1. Privacy Statement & Data Controller

1.1. At Bela Bera, we respect your privacy and are committed to protecting your personal data in strict compliance with the General Data Protection Regulation (GDPR) (EU Regulation 2016/679) and Portuguese Data Protection Law no. 58/2019.

1.2. The Data Controller responsible for processing all personal data gathered on [www.belabera.com](https://www.belabera.com) is Girafas Ousadas, Lda., with registered offices at Calçada Engenheiro Miguel Pais, Nº 11, 2º, 1200-172 Lisboa, Portugal. If you have any inquiries regarding data protection, you can reach us at hello@belabera.com.

2. Information We Collect & How We Use It

2.1. Categories of Personal Data: We collect and process personal data when you interact with our storefront. This includes:

  • Transactional and Order Data: Your full name, delivery/billing address, email address, phone number, and tax/VAT number (if provided voluntarily for legal invoicing). Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) and fulfillment of fiscal legal duties (Art. 6(1)(c) GDPR).
  • Communication Data: Information shared via contact forms, profile settings, or direct customer service interactions. Legal basis: Legitimate business interest in providing prompt client care (Art. 6(1)(f) GDPR).
  • Marketing Information: Your email address when you voluntarily subscribe to our style newsletters. Legal basis: Direct consent (Art. 6(1)(a) GDPR). You can unsubscribe instantly at any time via the opt-out links present in our communication footers.
  • Technical and Navigation Tracking Data: IP addresses, browser configurations, and user behavior flows (clickstreams) captured automatically to customize layouts. Legal basis: Prior user consent through our cookie infrastructure (Art. 6(1)(a) GDPR).

3. Data Retention, Security, & Third-Party Sharing

3.1. Security Infrastructure: Your personal records are maintained on secure, firewalled database networks accessible only to a restricted group of credentialed personnel bound by confidentiality agreements. While we utilize industry-standard precautions, it is important to note that online transmissions are never completely immune to external interception.

3.2. Data Sharing Framework: We do not sell, trade, or leak your data to outside entities for marketing monetization. Your data is shared exclusively with critical sub-contracted technical processors that support our Shopify operations under formal processing agreements, such as:

  • Shopify International Limited: Our hosted e-commerce architecture provider.
  • Logistics and Shipping Providers: Courier agencies tasked with physical order fulfillment and tracking updates.
  • Payment Gateways: Secure token processors managing card authorization protocols (Visa, Mastercard, Amex, PayPal).
  • Tax and Financial Authorities: Legally required transmission of invoicing files under Portuguese Código do IVA regulations. 3.3. Data Retention: Information is stored only for the duration required to satisfy operational purposes, except where regulatory or fiscal law decrees longer holding periods (such as transactional tax ledgers which must be maintained for 10 years).

4. Your Rights as a Data Subject

4.1. Under the GDPR framework, you possess comprehensive statutory controls over your personal information. You may exercise these options at any time by emailing hello@belabera.com:

  • Right of Access and Portability: Request detailed logs of your processed files or ask for machine-readable exports.
  • Right to Rectification and Erasure: Correct inaccurate information or request absolute account deletion (barring outstanding fiscal constraints).
  • Right to Restrict or Object: Halt data usage for explicit analytical purposes or withdraw direct marketing consents immediately.

4.2. Identity verification protocols must be executed by our team prior to responding to your data request to maintain site security. If you believe your data has been handled unlawfully, you have a right to file a claim with the Comissão Nacional de Proteção de Dados (CNPD) via www.cnpd.pt.

5. Cookie Policy

5.1. The Bela Bera website utilizes cookie tracking technology deployed via the Shopify platform to recognize web browsers, remember shopper selections, track active shopping carts, and continuously optimize user interfaces. A cookie is a minor alphanumeric script file downloaded to your system's hard drive that records non-personally identifiable metrics.

5.2. Core Categories of Cookies Deployed on www.belabera.com / https://www.belabera.com

  • Strictly Necessary Cookies
    • Core Operational Purpose: Mandatory files that drive fundamental platform systems. These keep items in your shopping cart, protect payment gateway screens, and maintain secure user authentication. Disabling them breaks checkout functionality.
    • Authority & Retention: Session / Persistent (Shopify Platform).
  • Analytical & Tracking Cookies
    • Core Operational Purpose: Deployed using Google Analytics and Shopify Insights to measure aggregated store traffic, clickstream paths, and popular clothing categories. No raw personal credentials are held.
    • Authority & Retention: Persistent (Requires explicit user consent).
  • Functional Preferences Cookies
    • Core Operational Purpose: Remembers local interface parameters such as preferred language choices, region selections, or automated profile greeting tokens.
    • Authority & Retention: Persistent (Requires explicit user consent).
  • Social Media & Sharing Cookies
    • Core Operational Purpose: Embedded social sharing widgets (e.g., Meta, Pinterest, Instagram buttons) allowing style curation sharing. These networks independently drop tracking scripts beyond our direct control.
    • Authority & Retention: Third-Party Networks.

 

5.3. Managing Cookie Authorizations

When you first access our store, an interactive cookie choice banner allows you to determine active categories. Alternatively, you can refuse or wipe cookie histories directly through your browser configurations.

6. Quality & Corporate Whistleblowing Policies

6.1. Quality Commitment

Bela Bera operates under an explicit corporate commitment to distribute sustainable, reliable, and premium quality apparel products. Our processes conform strictly to standard European safety guidelines and textile regulations, focusing on consumer safety, ethical resource management, and continuous optimization of our online checkout experience.

6.2. Confidentially Conducted Whistleblowing Channel (Sharing)

In full compliance with Portuguese Law no. 93/2021, of December 20, transposing EU Directive 2019/1937, Bela Bera provides a dedicated corporate whistleblowing system named Sharing. This channel allows internal staff, clients, vendors, or external parties to report any illegal infractions, regulatory non-compliance, consumer protection issues, or unethical professional activities detected within our corporate environment.

Submissions are evaluated with strict confidentiality, complete neutrality, and zero retaliation risk. Reports can be filed with our compliance supervisor via:

  • Via Email: hello@belabera.com (Subject line: Confidential - Compliance Whistleblowing Officer)
  • Via Registered Mail:

Girafas Ousadas, Lda.

Attn: Compliance Officer - Canal de Denúncia (Sharing)

Calçada Engenheiro Miguel Pais, Nº 11, 2º, 1200-172 Lisboa, Portugal