Last updated: 19 maio 2026
Nelson & Carla Louro Lda (VAT 513070389), registered office at Rua Dr. Alberto Martins dos Santos, n.º 4, 2540-087 Bombarral, Portugal, trading as Chocolates Dom José, is the data controller for personal data collected through https://chocolatesdomjose.com, in accordance with Regulation (EU) 2016/679 (GDPR) and Portuguese Law no. 58/2019.
Nelson & Carla Louro Lda — VAT 513070389
Address: Rua Dr. Alberto Martins dos Santos, n.º 4, 2540-087 Bombarral, Portugal
Privacy contact: geral@chocolatesdomjose.com
Phone: +351 912 630 054
We collect the following personal data: name, email, phone, VAT number (if provided for invoicing), shipping address, contact form messages, and payment data (processed directly by EasyPay — we do not store card data).
Order processing and contract management (contract performance, GDPR art. 6(1)(b)).
Issuing and sending invoices (legal obligation, GDPR art. 6(1)(c)).
Communicating with the customer about order status (contract performance).
Responding to contact form messages (legitimate interest / consent).
To deliver our services we share strictly necessary data with: EasyPay (payment processing), Moloni (certified invoicing), email/SMTP providers (confirmations), and carriers (delivery). These processors are bound to GDPR-compliant processing.
We do not transfer data outside the EEA, except where processors do so under appropriate safeguards (EU Standard Contractual Clauses).
Order and invoicing data: 10 years (Portuguese tax law — art. 123 CIRC).
Contact data (form): up to 2 years after last contact, unless deletion is requested earlier.
You have the right to access, rectify, erase, restrict or object to processing of your data, and to data portability. To exercise these rights contact geral@chocolatesdomjose.com.
You may also file a complaint with the Portuguese Data Protection Authority (CNPD): www.cnpd.pt.
Our Site does not use third-party tracking cookies or marketing tools. Only local technical storage (localStorage) is used to remember your language preference and cart contents — these are not cookies subject to consent.
We apply appropriate technical and organisational measures to protect your data, including HTTPS encryption (TLS) and restricted access by authorised staff only.
This policy may be updated. The version in force is always published on the Site, with the date of last update.