Privacy Policy
Last updated: September 2026
This Privacy Policy describes how Planta Livre, Lda. is responsible for processing the personal data of its customers, employees, partners and other entities and users of its services. Planta Livre is committed to processing the collected Personal Data in accordance with applicable regulatory and legal standards, namely Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Law No. 58/2019 of 08.08.
1. Identity of the Data Controller
Planta Livre, Lda.
VAT: 507 618 173
Estrada do Telhal, No. 13, Recoveiro
2725-506 Mem Martins, Sintra, Portugal
Phone: +351 219 258 137
Legal form: Private Limited Company
Share Capital: € 250,000.00
Website: plantalivre.pt
2. What is Personal Data?
Personal data means any information relating to an identified or identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
3. Processing of Personal Data
'Processing' means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Planta Livre acts as data controller for the collection and processing of data, in compliance with the GDPR, upon prior consent from data subjects.
4. Data We Collect
We only collect data strictly necessary to provide our services:
Identification and contact data: full name, email address, phone number (optional), delivery and billing address.
Transaction data: order history, delivery preferences, VAT number for tax purposes, promotional codes used. Payment data is processed exclusively by Stripe, Inc. — we do not store credit card data.
Browsing data: IP address and browser type, collected by hosting servers for security and technical diagnostic purposes. We also use Google Analytics (via Google Tag Manager) to measure visits and browsing behaviour in aggregate — only after you accept that category in the cookie management panel. See our Cookie Policy for more details.
Account data (registered users): email, name, order history, saved addresses.
Notification data (optional): if you turn on browser notifications, for example when you ask to be told when an item is back in stock or to follow an order, we store your browser's technical identifier (subscription address and encryption keys) only to send you that notice. Notifications are delivered, encrypted, through your browser's notification service (Google, Microsoft, Mozilla or Apple). We delete that identifier after sending the notice, and you can turn notifications off at any time in your browser settings.
5. Purposes and Legal Basis for Processing
| Purpose | Legal Basis |
|---|---|
| Processing and managing orders | Performance of contract (Art. 6(1)(b)) |
| Service communications (confirmation, shipping) | Performance of contract |
| User account | Performance of contract / Consent |
| Newsletter and marketing communications | Consent (Art. 6(1)(a)) |
| Compliance with legal obligations (invoicing) | Legal obligation (Art. 6(1)(c)) |
6. Data Purpose, Storage and Security
Planta Livre stores personal data strictly for the period of time necessary to provide the Company's goods and services and to comply with applicable laws and regulations.
We adopt appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction, including TLS encryption in transit and encryption at rest in the database.
7. Sharing Data with Third Parties
Your data may be shared with the following sub-processors, strictly for service provision:
We do not sell, rent or share your data with third parties for marketing purposes.
8. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, use our contact form. We will respond within 30 days. You also have the right to lodge a complaint with the CNPD (Portuguese Data Protection Authority): www.cnpd.pt.
9. Cookies on the Website
Cookies are groups of data exchanged between the browser and the server, stored as text files on the user's computer. These cookies are stored to ensure the correct operation of the website (authentication, shopping cart, security).
Users can configure their browser to control or prevent the storage of cookies. Disabling essential cookies may limit website functionality. For more details, please consult our Cookie Policy.
10. Changes to this Policy
Planta Livre reserves the right to modify this Privacy Policy at any time. We advise you to review this Policy whenever you provide personal data to Planta Livre. The date of the last update is always indicated at the top of this page.
11. Contact
For any privacy-related questions, please use our contact form.