Privacy & GDPR Policy

Data Controller Details

Minatura Health and Beauty Lda. ("OrthosCare", "we", "us") is the data controller for personal data collected through orthoscare.com. Contact our privacy team at suppoort@orthoscare.com for any request relating to this policy.

1. What We Collect

• Account & order data: name, email, delivery/billing address, phone, order history.

• Payment data: processed by our PCI-DSS Level 1 payment provider; we do not store full card numbers.

• Device & browsing data: IP address, browser type, pages visited, collected via cookies (see Cookie Policy).

• Customer support data: messages, order issues, and — where you choose to share it — health-related context relevant to product fit or use (see the separate Consumer Health Data Privacy Notice).

2. Why We Process It (Legal Basis)

• Contract performance: processing orders, shipping, customer service.

• Legal obligation: tax, accounting, and consumer-law record-keeping.

• Consent: marketing emails/SMS, non-essential cookies — withdrawable at any time.

• Legitimate interest: fraud prevention, site security, and product improvement, balanced against your rights.

3. Who We Share It With

Payment processors, shipping carriers, customer-support and email platforms, and analytics/advertising providers, each bound by a data processing agreement. We do not sell personal data for money.

4. International Transfers

Where data is transferred outside the EU/EEA (e.g., to a US-based processor), we rely on Standard Contractual Clauses or an equivalent safeguard recognized under GDPR Chapter V.

5. Retention

Order and invoicing data is kept for the period required by Portuguese tax law (currently 10 years); marketing data is kept until you unsubscribe or after a defined period of inactivity.

6. Your Rights

• Access, rectification, erasure, restriction, portability, and objection under GDPR Articles 15–21.

• The right to lodge a complaint with the Portuguese data protection authority (CNPD) or your local EU supervisory authority.

• California, Virginia, Colorado, and other US-state residents: see the Do Not Sell/Share My Info page for state-specific rights.

7. Children

The Site is not directed to children under 16. We do not knowingly collect personal data from children.

8. Security

We apply technical and organizational measures, including encryption in transit (256-bit SSL) and access controls, appropriate to the risk.

9. Changes to This Policy

We will post any material change here with an updated "Last updated" date, and notify account holders by email where required.

OrthosCare • Rua Centro de Artes, 8 – Loja H, 6200-505 Covilhã, Portugal • support@orthoscare.com