Privacy Policy

Last Updated: September 18, 2026

This Privacy Policy explains how CorkMart collects, uses, stores and shares personal data when you visit CorkMart.com, place an order, create an account, contact us or otherwise interact with our services.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), Portuguese Law No. 58/2019 and other applicable data protection and privacy legislation.

---

1. Data Controller

CorkMart is operated by:

ERUDITEJASMINE UNIPESSOAL LDA
Trading as CorkMart
VAT / Tax ID: PT 518021475
Rua do Campo Alegre, 1517, Lj 24, C22
4150-182 Porto
Portugal

Email: info@corkmart.com
Phone / WhatsApp: +351 910 680 001

ERUDITEJASMINE UNIPESSOAL LDA is the data controller for personal data processed by CorkMart for the purposes described in this Policy.

2. Personal Data We Collect

Depending on how you interact with CorkMart, we may collect or process:

• Identity and contact information: name, billing and shipping address, email address and telephone number;
• Order and transaction information: products ordered, order history, returns, refunds, delivery information and transaction records;
• Payment information: payment status, payment method and information necessary to process or verify a transaction. Full payment card details are processed by payment service providers and are not stored directly by CorkMart;
• Account information: information associated with a CorkMart customer account where an account is used;
• Communications: messages, enquiries, quotations, support requests and other communications exchanged with CorkMart;
• Technical and usage information: IP address, browser and device information, website interactions, security information and similar technical data;
• Marketing preferences: newsletter subscriptions, consent records and communication preferences.

We do not intentionally request special categories of personal data unless such information is genuinely necessary and its processing is permitted by applicable law.

3. How We Collect Personal Data

Personal data may be collected:

• directly from you when you place an order, contact us or provide information;
• automatically when you use CorkMart.com, through cookies and similar technologies;
• from payment, delivery, security and other service providers involved in your transaction;
• from advertising or analytics services where such processing is permitted and the required consent has been obtained.

4. Why We Process Personal Data

CorkMart processes personal data only where there is an appropriate legal basis. Depending on the activity, this may include:

• Performance of a contract: to process orders, receive payments, arrange delivery, manage returns, provide quotations and respond to order-related requests;
• Legal obligations: to comply with tax, accounting, invoicing, regulatory and other legal requirements;
• Legitimate interests: to protect our store and customers, prevent fraud, maintain security, provide customer support and improve our business, where those interests are not overridden by your rights;
• Consent: where required for marketing communications, analytics, advertising or other optional processing.

5. How We Use Personal Data

We may use personal data to:

• process and fulfil purchases;
• process payments and refunds;
• prepare invoices and accounting records;
• arrange shipping, tracking and customs documentation;
• manage customer accounts;
• respond to enquiries and provide customer support;
• prepare B2B and project quotations;
• prevent fraud and protect the security of CorkMart.com;
• comply with legal and regulatory obligations;
• measure and improve website performance;
• send marketing communications where legally permitted.

6. Service Providers and Other Recipients

CorkMart uses trusted third parties where necessary to operate the online store and fulfil customer transactions.

Personal data may therefore be disclosed to categories of recipients including:

• E-commerce platform providers, including Shopify;
• payment service providers used to process credit and debit cards, Apple Pay, Google Pay and Scalapay transactions;
• shipping and logistics providers, including UPS, FedEx and other carriers or freight providers used for a particular shipment;
• technology, security and fraud-prevention providers;
• communications and customer-support providers;
• analytics and advertising providers where such services are enabled and their use is legally permitted;
• professional advisers and public authorities where required for accounting, legal compliance or the establishment, exercise or defence of legal claims.

These providers receive only the information reasonably necessary for the relevant service and process personal data according to their applicable contractual and legal responsibilities.

7. Shopify

CorkMart.com is powered by Shopify.

In providing the e-commerce platform, Shopify generally processes customer personal data on CorkMart's behalf in accordance with Shopify's Data Processing Addendum.

Certain Shopify services or features may involve Shopify processing personal data for its own purposes and under its own responsibilities.

Further information about Shopify's privacy practices is available at: Shopify Privacy Policy.

8. Payments and Digital Wallets

Payments are processed through third-party payment services. Depending on the payment method selected at checkout, personal data may be processed by card payment providers, Apple Pay, Google Pay or Scalapay.

These providers may process certain information independently in accordance with their own terms and privacy policies.

CorkMart does not directly store full credit or debit card numbers.

9. International Data Transfers

Some service providers used by CorkMart or their subprocessors may process personal data outside the European Economic Area.

Where personal data is transferred internationally, the transfer is subject to an applicable legal mechanism, which may include an adequacy decision, Standard Contractual Clauses or another safeguard recognised under European data protection law.

You may contact us if you would like further information about the safeguards applicable to an international transfer involving your personal data.

10. Cookies and Similar Technologies

CorkMart.com uses cookies and similar technologies for purposes such as website operation, shopping-cart functionality, security, preferences, analytics and, where enabled, advertising.

Cookies that are strictly necessary for the operation of the website may be used without consent where permitted by law.

Analytics, advertising and other non-essential cookies are used only where legally permitted and, where required, after the appropriate consent has been obtained.

Where cookie or privacy controls are provided on CorkMart.com, you can use them to review or change your preferences.

11. Marketing Communications

CorkMart may send marketing communications where you have consented to receive them or where another applicable legal basis permits such communication.

You can unsubscribe from marketing emails at any time using the unsubscribe link included in the message or by contacting info@corkmart.com.

Withdrawing marketing consent does not affect transactional communications necessary to manage an order or customer service request.

12. Data Retention

CorkMart retains personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, accounting, tax, security and dispute-resolution requirements.

• Accounting, invoicing and relevant transaction records: retained for the legally required period, which is generally 10 years under applicable Portuguese tax rules.
• Customer account information: retained while the account remains active and afterwards only for as long as necessary for legitimate or legal purposes.
• Customer service and commercial correspondence: retained for as long as reasonably necessary to manage the relationship, resolve requests and establish or defend legal claims.
• Marketing information: retained until consent is withdrawn, an objection is made or the information is no longer necessary. Limited suppression information may be retained to ensure that an opt-out continues to be respected.
• Security and technical information: retained for a limited period appropriate to security, fraud-prevention and operational requirements.

Personal data may be retained for a longer period where required by law or necessary in connection with an ongoing legal claim, investigation or dispute.

13. Your Data Protection Rights

Subject to the conditions provided by applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete information;
• request erasure of personal data;
• request restriction of processing;
• receive certain personal data in a portable format;
• object to processing based on legitimate interests;
• object to direct marketing at any time;
• withdraw consent where processing is based on consent;
• exercise rights relating to qualifying automated decision-making where applicable.

To exercise a privacy right, contact info@corkmart.com.

We may request information reasonably necessary to verify your identity and protect personal data from unauthorised disclosure.

We will respond without undue delay and normally within one month of receiving a valid request. Where permitted by law, this period may be extended for particularly complex or numerous requests.

14. Automated Processing and Fraud Prevention

CorkMart and its service providers may use automated tools to assist with payment security, fraud detection, abuse prevention and transaction risk assessment.

Certain payment providers may also make their own eligibility or risk decisions under their respective terms and privacy policies.

Where applicable law grants specific rights in relation to a decision based solely on automated processing that produces legal or similarly significant effects, those rights remain unaffected.

15. Security

CorkMart uses appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

No online system can be guaranteed to be completely secure, and customers should avoid sending sensitive information through unsecured communication channels.

Personal data breaches are handled in accordance with applicable data protection law, including notification to the competent supervisory authority and affected individuals where legally required.

16. Children's Privacy

CorkMart's online store is not specifically directed at children.

We do not knowingly use children's personal data for marketing or advertising in circumstances where such processing would be unlawful.

If you believe personal data relating to a child has been provided to CorkMart inappropriately, please contact us.

17. Complaints and Supervisory Authority

If you have a concern about the way CorkMart processes personal data, please contact us first at info@corkmart.com.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

In Portugal:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º
1200-651 Lisboa
Portugal
Phone: +351 213 928 400
Email: geral@cnpd.pt
Website: www.cnpd.pt

Where applicable, you may also lodge a complaint with the competent supervisory authority in another European Economic Area country where you live or work, or where an alleged infringement occurred.

18. Additional Privacy Choices

Depending on your country or region, additional privacy rights or choices may apply to you.

Where required by applicable law, additional controls concerning certain uses or disclosures of personal data may be made available through CorkMart's privacy settings or Your Privacy Choices.

19. Changes to This Privacy Policy

CorkMart may update this Privacy Policy to reflect changes in our services, technology, service providers, legal requirements or privacy practices.

The latest version will be published on CorkMart.com with the corresponding update date.

20. Contact

For privacy questions or to exercise a data protection right, contact:

ERUDITEJASMINE UNIPESSOAL LDA — CorkMart
Email: info@corkmart.com
Phone / WhatsApp: +351 910 680 001
Rua do Campo Alegre, 1517, Lj 24, C22
4150-182 Porto
Portugal