index

INITIAL LAUNCH

KNOW MORE

PRIVACY POLICY RA-RO

Your privacy is important to us. Learn how we collect, use, and protect your personal data.

RA-RO has implemented various physical, electronic, and procedural measures to safeguard your privacy and to protect your personal information.

 

1. PRIVACY STATEMENT

RA-RO is a registered brand operated by the commercial company Historias Em Objectos Produtos Artesanais Marketing e Consultoria Lda, headquartered at Avenida Guerra Junqueiro N 16 4 Esq, 1000-167 Lisbon, Portugal, VAT number: 518585069.

For RA-RO, the privacy of your data is important. We therefore appreciate the trust you place in us. Accordingly, RA-RO has implemented various physical, electronic, and procedural measures to safeguard your privacy and protect your personal information. We also guarantee that your data will be processed according to its intended purposes and the rights granted to you by law, guided by the legal principles in force regarding privacy and personal data protection, namely those established in Regulation (EU) 2016/679 of the European Parliament and Council, the General Data Protection Regulation ("GDPR"), and other applicable legislation on privacy and data protection, including national laws that complement the GDPR.

This privacy policy was created to ensure that the User knows what information we collect and how we use it. This privacy policy applies to all our customers and website visitors, both current and former. By visiting and/or using our website, you should read and accept the terms of our Privacy Policy, agreeing to be bound by it and by everything set out below.

This privacy policy explains the conditions under which all personal information provided to us when visiting and/or using our website is processed. Any personal information we may request from you as a visitor and/or user of our website will be handled in accordance with RA-RO’s privacy policy and will not be shared with third parties, except in cases provided for in this same policy.

By using our website, the User consents to the collection, storage, disclosure, and use of their data in accordance with this privacy policy and accepts its terms and conditions.

RA-RO reserves the right to review and modify this privacy policy occasionally for improvement, publishing the revised version on its website. We also encourage Users to check and review this policy periodically to stay informed of any changes applied.

 

2. DATA CONTROLLER

Historias Em Objectos Produtos Artesanais Marketing e Consultoria Lda, registered with the Commercial Registry under the unique company and registration number 518585069, is the entity responsible for processing the personal data of its customers and/or potential customers.

For questions related to the processing of your personal data, please contact us through the following means:

 

3. PERSONAL DATA, DATA SUBJECTS, AND CATEGORIES OF PERSONAL DATA

 

3.1. What are personal data?

Under the GDPR, Personal Data means any information, of any kind and in any format, relating to an identified or identifiable natural person. A person is considered identifiable if they can be identified, directly or indirectly, for example through a name, identification number, location data, electronic identifier, or other elements that allow for their identification.

3.2. Who are the data subjects?

This Privacy Policy applies to the personal data we receive in the context of commercial relationships with clients, potential clients, or suppliers, in compliance with applicable legal obligations, as well as to the personal data of users of our website.

3.3. How do we collect and what categories of personal data do we process?

Information automatically collected by RA-RO: Whenever you visit our website, we automatically collect information related to your transactions and how you use the website through our Shopify platform and analytics tools.

Data provided directly: The User may provide us with identifiable personal data when they:

  • Register for a RA-RO account
  • Order handcrafted products
  • Request customer support or send us other communications
  • Participate in raffles or contests
  • Subscribe to newsletters and special offers
  • Respond to surveys
  • Other situations where Users voluntarily provide personal data to RA-RO

Categories of data collected:

  • Contact information: name; address; email; phone/mobile; billing address; shipping address
  • Personal information: ID card/citizen card number; tax number; bank account details
  • Identification data: customer number; order number
  • Customer history: purchased products; purchase and payment history; artisan product preferences
  • Technical data: device details; IP addresses; browsing data

Platforms and Technologies used:

Shopify:

  • Order and payment processing
  • Customer data management
  • Sales analysis of handcrafted products

Google (Google Ads, Google Analytics):

  • Measurement of ad performance
  • Website behaviour analysis
  • Remarketing and custom audiences

Facebook Meta (Facebook, Instagram):

  • Targeted advertising
  • Conversion measurement
  • Creation of lookalike audiences

TikTok Ads:

  • Advertising on TikTok
  • Conversion tracking
  • Performance analysis

Cookiebot:

  • Cookie consent management
  • Automatic cookie categorisation
  • Compliance reporting

 

3.4. Cookies

Our website uses cookies and other cookie-like files to improve the quality of the website and the services provided to the User. We use Cookiebot to manage cookie consent.

Types of cookies used:

  • Strictly necessary cookies: Enable basic site functionality (shopping cart, user session)
  • Preference cookies: Remember your choices and improve experience
  • Analytics cookies: Google Analytics to understand site usage
  • Marketing cookies: Google Ads, Facebook Meta, TikTok for targeted advertising

 

3.5. How do we use your data?

By registering as a User, you authorise RA-RO to use the identifiable personal information provided for the following purposes:

  • Provide website features and functionalities for handcrafted products
  • Fulfil product and service orders placed by the User
  • Communicate about order and product status
  • Send information about our unique products and artisan stories
  • Internal commercial purposes such as data analysis
  • Help RA-RO create more relevant content on traditional crafts
  • Digital marketing through Google Ads, Facebook Meta, and TikTok
  • Remarketing to users interested in handcrafted products

 

4. LEGAL BASIS AND RETENTION OF PERSONAL DATA

 

4.1. On what basis may RA-RO process your personal data?

  • Consent: For newsletters, remarketing, call recordings
  • Contract performance: For order processing, invoicing, delivery of handcrafted products
  • Legal obligation: For reporting to tax and regulatory authorities
  • Legitimate interest: For service improvement, fraud prevention, website analysis

4.2. How long do we keep your personal data?

  • Active customer data: Duration of commercial relationship + 5 years
  • Tax data: 10 years (legal obligation)
  • Marketing data: Until consent is withdrawn
  • Google Analytics data: 26 months
  • Cookie data: As configured in Cookiebot
  • Call recordings: 6 months (for proof of transactions) or 30 days (service quality)

 

5. SHARING OF PERSONAL DATA

5.1. With whom do we share your personal data?

As a rule, RA-RO does not share personal data about the User with other people or unaffiliated companies without the User’s consent. However, RA-RO provides data to trusted service providers for limited purposes:

Essential service providers:

  • Shopify (e-commerce platform)
  • Carriers (CTT, DPD, etc. – for delivery of handcrafted products)
  • Payment processors (PayPal, Stripe, etc.)

Marketing partners:

  • Google (Google Ads, Analytics)
  • Facebook Meta (advertising on Facebook and Instagram)
  • TikTok (advertising)

Technology providers:

  • Cookiebot (cookie management)
  • Email marketing providers

Artisan partners: RA-RO may share the name and general location (city/district) of customers with artisans whose products were purchased, for order follow-up purposes.

5.2. International transfers

Some of our partners (Google, Facebook Meta, TikTok, Shopify) may transfer data to countries outside the EEA. These transfers are protected by:

  • European Commission adequacy decisions
  • EU-approved standard contractual clauses
  • Certifications such as the EU-US Data Privacy Framework

 

6. SECURITY

 

6.1. How do we keep your personal data secure?

RA-RO uses appropriate technical and organisational security measures:

Physical security measures:

  • Secured premises with restricted access
  • Data protection policy applicable to all employees

Logical security measures:

  • System access protected by login and password
  • Network protected by antivirus and firewalls
  • Use of SSL on the domain
  • Data transfer encryption technology
  • Additional protection through the Shopify platform

 

7. RIGHTS OF DATA SUBJECTS

In compliance with the GDPR, RA-RO guarantees data subjects the following rights:

  • Right of Access: Obtain information on which personal data are processed
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of personal data
  • Right to Data Portability: Receive data in a digital format
  • Right to Restriction: Request restriction of processing
  • Right to Object: Object to processing based on legitimate interest
  • Right to Withdraw Consent: Withdraw consent at any time
  • Right to Complain: File a complaint with the CNPD (Portuguese Data Protection Authority)

Exercising your rights

To exercise any of these rights or clarify questions about this Privacy Policy, please contact us:

After receiving documents proving your identity, we will provide the requested information or make the necessary changes.

Last update: September 2025

This privacy policy applies to all information that RA-RO maintains about the User and their account, unless otherwise indicated.