Privacy Policy

Last updated: 26 October 2026

This Privacy Policy explains how we collect and use your personal data when you visit atamaeurope.com, buy from us or contact us, and what rights you have under the EU General Data Protection Regulation (GDPR) and Portuguese law.

1. Who is responsible for your data

The data controller is Trevo Sentinela Unipessoal Lda (NIPC 516525549), trading as Atama Europe. Our full company details are on our Legal information page. For any privacy question or request, write to info@atamaeurope.com.

2. What data we collect

  • Order data: name, delivery and billing address, email, phone number, products ordered, order history and, if you request an invoice, your VAT number.
  • Payment data: payments are processed by our payment providers (such as Shopify Payments and PayPal). We do not see or store your full card number.
  • Account data: if you create a customer account, your login details and saved addresses.
  • Communications: messages you send us by email, contact form, chat or social media, and reviews you choose to publish.
  • Newsletter and alerts: your email address and preferences if you subscribe to our newsletter, back-in-stock alerts or push notifications.
  • Browsing data: IP address, device and browser information, pages visited and similar data collected through cookies and similar technologies, according to the choices you make in our cookie banner (see our Cookie Policy).

3. Why we use your data and on what legal basis

  • To process and deliver your orders, handle returns, exchanges and warranty claims, and provide customer support — necessary to perform our contract with you (Art. 6(1)(b) GDPR).
  • To issue invoices and keep accounting and tax records — legal obligation (Art. 6(1)(c) GDPR).
  • To prevent fraud and keep our website secure, and to defend legal claims — our legitimate interest (Art. 6(1)(f) GDPR).
  • To send you our newsletter, offers, back-in-stock alerts and push notifications — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time using the unsubscribe link or by contacting us.
  • To measure how our website is used and to show you relevant advertising (analytics and marketing cookies/pixels) — your consent given in the cookie banner (Art. 6(1)(a) GDPR).

We do not sell your personal data and we do not make decisions about you based solely on automated processing.

4. Who we share your data with

We only share your data with service providers that help us run our store, and only as needed for the purposes above. They act on our behalf (processors) or, where indicated in their own terms, as independent controllers:

  • E-commerce platform: Shopify (store hosting, checkout and customer accounts).
  • Payments: Shopify Payments and PayPal.
  • Shipping: the carriers that deliver your order (for example GLS, CTT, DHL or FedEx), which receive your name, address, phone and email.
  • Invoicing and accounting: our certified invoicing software and our accountant.
  • Email, newsletter and customer service: Google Workspace (email) and Brevo (newsletter and transactional emails).
  • Website apps: tools for pop-up sign-up forms, product reviews, push notifications, pre-orders and back-in-stock alerts, and our Instagram feed.
  • Analytics and advertising (only with your consent): Google, Meta (Facebook/Instagram) and TikTok.
  • Marketplaces: if you buy our products on a marketplace (such as Decathlon), that marketplace shares the order data we need to fulfil it.
  • Authorities: when required by law (for example tax authorities or courts).

5. International transfers

Some providers (for example Shopify, Google, Meta and PayPal) may process data outside the European Economic Area. When that happens, the transfer is protected by an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or by the European Commission's Standard Contractual Clauses.

6. How long we keep your data

  • Order, invoice and accounting records: for the period required by Portuguese tax and accounting law (currently up to 10 years).
  • Customer account: until you ask us to delete it or after a long period of inactivity.
  • Newsletter and alerts: until you unsubscribe.
  • Customer service messages: as long as needed to handle your request and any related claim.
  • Cookies: for the period indicated in our Cookie Policy.

7. Your rights

You have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time (without affecting processing carried out before the withdrawal). To exercise any of these rights, email info@atamaeurope.com. We will reply within one month.

You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt — or with the authority of the EU country where you live.

8. Security

Our store runs on Shopify, which uses encrypted connections (HTTPS) and complies with the PCI-DSS card security standard. We limit access to personal data to the people who need it to do their work.

9. Children

Our website is not directed at children under 16. Products for children must be purchased by an adult.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. If we make significant changes, we will let you know on our website or by email.