Privacy Policy

Last Updated: 30 September 2026

Welcome to DoriBoop, We operate www.doriboop.com, which is hosted on Squarespace.

We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights regarding your information.

1. Information We Collect

We collect information that you voluntarily provide to us, as well as data that is collected automatically when you visit our Site.

  • Information You Provide to Us: This includes information you input into forms on our website, such as your name, email address, phone number, and message when you use our Contact Form.

  • Information Collected Automatically (Squarespace Analytics & Cookies): When you visit our Site, Squarespace automatically collects certain functional and analytical data. This includes your IP address, browser type, operating system, the pages you visit, the time and date of your visit, and the referral URLs. This data is collected using cookies and similar tracking technologies.

2. How We Use Your Information

We process your personal data based on your consent, our legitimate business interests, or to fulfill a contract with you. Specifically, we use your data to:

  • Provide, operate, and maintain our website.

  • Respond to your comments, questions, and customer service requests.

  • Send you newsletters, marketing communications, or updates, [Only if you have opted in].

  • Analyze website traffic and user behavior to improve our website design and services.

  • Monitor and prevent fraudulent transactions or unauthorized access.

3. How We Share Your Information

We do not sell your personal data. We only share your data with trusted third parties who help us run our website and business:

  • Squarespace: As our website hosting provider, Squarespace hosts our data and provides us with website analytics. You can read Squarespace’s Privacy Policy here: squarespace.com.

  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4. Cookies and Tracking Technologies

Our website uses cookies to function properly and to analyze our traffic.

  • Functional Cookies: These are necessary for the website to run smoothly and securely.

  • Analytical/Performance Cookies: These help us understand how visitors interact with our site.

You can manage your cookie preferences through the Cookie Banner displayed on our website or by adjusting your web browser settings to refuse cookies.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

‍ ‍

5. Data Retention How and Why We Use Your Information (Under "Legal Basis for Processing")

  • Invoicing and Tax Compliance (Legal Obligation): We process your billing information to comply with local statutory tax laws. Specifically, this data is required to issue official electronic invoices (Recibos Verdes) through the Portuguese Tax Authority (Autoridade Tributária e Aduaneira) portal. Under GDPR Article 6(1)(c), this processing is necessary to fulfill our legal tax obligations.

  • Contractual Execution: We use your details to manage contracts, process service orders, and handle corporate tax withholding (Retenção na Fonte) as mandated by Portuguese fiscal law.

  • Government and Tax Authorities: We share your billing name, address, and NIF/VAT number with the Portuguese Tax Authority (Portal das Finanças) strictly for the legally required generation of invoices and tax compliance tracking.

  • Financial Records Retention: Please note that tax-related invoices containing your information must be legally archived for the mandatory retention period required by Portuguese fiscal law (typically 10 years), after which they are securely handled or deleted.

6. Your GDPR Rights

If you are a resident of the European Union (EU) or European Economic Area (EEA), you have the following rights under the GDPR:

  • The right to access: You can request copies of your personal data.

  • The right to rectification: You can request that we correct any information you believe is inaccurate.

  • The right to erasure ("Right to be forgotten"): You can request that we erase your personal data under certain conditions.

  • The right to restrict or object to processing: You can object to us processing your data or ask us to restrict how we use it.

  • The right to data portability: You can request that we transfer your data to another organization or directly to you.

  • The right to withdraw consent: If we are relying on your consent to process your data, you can withdraw it at any time.

To exercise any of these rights, please contact us using the information below.

7. Contact Us

If you have any questions about this Privacy Policy or wish to make a request regarding your data, please contact us at:

  • Name/Business: [Your Name or Company Name]

  • Email: [Your Contact Email Address]

  • Address: [Your Physical Business Address, if applicable]