Controller: Livraria Cais, Rua do Souto 41, 4700-251 Braga, Portugal. Email: [email protected]. Phone: +351 253 61 28 94.
1. What we collect
We may process your name, email address, phone number, postal address for deliveries, message content, and order details when you contact us, place an order, join the Quay Box, reserve an event seat, or request stationery restocks.
2. Why we process data
- To reply to enquiries and fulfil book or stationery orders (contract / pre-contractual steps).
- To manage Quay Box subscriptions and event registrations (contract / legitimate interest / consent where required).
- To comply with accounting and legal obligations in Portugal.
- To operate essential site functions and, with your choice, preference or analytics cookies (see Cookie Policy).
3. Legal bases
Processing rests on Article 6 GDPR and Law 58/2019 of 8 August: contract performance, legal obligation, legitimate interests (running an independent bookshop and improving service), and consent where we ask for it (for example optional cookies or marketing emails).
4. Retention
Enquiry messages are kept as long as needed to complete the conversation and for a reasonable follow-up period. Order and invoicing data are retained for the periods required by Portuguese tax and commercial law. Cookie preferences stay in your browser until you clear them.
5. Sharing
We do not sell personal data. We may share data with delivery partners, payment providers, and IT hosts strictly as needed to provide the service, under appropriate agreements.
6. Your rights
You may request access, rectification, erasure, restriction, portability, and objection where applicable, and withdraw consent at any time without affecting prior lawful processing. Contact us at [email protected].
You may lodge a complaint with the Portuguese data protection authority: Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1º, 1200-651 Lisboa — www.cnpd.pt.
7. Security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or alteration.
8. Updates
We may update this policy to reflect legal or operational changes. The current version is published on this page.