Planta Livre

Privacy Policy

Last updated: September 2026

This Privacy Policy describes how Planta Livre, Lda. is responsible for processing the personal data of its customers, employees, partners and other entities and users of its services. Planta Livre is committed to processing the collected Personal Data in accordance with applicable regulatory and legal standards, namely Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Law No. 58/2019 of 08.08.

1. Identity of the Data Controller

Planta Livre, Lda.

VAT: 507 618 173

Estrada do Telhal, No. 13, Recoveiro

2725-506 Mem Martins, Sintra, Portugal

Phone: +351 219 258 137

Legal form: Private Limited Company

Share Capital: € 250,000.00

Website: plantalivre.pt

2. What is Personal Data?

Personal data means any information relating to an identified or identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

3. Processing of Personal Data

'Processing' means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.


Planta Livre acts as data controller for the collection and processing of data, in compliance with the GDPR, upon prior consent from data subjects.

4. Data We Collect

We only collect data strictly necessary to provide our services:


Identification and contact data: full name, email address, phone number (optional), delivery and billing address.


Transaction data: order history, delivery preferences, VAT number for tax purposes, promotional codes used. Payment data is processed exclusively by Stripe, Inc. — we do not store credit card data.


Browsing data: IP address and browser type, collected by hosting servers for security and technical diagnostic purposes. We also use Google Analytics (via Google Tag Manager) to measure visits and browsing behaviour in aggregate — only after you accept that category in the cookie management panel. See our Cookie Policy for more details.


Account data (registered users): email, name, order history, saved addresses.


Notification data (optional): if you turn on browser notifications, for example when you ask to be told when an item is back in stock or to follow an order, we store your browser's technical identifier (subscription address and encryption keys) only to send you that notice. Notifications are delivered, encrypted, through your browser's notification service (Google, Microsoft, Mozilla or Apple). We delete that identifier after sending the notice, and you can turn notifications off at any time in your browser settings.

5. Purposes and Legal Basis for Processing

PurposeLegal Basis
Processing and managing ordersPerformance of contract (Art. 6(1)(b))
Service communications (confirmation, shipping)Performance of contract
User accountPerformance of contract / Consent
Newsletter and marketing communicationsConsent (Art. 6(1)(a))
Compliance with legal obligations (invoicing)Legal obligation (Art. 6(1)(c))

6. Data Purpose, Storage and Security

Planta Livre stores personal data strictly for the period of time necessary to provide the Company's goods and services and to comply with applicable laws and regulations.


  • Order and billing data: 10 years (legal tax obligation)
  • Account data: while the account is active + 2 years after deletion
  • Newsletter data: until subscription is cancelled

  • We adopt appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction, including TLS encryption in transit and encryption at rest in the database.

    7. Sharing Data with Third Parties

    Your data may be shared with the following sub-processors, strictly for service provision:


  • Stripe, Inc. — payment processing (USA; applicable EU standard contractual clauses)
  • Vercel, Inc. — platform hosting (USA; standard contractual clauses)
  • Neon, Inc. — database (USA; standard contractual clauses)
  • Carriers — order delivery (address and contact data only)
  • Resend — transactional email delivery (order confirmation, password recovery)

  • We do not sell, rent or share your data with third parties for marketing purposes.

    8. Your Rights

    Under the GDPR, you have the following rights regarding your personal data:


  • Access — request a copy of the data we hold about you
  • Rectification — correct inaccurate or incomplete data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Restriction — restrict the processing of your data
  • Portability — receive your data in a structured format
  • Objection — object to processing based on legitimate interest
  • Withdrawal of consent — at any time, without retroactive effect

  • To exercise any of these rights, use our contact form. We will respond within 30 days. You also have the right to lodge a complaint with the CNPD (Portuguese Data Protection Authority): www.cnpd.pt.

    Contact Planta Livre

    9. Cookies on the Website

    Cookies are groups of data exchanged between the browser and the server, stored as text files on the user's computer. These cookies are stored to ensure the correct operation of the website (authentication, shopping cart, security).


    Users can configure their browser to control or prevent the storage of cookies. Disabling essential cookies may limit website functionality. For more details, please consult our Cookie Policy.

    10. Changes to this Policy

    Planta Livre reserves the right to modify this Privacy Policy at any time. We advise you to review this Policy whenever you provide personal data to Planta Livre. The date of the last update is always indicated at the top of this page.

    11. Contact

    For any privacy-related questions, please use our contact form.

    Go to Contacts
    Privacy Policy | Planta Livre