top of page

Privacy Policy

Last updated: November 2025

At Café de Origen CC, we respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, share and safeguard the information you provide to us through our website www.cafedeorigencc.com.

1. Identity of the Data Controller

Data Controller:
Café de Origen CC
EORI: PT316264199
Address: Lisbon, Portugal
Email: cafedeorigencc@gmail.com

2. Personal Data We Collect

We collect only the minimum data necessary to offer you a safe and personalised service.
Depending on how you interact with the site, we may collect:

  • Identification data: first name, surname, company name, tax number (NIF), address, telephone number and email address.

  • Purchase and payment data: information required to process orders (via secure platforms such as PayPal or Wix Payments).

  • Browsing data: IP address, device type, browser type, pages visited and session duration (via cookies or analytics tools).

  • Contact data: messages or enquiries submitted through forms or email.

3. Purposes of Processing

We use your personal data solely for the following purposes:

  • Managing your orders and deliveries.

  • Issuing invoices and fiscal documentation.

  • Responding to enquiries or requests for information.

  • Sending commercial communications or newsletters (only with your consent).

  • Analysing traffic and website usage to improve our services.

4. Legal Basis for Processing

We process your data under the following GDPR conditions:

  • Performance of a contract: when you make a purchase or request a service.

  • Compliance with a legal obligation: issuing invoices, accounting or tax records.

  • Explicit consent: for receiving marketing communications or newsletters.

  • Legitimate interest: maintaining website security and preventing fraud.

5. Data Retention

Personal data is retained only for the period necessary to fulfil the stated purposes:

  • Orders and invoicing: up to 10 years (as required by tax law).

  • Contacts and enquiries: up to 2 years.

  • Subscriptions and marketing: until you withdraw your consent.

Once the retention period expires, the data will be securely deleted or anonymised.

6. Data Sharing and Access

Café de Origen CC does not sell or rent your data to third parties.
We may share information only with:

  • Payment service providers: PayPal, Wix Payments.

  • Transport companies: FedEx, CTT, DHL (for delivery of orders).

  • Website hosting provider: Wix.com (site infrastructure).

  • Accounting or tax advisors: when legally required.

All providers comply with GDPR and apply appropriate security measures.

7. Your Rights

You have the right to:

  • Access your personal data.

  • Correct inaccurate or outdated information.

  • Request deletion (“right to be forgotten”).

  • Restrict or object to processing in certain cases.

  • Transfer your data to another controller (where applicable).

  • Withdraw consent at any time (for emails or newsletters).

You can exercise these rights by writing to:
📧 cafedeorigencc@gmail.com
Please include valid identification for security purposes.

8. Information Security

The website cafedeorigencc.com uses:

  • SSL encrypted connection (https://)

  • Secure servers managed by Wix.com Ltd.

  • Internal policies to prevent unauthorised access, loss or alteration of data.

9. Cookies and Similar Technologies

This site uses necessary cookies for its operation, as well as analytical and personalisation cookies, always subject to user consent.
You can find more details in our Cookie Policy.

10. Links to Third Parties

Our website may contain links to other sites (such as social networks or payment platforms).
We are not responsible for the content or privacy practices of these external sites.
We recommend reviewing their own policies before providing any personal data.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect legal or technical changes.
We will inform you through a visible notice on the website or by email where appropriate.

12. Contact and Complaints

For any questions regarding this policy or the processing of your data:
📧 cafedeorigencc@gmail.com
📍 Café de Origen CC, Lisbon, Portugal

You may also lodge a complaint with the Portuguese Data Protection Authority:
Comissão Nacional de Proteção de Dados (CNPD) – www.cnpd.pt

bottom of page