Política de privacidad

The data controller responsible for processing personal data in connection with this website and Glovant orders is:

• Solarisflux Unipessoal Lda
• Rua Dom Afonso Henriques, nº 132, 4950-854 Monção, Portugal
• Email: sales@glovant.co
• Phone: +351 916 476 582
• VAT / taxpayer identification: [NIF/NIPC — to be completed] (update with your registered NIF/NIPC).

“Glovant” is a commercial brand operated by the controller. References to “we”, “us” or “our” in this policy include the controller in its capacity as operator of this store.

This policy describes how we process personal data when you visit glovant.com (or the domain where this store is hosted), create an account, place an order, subscribe to communications, or contact us. It applies in accordance with Regulation (EU) 2016/679 (“GDPR”) and Lei n.º 58/2019 (and related Portuguese legislation) where applicable.

Depending on your interaction with us, we may process:

• Identity & contact: name, delivery/billing address, email, telephone number.
• Account: login credentials if you register an account, preferences, wishlists.
• Transaction: order details, payment references (payment card data are processed by payment service providers—we do not store full card numbers on our servers when card payments are enabled).
• Communications: messages you send us, support tickets, survey responses.
• Technical & usage: IP address, device/browser type, approximate location, cookies and similar identifiers (see our Cookie policy).
• Marketing: preferences and consents for newsletters or personalised offers, where applicable.

We process personal data for the following purposes:

• Contract performance (Art. 6(1)(b)): taking orders, payment, delivery, invoicing (including Moloni or other invoicing tools where integrated), customer support, warranty and returns handling.
• Legal obligation (Art. 6(1)(c)): tax, accounting, and consumer law records; responding to lawful requests from authorities.
• Legitimate interests (Art. 6(1)(f)): fraud prevention, IT security, improvement of our website and products, analytics in line with your choices and applicable law, asserting or defending legal claims.
• Consent (Art. 6(1)(a)): non-essential cookies where required; marketing emails or SMS where not covered by soft opt-in rules—withdrawable at any time.

We may share data with:

• Hosting, email, and IT providers that support this website and our ERP systems.
• Payment service providers, banks, and anti-fraud services.
• Carriers and logistics partners (e.g. UPS or others) for shipping and tracking.
• Invoicing, accounting, and marketplace integrations operated as part of Solarisflux’s stack, where relevant to your order.
• Professional advisers (lawyers, accountants) when required.

We use data processing agreements (Art. 28 GDPR) with processors where required. Transfers outside the EEA, if any, rely on appropriate safeguards (e.g. Standard Contractual Clauses) as required by Chapter V GDPR.

We keep personal data only as long as necessary for the purposes above, including statutory retention periods (e.g. tax and commercial law—often up to 10 years for accounting records in Portugal, subject to your adviser’s confirmation). Order and invoice data are typically retained for the duration of the commercial relationship and applicable legal deadlines. Marketing data are kept until you withdraw consent or object, as applicable.

Under the GDPR, you may have the right to:

• Access your personal data (Art. 15);
• Rectification (Art. 16);
• Erasure (“right to be forgotten”) in certain cases (Art. 17);
• Restriction of processing (Art. 18);
• Data portability, where applicable (Art. 20);
• Object to processing based on legitimate interests (Art. 21);
• Withdraw consent at any time, without affecting lawfulness of processing before withdrawal (Art. 7(3)).

To exercise these rights, contact us at sales@glovant.co. You may also lodge a complaint with the Portuguese supervisory authority—Comissão Nacional de Proteção de Dados (CNPD)—at www.cnpd.pt.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration, including access controls and secure connections (HTTPS) where deployed.

We do not use solely automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless we inform you otherwise and provide a legal basis.

Our services are directed at adults. We do not knowingly collect data from children under 16 without parental consent where required by law.

We may update this policy to reflect legal, technical, or business changes. The “Last updated” date at the top will change accordingly; material changes may be communicated by email or a notice on the site where appropriate.

Questions about privacy: sales@glovant.co