This Privacy Policy describes how magnetspicehub (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit or make a purchase from www.magnetspicehub.com.
1. DATA CONTROLLER
For the purpose of the General Data Protection Regulation (GDPR) and relevant Portuguese data protection legislation, the data controller is:
Company Name: xxx Address: xxx Email: magnetic@magnetspicehub.com
2. PERSONAL INFORMATION WE COLLECT
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We collect the following categories of data:
Identity Data: Including name, surname, and title.
Contact Data: Including billing address, delivery address, email address, and telephone numbers.
Transaction Data: Including details about payments to and from you and other details of products you have purchased from us.
Technical Data: Including internet protocol (IP) address, browser type and version, time zone setting and location, and operating system and platform.
Usage Data: Information about how you use our website and products.
3. LEGAL BASIS FOR PROCESSING
Under the GDPR, we rely on the following lawful bases to process your personal information:
Contractual Necessity: To perform the contract we are about to enter into or have entered into with you (e.g., processing your order).
Legal Obligation: To comply with a legal or regulatory obligation (e.g., maintaining financial records for tax purposes).
Legitimate Interests: Where it is necessary for our legitimate interests (e.g., managing our business and improving our services) and your interests and fundamental rights do not override those interests.
Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., marketing communications).
4. PAYMENT PROCESSING
To facilitate a seamless checkout experience, we use Stripe as our third-party payment processor. When you make a purchase on our Site, your payment information is collected and processed directly by Stripe.
Stripe processes your personal data, including your credit/debit card details, in accordance with their own Privacy Policy. We do not store or have access to your full payment card information. Stripe’s use of your personal data is governed by their terms and conditions and privacy standards, which comply with the Payment Card Industry Data Security Standard (PCI-DSS).
5. DATA RETENTION
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Order Information: When you place an order through the Site, we will maintain your Order Information for our records for a period of 10 years, in compliance with Portuguese commercial and fiscal obligations regarding the retention of accounting documents.
Communication Data: Correspondence data is retained for as long as necessary to resolve your enquiry and for a subsequent period of 2 years to manage any follow-up requirements.
Marketing Data: We retain data for marketing purposes until such time as you withdraw your consent or exercise your right to erasure.
6. DISCLOSURE OF PERSONAL DATA
We may share your personal data with internal and external third parties who perform services on our behalf, including:
Professional advisers including lawyers, auditors, and insurers.
Logistics and fulfilment partners based in Canada, the United Kingdom, and Europe to facilitate the delivery of your goods.
Tax authorities and regulatory bodies.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
7. INTERNATIONAL TRANSFERS
As magnetspicehub operates globally, we may transfer, store, and process your information in countries outside the European Economic Area (EEA). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
Transferring data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
Using specific Standard Contractual Clauses (SCCs) approved by the European Commission which give personal data the same protection it has in Europe.
8. YOUR LEGAL RIGHTS
Under the GDPR, you have the following rights in relation to your personal data:
Request access to your personal data.
Request correction of the personal data that we hold about you.
Request erasure of your personal data.
Object to processing of your personal data.
Request restriction of processing your personal data.
Request the transfer of your personal data.
Right to withdraw consent at any time.
If you wish to exercise any of the rights set out above, please contact us at magnetic@magnetspicehub.com.
9. DATA SECURITY
We have put in place appropriate technical and organisational measures designed to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees, agents, and contractors who have a business need to know.
10. CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at:
You also have the right to make a complaint at any time to the Comissão Nacional de Protecção de Dados (CNPD), the Portuguese supervisory authority for data protection issues (www.cnpd.pt).
