. Our processing is not on a scale that requires one, and we would rather say so than imply an office that does not exist.
02What we collect, why, and for how long
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Name, email, telephone, delivery address | To take, deliver and support an order | Performance of a contract | 10 years, as required by Portuguese accounting and tax law |
| Order contents, including sizes and any foot measurement you give us | To ship the right pair and to handle a return or a guarantee claim | Performance of a contract | Order records 10 years. Foot measurements a maximum of 12 months, then deleted. |
| Payment confirmation reference | To match a payment to an order and to make refunds | Performance of a contract, legal obligation | 10 years |
| Messages you send us | To answer you and to keep a record of what was agreed | Performance of a contract, or legitimate interest in answering enquiries | 3 years from the last exchange |
| Wholesale enquiry details | To answer a trade enquiry | Steps taken at your request before entering a contract | 3 years from the last exchange |
| Email address for the newsletter | To send occasional email about new models | Your consent, given separately | Until you unsubscribe, then removed within 30 days |
| Server log data: IP address, request, timestamp | To keep the site running and to investigate abuse | Legitimate interest in the security of the service | 30 days |
We do not collect a date of birth, a national identification number, or any special category data. We do not ask you to create an account, so there is no password here to be lost.
We do not profile you and we make no automated decisions that produce legal effects for you.
03Consent is separated, deliberately
The tick that lets us process your order and the tick that lets us email you about new models are two different tick boxes, in two different places, and neither is pre-ticked.
- Declining marketing has no effect at all on your order.
- Every marketing email carries a one-click unsubscribe that works immediately.
- Withdrawing consent to marketing does not affect the lawfulness of anything sent before you withdrew it.
- We do not send marketing by SMS or telephone.
04Who else sees it
We do not sell personal data and we do not share it for anyone else’s marketing. It reaches the following categories of recipient, and no others:
- The carrier that delivers your order, which needs your name, address and telephone number.
- Our payment service provider, which processes the payment on its own infrastructure. Card details are entered on their page and never reach this site.
- Our hosting and email providers, which process data on our instructions under a written processing agreement.
- Our accountants, and the Portuguese tax authority where the law requires it.
- A court or competent authority, where we are legally obliged to disclose.
Transfers outside the European Economic Area
Some of these providers operate infrastructure outside the EEA. Where that happens, the transfer is covered by an adequacy decision of the European Commission or by the Commission’s standard contractual clauses. You may ask us which mechanism applies to a given provider and we will tell you.
05Your rights
Under the GDPR you may:
- Ask what we hold about you, and get a copy.
- Have inaccurate data corrected.
- Have data erased, where we have no continuing legal reason to keep it.
- Ask us to restrict processing while a dispute about accuracy or grounds is resolved.
- Receive the data you gave us in a structured, machine-readable format, and have it sent to another controller.
- Object to processing based on legitimate interest.
- Withdraw consent to marketing at any time.
Write to support@alteicalcado.shop. We do not charge for this, and we do not require a particular form of words. Where we cannot erase something because tax law requires us to keep it, we say so and we say for how long, rather than refusing without explanation.
Complaining to the supervisory authority
You have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt, or with the supervisory authority of the EU country where you live or work. You do not need to contact us first, though we would rather you did.
06Security
The site is served over TLS throughout. Access to order data is limited to the people who need it to fulfil and support orders. We do not hold card numbers at any point, in any system, so there is no card data here to be stolen.
If a breach occurs that is likely to result in a risk to your rights, we notify the CNPD within 72 hours and tell you directly where the risk is high. We will not learn about it from you and stay quiet.
07Children
This site is not directed at children and orders may only be placed by adults. We do not knowingly collect data from anyone under 13. A person aged 13 to 17 may use the site only with the involvement of a parent or guardian, who must place any order and whose details are the ones we hold.
If you believe a child has given us personal data, write to support@alteicalcado.shop and we will delete it.
Contactos: support@alteicalcado.shop · +351 255491879
AL TEI FABRICA CALCADO LDA