Privacy Policy (GDPR Compliant)

1. Who We Are

This website is operated by LEFZONE, a brand owned by AURORADOR TECHNOLOGIES, UNIPESSOAL LDA, registered in Portugal.

We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese laws.

2. Data Controller

The data controller responsible for processing your personal data is:

AURORADOR TECHNOLOGIES, UNIPESSOAL LDA
Address: Praça General Barbosa, nº 85, 4900‑347 Viana do Castelo, Portugal
Email: support@lefzone.com

3. What Personal Data We Collect

3.1 Information You Provide to Us

  • Name
  • Email address
  • Phone number
  • Billing address
  • Shipping address
  • Payment information (processed securely by third‑party providers)
  • Account login details (if you create an account)

3.2 Information Collected Automatically

  • IP address
  • Browser type and version
  • Device information
  • Pages visited
  • Cookies and tracking technologies
  • Referrer URLs

3.3 Order Information

When you place an order, we collect:

  • Products purchased
  • Order total
  • Payment method
  • Transaction ID
  • Delivery information

4. Comments

When visitors leave comments, we collect:

  • Comment content
  • IP address
  • Browser user agent

This helps us detect spam and protect the website.

5. Cookies

We use cookies to:

  • Enable essential website functions
  • Remember your cart
  • Improve user experience
  • Analyze website traffic
  • Support marketing and advertising

You may disable cookies in your browser settings, but some features may not work properly.

For more details, please refer to our Cookie Policy.

6. Legal Basis for Processing

We process your personal data under the following legal bases (GDPR Article 6):

  • Contract: To process and deliver your orders.
  • Legal Obligation: To comply with Portuguese tax and accounting laws.
  • Consent: For optional cookies, marketing communications, and newsletters.
  • Legitimate Interest: To prevent fraud, improve website performance, and ensure security.

7. How We Use Your Data

We use your personal data to:

  • Process and deliver your orders
  • Manage your account
  • Provide customer support
  • Improve our website and services
  • Prevent fraud and enhance security
  • Comply with legal obligations
  • Send transactional emails (order confirmation, shipping updates)

We do not sell your personal data.

8. Payment Processing

8.1 WooPayments / Stripe

Payments made via credit/debit cards, Apple Pay, Google Pay, MB Way, Multibanco, and other supported methods are processed by Stripe through WooPayments.

Stripe may collect:

  • Payment card details
  • Billing information
  • Fraud‑prevention data

Stripe processes this information according to its own privacy policy.

8.2 Mollie

Payments made via MB Way and Multibanco are processed by Mollie.

Mollie may collect:

  • Account information
  • Payment details
  • Fraud‑prevention data

Mollie processes this information according to its own privacy policy.

We do not store your full payment card details.

9. Embedded Content

Pages may include embedded content (e.g., YouTube videos).
Embedded content behaves as if you visited the external website directly and may collect data according to their own policies.

10. International Data Transfers

Some service providers (such as Stripe and Mollie) may transfer personal data outside the European Union.

These transfers are protected by:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Other GDPR‑compliant safeguards

We ensure that all international transfers comply with GDPR requirements.

11. Who We Share Your Data With

We share data only with trusted service providers necessary to operate our store:

  • Payment processors (Stripe, Mollie)
  • Shipping carriers
  • Email service providers
  • Analytics tools
  • Anti‑fraud systems
  • Web hosting provider

All partners comply with GDPR and process data securely.

12. Email Service Provider

Our customer support email (support@lefzone.com) is hosted by Alibaba Cloud (Aliyun). This service may process personal data (such as your email address and message content) outside the European Union.

All email communications are protected through:

  • TLS encrypted transmission
  • Secure authentication
  • GDPR‑compliant technical and organizational safeguards

International data transfers performed by Alibaba Cloud are protected by:

  • Standard Contractual Clauses (SCCs)
  • Additional security measures implemented by the provider

By contacting us via email, you acknowledge that your message may be processed by our external email service provider under these safeguards.

13. How Long We Retain Your Data

  • Inactive accounts: 3 years
  • Pending/failed/cancelled orders: 7 days
  • Refunded orders: 12 months
  • Completed orders: 10 years (required by Portuguese tax law)
  • Comments: indefinitely unless deleted
  • Analytics data: according to provider policies

14. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Request restriction of processing
  • Object to processing
  • Request data portability
  • Withdraw consent at any time
  • File a complaint with the Portuguese Data Protection Authority (CNPD)

To exercise your rights, contact:
support@lefzone.com

15. How We Protect Your Data

We use:

  • SSL encryption
  • Secure hosting
  • Access controls
  • Regular security audits
  • Fraud‑prevention tools
  • Industry‑standard payment security

16. Changes to This Policy

We may update this Privacy Policy from time to time.
The latest version will always be available on this page.

17. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:
support@lefzone.com