Monserrate Privacy Policy

Monserrate Privacy Policy

Effective Date: September 2025

At Monserrate, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you interact with our website (www.monserrate.eu), purchase our products, or contact us. This policy is written in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and Portuguese data protection law.

1. Who We Are

Data Controller:

  • Company: MSRT Atelier, Unipessoal Lda
  • Registered Address: Rua Jose Carlos Ary Dos Santos N°60, 2950-357 Palmela, Portugal
  • NIF (Tax ID): 518927385
  • Email: info@monserrate.eu
  • Phone: +351 961 513 331

2. What Data We Collect

  • Identity and Contact Data: Name, email, phone, billing and shipping address, VAT/NIF number (if provided).
  • Order Data: Purchase history, payment details (processed securely via Shopify/payment providers; we do not store full card numbers).
  • Account Data: Login credentials and preferences if you create an account.
  • Communications Data: Emails, messages, or other correspondence with us.
  • Technical Data: IP address, browser type, device, operating system, cookies (see our Cookie Policy).
  • Marketing Data: Newsletter preferences, engagement with our campaigns.

3. How We Use Your Data

We process your personal data for the following purposes and legal bases:

  • To process and deliver your orders – including payment, shipping, and customer support. (Legal basis: Contract – Art. 6(1)(b) GDPR)
  • To provide customer service and respond to inquiries. (Legal basis: Contract / Legitimate Interest – Art. 6(1)(f) GDPR)
  • To send marketing communications (such as newsletters), only if you have opted in. (Legal basis: Consent – Art. 6(1)(a) GDPR)
  • To send limited promotional offers to existing customers (“soft opt-in”) about products similar to those you purchased, unless you opt out. (Legal basis: Legitimate Interest – Art. 6(1)(f) GDPR, in line with EU ePrivacy rules)
  • To improve our website and services through analytics, cookies, and customer feedback. (Legal basis: Legitimate Interest – Art. 6(1)(f) GDPR)
  • To comply with legal obligations, such as tax and accounting rules. (Legal basis: Legal Obligation – Art. 6(1)(c) GDPR)

4. How We Share Your Data

We only share your data with trusted third parties necessary to provide our services:

  • Shopify (our e-commerce platform, hosting your account and order data).
  • Payment providers (for secure payment processing).
  • Courier and logistics partners (for delivery).
  • Email service providers (for newsletters and transactional emails).
  • Analytics and marketing partners (e.g., Google Analytics, Meta/Facebook, if you consent to marketing cookies).

All third parties are bound by data protection agreements and may only process data on our instructions. We do not sell your personal data.

5. International Data Transfers

Some of our service providers (e.g., Shopify, Google, Meta) may process your data outside the European Economic Area (EEA), such as in Canada or the United States. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data.

6. Data Retention

We keep your personal data only as long as necessary:

  • Orders and invoices: 10 years (as required by Portuguese tax law).
  • Customer accounts: While the account remains active.
  • Marketing data: Until you unsubscribe or withdraw consent.
  • Communications/support: For as long as needed to resolve the inquiry, plus a reasonable archival period.

When data is no longer required, it will be securely deleted or anonymized.

7. Your Rights

Under GDPR, you have the following rights:

  • Right of access: Obtain a copy of your personal data.
  • Right to rectification: Correct inaccurate or incomplete data.
  • Right to erasure: Request deletion of your data (subject to legal obligations).
  • Right to restriction: Limit how we process your data.
  • Right to portability: Receive your data in a machine-readable format and transfer it to another provider.
  • Right to object: Stop processing for direct marketing or certain legitimate interest purposes.
  • Right to withdraw consent: At any time, where processing is based on consent.

You may also lodge a complaint with the Portuguese Data Protection Authority (CNPD – Comissão Nacional de Proteção de Dados) or your local supervisory authority. To exercise your rights, please contact us at support@monserrate.eu.

8. Security

We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and secure servers. However, no system is entirely secure; we cannot guarantee absolute security of data transmitted over the internet.

9. Minors

Our website and services are not directed to persons under 18. We do not knowingly collect data from minors. If we learn we have collected personal data from a minor, we will promptly delete it.

10. Cookies

We use cookies and similar technologies to enhance your experience and analyze usage. See our Cookie Policy for details.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. Updates will be posted on this page with the “Last Updated” date.

12. Contact Us

For privacy questions or to exercise your rights, please contact us:


Last Updated: September 2025