Privacy policy
Last updated: 6 November 2026.
Data controller
Eduardo Telles Santos, sole trader, trading as Essência Viva, with VAT no. 188844465 and registered office at Rua Serra do Arquitecto, 15, 2640-433 Mafra, Portugal. For any question about your data: geral@essenciaviva.pt or +351 963 201 228.
What data we collect and why
- Order: name, email, mobile number, delivery address and, if you provide it, tax number. We use this data to process and deliver your order and to talk to you about it. Legal basis: performance of the contract.
- Invoicing: the data needed to issue and keep the invoice. Legal basis: legal obligation.
- Account (optional): name, email, password (stored encrypted), mobile number, address, tax number and date of birth. We also use the email and tax number to confirm that the first-purchase discount is only used once. Legal basis: performance of the contract and legitimate interest in preventing abuse of the discount.
- Birthday offer: we only use your date of birth to send you an offer by email if you give that consent, which you can withdraw at any time in your account. Legal basis: consent.
- Contact: what you write to us by email or tell us by phone, in order to reply to you. Legal basis: performance of the contract or legitimate interest in replying to those who contact us.
- Usage: technical access logs and IP address, for security and diagnostics. Legal basis: legitimate interest.
We do not sell your data and we do not use it for advertising without your consent.
Who we share it with
Only with those needed for the shop to work and for your order to reach you.
| Who | What for | What they receive | Where |
|---|---|---|---|
| ifthenpay | Processing payment by MB WAY, Multibanco or card. | Order number, amount, name, email and mobile number. Card details are entered on the ifthenpay page and do not pass through the shop. | Portugal |
| Carrier | Delivering the order. | Name, mobile number and delivery address. | Country of delivery |
| HealthyPlanet | Supplying and shipping the products that do not come from our stock. Product images are also loaded from their website. | Name, mobile number and delivery address, when they make the shipment. IP address, when loading the images. | Portugal |
| Supabase | The shop’s database and account authentication. | Order and account data. | European Union |
| Vercel | Website hosting. | Access logs and IP address. | European Union and United States |
| Resend | Sending emails about your order and account. | Email address and message content. | United States, with sending from the European Union |
| Google (Gmail) | The shop’s mailbox. | The messages you send us and our replies. | United States and other countries |
| Anthropic | Automatic translation of product descriptions. | Product texts only. No personal data. | United States |
Transfers outside the European Union are based on the standard contractual clauses approved by the European Commission.
How long we keep it
- Orders and invoicing: Ten years, due to a tax obligation. We cannot delete them sooner, even on request.
- Account: For as long as the account exists. After you request deletion, we delete it within 30 days, except what the law requires us to keep.
- Messages you send us: For as long as they are needed to reply or to deal with an order or complaint.
- Technical access logs: Up to 12 months, for security and diagnostics.
Your rights
You can request access to, rectification, erasure, restriction or portability of your data, object to processing based on legitimate interest and withdraw any consent you have given, by writing to geral@essenciaviva.pt. We reply within 30 days. How to request erasure is explained in Data deletion. You can also lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese data protection authority.
Cookies
The shop does not use advertising or statistics cookies. The details are in the Cookie policy.
Changes
If this policy changes, we will publish the new version on this page, with the date of the update.