Legal

Privacy Policy

Last updated: 16 July 2026

1. Who we are

Madeira Gift Shop (madeiraonlineshop.com) is the online shop of Madeira Friends Enterprise, Lda, Rua dos Barreiros 26A, Santa Maria Maior, 9060-397 Funchal, Madeira, Portugal. We are the data controller for the personal data described here.

For any privacy question or to exercise your rights, write to hello@madeirafriends.com.

2. What we collect

We only collect what we need to sell and ship you an order:

  • Order data — your name, email address, shipping address, phone number, the items you bought and your order history.
  • Billing data — the details needed to issue your invoice, including a tax number if you ask for an invoice with one.
  • Payment data — handled entirely by Stripe. Your card number never reaches our servers and we never store it. We only see the result of the payment and the last four digits.
  • Messages — anything you send us by email or WhatsApp.
  • Usage data — pages visited, approximate region, device and browser type, collected by our analytics tools.

3. Why we use it, and on what legal basis

  • To process and deliver your order, and to give you support — necessary to perform our contract with you (Art. 6(1)(b) GDPR).
  • To issue invoices and meet our tax and accounting duties — legal obligation (Art. 6(1)(c) GDPR).
  • To keep the site secure, prevent fraud and understand how the shop is used — our legitimate interest in running and improving the shop (Art. 6(1)(f) GDPR).
  • To send you marketing, if we ever do — only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

We do not sell your personal data, and we do not use it to make automated decisions or to profile you.

4. Who we share it with

We share data only with the providers that make the shop work, and only with what they need:

  • Stripe — payment processing.
  • Supabase — the database that stores products and orders.
  • InvoiceXpress — issuing your invoice.
  • Shipping carriers — to deliver your parcel.
  • Ahrefs Analytics and Overtracking — website analytics.
  • Our email provider — to send order and support emails.

Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

5. How long we keep it

Invoices and accounting records are kept for 10 years, as Portuguese tax law requires. Other order data is kept for as long as we need it to serve you and to defend a legal claim. Analytics data is kept in aggregated form. When we no longer need your data, we delete it.

6. Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. You can also withdraw consent at any time. Write to hello@madeirafriends.com and we will reply within one month.

If you think we have handled your data badly, you can complain to the Portuguese data protection authority, CNPD — www.cnpd.pt.

7. Cookies and analytics

We use cookies and similar technology that are strictly necessary for the site to work — keeping your cart and your session. We also use privacy-friendly analytics (Ahrefs Analytics and Overtracking) to count visits and understand which pages are useful. Stripe sets its own cookies to process your payment and prevent fraud. You can block or delete cookies in your browser, but the cart and checkout may then stop working.

8. Children

Our shop is not aimed at children, and we do not knowingly collect data from anyone under 16. Some of our products contain alcohol and may only be bought by adults.

9. Changes to this policy

If we change this policy we will update the date at the top of this page. Please check back from time to time.

Questions? Email hello@madeirafriends.com or see our Terms of Service.