Privacy Policy & Cookies

In compliance with Regulation (EU) 2016/679 (“GDPR”), Clinicase Lda, a private limited company (NIPC 508188172), with registered office at Largo da Ribeira, Nº 30 B, Trajouce, 2785-009 S. Domingos de Rana, Portugal (“Clinicase”, “we”, “us”), informs you how we collect, use and protect your personal data.

Data protection contact: geral@clinicase.pt

1. When we collect your data

When you place an order in our Shopify store.
When you create a user account.
When you subscribe to our newsletter or join our loyalty program.
When you contact us at geral@clinicase.pt.
Through cookies and similar technologies (see Cookies).

2. What data we process

Identification & contact: name, email, phone, billing and shipping address, country.
Transactional: order details, payments, refunds/returns.
Usage & preferences: browsing data, device info, cookie identifiers, purchase history.

Some fields may be marked as mandatory. If you do not provide them, we may be unable to deliver certain services.

3. Purposes & legal bases

Sales contract execution: order processing, payment, invoicing, shipping (via Printful), returns and customer support. Legal basis: contract performance.
User account: creating and managing your account and personalized features. Legal basis: contract performance/terms accepted by you.
Loyalty program: applying benefits, tracking points/purchases, personalized offers. Legal basis: contract performance; marketing add-ons based on consent.
Marketing: newsletters, promotions and personalized content (email/SMS/online ads); segmentation and campaign measurement. Legal basis: consent; for existing customers, legitimate interest to promote similar products, with opt-out.
Customer service: handling inquiries/complaints. Legal basis: contract/pre-contractual steps or legitimate interest.
Compliance: tax and accounting obligations, exercise/defense of legal claims. Legal basis: legal obligation/legitimate interest.
Analytics & service improvement: usability, debugging, performance. Legal basis: legitimate interest; non-essential cookies require consent.

We may share personal data with:

Shopify (e-commerce platform).
Printful (production, logistics and shipping).
Payment providers (e.g., Stripe, PayPal, Multibanco/MBWay, card processors, banks).
Public authorities where legally required.
IT/marketing service providers acting under GDPR-compliant data processing agreements.

Some recipients (e.g., Shopify, Printful, certain processors) may be outside the EEA. In such cases, transfers rely on EU Standard Contractual Clauses or other safeguards ensuring an adequate level of protection.

5. Data retention

We retain data only for as long as necessary for the purposes described above, including:

For the duration of the contractual relationship and while your account is active;
For statutory retention periods (tax/accounting);
Until you withdraw consent for marketing, without affecting prior lawful processing;
For the establishment, exercise or defense of legal claims (data may be securely blocked).

6. Your rights

Under GDPR you may request at any time: access, rectification, erasure, restriction, objection (including to direct marketing), and data portability. You may also withdraw consent where applicable.

To exercise your rights, email geral@clinicase.pt. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).

7. Cookies

We use cookies to operate the site, measure usage and personalize content. Non-essential (analytics/marketing) cookies are used only with your consent. You can manage preferences via your browser or the cookie banner/settings.

8. Minors

Our website is intended for adults. If you are a parent or legal guardian and believe a minor has provided us with personal data, please contact geral@clinicase.pt.

9. Changes to this Policy

We may update this Privacy Policy from time to time. The current version will always be available on the website.

Last updated: 26/09/2025