Privacy policy
1. Data controller
The controller of your personal data is:
- Vertente Zelosa, Lda.
- Rua da Lameira Brava, 36A, Amêndoa, 6110-162 Mação, Portugal
- Tax identification number (NIF): 517 241 498
- Contact: support@blyssia.com
2. Data we collect
- Identification and contact details: name, email, telephone number, billing and delivery addresses.
- Order data: products purchased, purchase history, communications with customer support.
- Account data: login credentials (when you create an account).
- Payment data: processed directly by secure payment providers; we do not store complete card details.
- Browsing data: IP address, device and browser type, pages visited, collected through cookies and similar technologies.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Order processing and delivery | Performance of the contract |
| Customer account management | Performance of the contract |
| Invoicing and tax obligations | Legal obligation |
| Marketing communications (newsletter) | Consent |
| Fraud prevention and security | Legitimate interest |
| Service improvement and analytics | Legitimate interest / Consent (cookies) |
4. Marketing communications
Marketing communications require your prior and express consent (opt-in). You may withdraw consent at any time, free of charge, using the unsubscribe link in each communication or by contacting support@blyssia.com.
5. Sharing with third parties
Your data may be shared with:
- Service providers (Shopify platform, payment processors, carriers, analytics and customer support tools), strictly for the purposes indicated;
- Competent authorities, when required by law.
Some providers may be located outside the European Economic Area; in such cases, we ensure the appropriate safeguards required by the GDPR (for example, standard contractual clauses).
6. Retention period
Data is retained only for as long as necessary for the purposes for which it was collected. Invoicing data is retained for the statutory period of 10 years for tax purposes. Marketing data is retained until consent is withdrawn.
7. Your rights
Under the GDPR, you have rights of access, rectification, erasure (the “right to be forgotten”), restriction of processing, portability, objection and withdrawal of consent.
To exercise these rights, contact support@blyssia.com. You also have the right to lodge a complaint with the supervisory authority, the Portuguese National Data Protection Commission (CNPD) — www.cnpd.pt.
8. Cookies
The Site uses its own and third-party cookies to ensure functionality, analyse usage and personalise content and advertising. You can manage your preferences through the cookie banner or browser settings. Strictly necessary cookies do not require consent.
9. Security
Vertente Zelosa, Lda. adopts appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction.
10. Changes
This Policy may be updated. The current version is always available on the Site, showing the date of its last update.
Last updated: 21 September 2026.