Last updated: 3 September 2026

This Privacy Policy explains how INOVACRIL - ACRYLIC CONCEPT, LDA processes personal data through the online store https://theinovacril.com/, its forms, contacts and business relationships.

INOVACRIL - ACRYLIC CONCEPT, LDA
Tax ID: 502 590 289
Registered office: Estrada Nacional 9-2, Pavilhão Industrial n.º 10, Pero Negro, 2590-425 Sobral de Monte Agraço, Portugal
Share capital: €50,000.00
General phone: +351 261 780 200
Sales phone: +351 261 780 201
Sales mobile: +351 919 532 810
Email: comercial@inovacril.pt
Online store: https://theinovacril.com/

1. Data controller

The controller responsible for processing personal data is INOVACRIL - ACRYLIC CONCEPT, LDA, Tax ID 502 590 289, with registered office at the address above.

For privacy and data protection matters, you can contact us at comercial@inovacril.pt.

2. Personal data processed

Depending on your interaction with the website, we may process:

• identification data, such as name;
• contact data, such as email, phone and address;
• billing data and tax ID;
• delivery data;
• order data, purchased products, returns and support;
• customer account data;
• communications and messages sent through forms;
• technical data, such as IP address, device identifiers, browser, logs and security data;
• cookie preferences and consent;
• marketing data, where you have given consent;
• information required for quotes or customised products.

We do not intentionally request special categories of personal data through the online store.

3. Purposes and legal bases

Order management and contract performance

We process data to process orders, payments, invoicing, delivery, returns, customer support and compliance with contractual obligations.

Legal basis: performance of a contract or pre-contractual steps.

Compliance with legal obligations

We process and retain data when necessary to comply with tax, accounting, invoicing, consumer protection, warranty and other legal obligations.

Legal basis: compliance with a legal obligation.

Contact and quote requests

We process data submitted to respond to questions, quote requests and business enquiries.

Legal basis: pre-contractual steps and/or legitimate interest in responding to professional and business contacts, depending on the context.

Security, fraud prevention and defence of rights

We may process technical and transactional data to protect the website, prevent fraud, manage incidents, and exercise or defend rights.

Legal basis: legitimate interest and, where applicable, legal obligation.

Newsletter and promotional communications

We send marketing communications by email or equivalent means where a valid legal basis exists, namely prior consent where required.

Legal basis: consent, without prejudice to situations specifically permitted by law.

You can withdraw consent or object to promotional communications at any time, through the unsubscribe option included in the messages or by contacting us.

Cookies and non-essential technologies

Analytics, personalisation or advertising cookies are used where valid consent exists, as described in the Cookie Policy.

Legal basis: consent.

4. Shopify

The store uses the Shopify platform, which provides the e-commerce technology infrastructure. Shopify may process personal data on our behalf as a processor and, for certain features, may act according to the roles and conditions described in its own terms and policies.

The use of Shopify features, including privacy, cookie, fraud prevention, payment and advanced service features, should be configured according to the options actually enabled in the store.

5. Recipients and processors

We may share data, to the extent necessary, with:

• Shopify and technology infrastructure providers;
• payment providers;
• carriers and logistics operators;
• invoicing, accounting and administrative support providers;
• email, CRM and customer support providers;
• analytics and marketing providers, when authorised;
• consultants, lawyers, auditors and insurers;
• public authorities when legally required.

6. International transfers

Some technology providers may process data outside the European Economic Area. Where an international data transfer occurs, the legally required safeguards will be used, such as an adequacy decision, standard contractual clauses or another valid mechanism provided for in the GDPR.

7. Data retention

We retain data only for as long as necessary for the purposes for which it was collected and for the applicable legal periods.

In general terms:

• invoicing documentation and accounting records: for the legally required periods;
• order and warranty data: for the periods necessary for contractual compliance, warranties, complaints and defence of rights;
• contact/quote requests: for the period necessary to follow up the request and subsequent defence of rights;
• marketing data: until consent is withdrawn/objection is raised, without prejudice to minimum retention of proof of preference;
• security logs: for a period proportional to the security purpose.

Specific internal retention periods should be defined in a retention schedule.

8. Rights of data subjects

Under the GDPR, where applicable, you may:

• request access to your data;
• request rectification;
• request erasure;
• request restriction of processing;
• object to processing;
• request portability;
• withdraw consent at any time, without affecting the lawfulness of prior processing;
• lodge a complaint with the Comissão Nacional de Proteção de Dados (Portuguese Data Protection Authority).

Requests can be sent to comercial@inovacril.pt. We may request appropriate information to confirm the identity of the requester.

9. Automated decisions

Unless specifically stated otherwise, INOVACRIL does not make decisions based solely on automated processing that produce legal effects or significantly affect the data subject. Fraud prevention tools may, however, generate risk indicators subject to providers' configurations.

10. Security

We apply technical and organisational measures appropriate to the risk to protect personal data against destruction, loss, alteration, disclosure or unauthorised access. No system is entirely infallible, so measures are continuously reviewed and updated.

11. Cookies

For information about cookies and similar technologies, see the Cookie Policy. Cookie preferences can be changed through the consent management mechanism available on the website.

12. Minors

The store is not specifically aimed at minors. Should data of minors be processed, the legal rules appropriate to the context and age will be applied.

13. Changes

We may update this Privacy Policy when we change processes, providers or features, or when relevant legal changes occur. The updated version will be published on this page with an indication of the date.

14. Contact and supervisory authority

INOVACRIL - ACRYLIC CONCEPT, LDA
Email: comercial@inovacril.pt

Comissão Nacional de Proteção de Dados (CNPD)
Website: https://www.cnpd.pt/