Privacy Notice
This notice explains what personal data Cosmology collects, why we hold it, who processes it on our behalf and what rights you have. It follows the EU General Data Protection Regulation (GDPR / RGPD).
To fulfil an order we collect your name, email address, delivery address and order details — the legal basis is performance of the contract. If you create an account we also hold your sign-in credentials and saved addresses. If you contact us we keep your message so we can answer it. If you sign up to the newsletter we keep your email address on the basis of your consent, which you can withdraw at any time by emailing us. We collect analytics and marketing data only if you consent to it in the cookie banner.
This store runs on Shopify, which hosts the site and processes your account, order, payment and email data on our behalf as our main processor. Delivery is carried out by our carrier Canguru, which receives only the details needed to deliver your parcel. Each processor receives only what it needs. We do not sell your personal data. Some processors may store data outside the EEA under the safeguards the GDPR requires.
We use browser storage to keep your cart, sign-in session, language and currency, and to record your cookie choice. Anything beyond what is strictly necessary is set only with your consent, and you can withdraw it at any time. Our Cookie Policy lists exactly what is stored.
You may request access to your data, correct it, have it erased, restrict or object to processing, receive a copy in a portable format, and withdraw consent at any time. Order records are kept for as long as tax and accounting law requires. Email us to exercise any of these rights. If you believe we have handled your data wrongly you may complain to the Portuguese supervisory authority, the CNPD (cnpd.pt).