Privacy policy

Controller

TECLAOLADO, UNIPESSOAL LDA, company number 518484335. Data contact: apoio@teklop.pt.

What we process and why

• Name, address, email and phone — to fulfil and deliver the order. Basis: performance of the contract.
• VAT number, where given — to check the intra-EU exemption in VIES. Basis: legal obligation.
• Invoices and sales records — Basis: legal obligation (tax retention).
• Complaint and return records — Basis: legal obligation and legitimate interest in defending claims.
• Strictly necessary cookies (session and basket) — no consent, because the site does not work without them. See the cookie policy.

TekLop never handles payment card data: payment happens at the payment service provider, which receives the card details directly.

Who has access

• the payment provider, to charge and refund;
• the carrier, to deliver;
• the site's hosting and infrastructure;
• the equipment supplier, who receives aggregate information about sales and amounts due — never the buyer's details or part identifiers;
• our accountants and the tax authority, as the law requires.

Transfers outside the EU

There are no systematic transfers outside the European Union. Where a processor handles data outside the EEA it does so under the European Commission's standard contractual clauses.

Retention

• invoices and accounting records: 10 years (tax obligation);
• order and delivery data: 3 years after delivery, matching the guarantee;
• complaints: 5 years after closure;
• panel access logs: 12 months;
• support email: 2 years.

Your rights

Access, rectification, erasure, restriction, portability and objection. Write to apoio@teklop.pt. You may also complain to the Portuguese data protection authority, the CNPD (www.cnpd.pt).

Automated decisions

No automated decisions with legal effect are made about buyers.

Optional first-party analytics

With consent, we process a pseudonymous session identifier, purchase-journey stages, SKU/category, language and an irreversible basket hash to measure conversion and abandonment. This record contains no IP, browser, email, name or full URL. Basis: consent. Retention: no more than 13 months, with deletion when consent is withdrawn.