Privacy policy
What we keep, why, and for how long.
Controller
TECLAOLADO, UNIPESSOAL LDA, company number 518484335. Data contact: apoio@teklop.pt.
What we process and why
- Name, address, email and phone — to fulfil and deliver the order. Basis: performance of the contract.
- VAT number, where given — to check the intra-EU exemption in VIES. Basis: legal obligation.
- Invoices and sales records — Basis: legal obligation (tax retention).
- Complaint and return records — Basis: legal obligation and legitimate interest in defending claims.
- Strictly necessary cookies (session and basket) — no consent, because the site does not work without them. See the cookie policy.
TekLop never handles payment card data: payment happens at the payment service provider, which receives the card details directly.
Who has access
- the payment provider, to charge and refund;
- the carrier, to deliver;
- the site's hosting and infrastructure;
- the equipment supplier, who receives aggregate information about sales and amounts due — never the buyer's details or part identifiers;
- our accountants and the tax authority, as the law requires.
Transfers outside the EU
There are no systematic transfers outside the European Union. Where a processor handles data outside the EEA it does so under the European Commission's standard contractual clauses.
Retention
- invoices and accounting records: 10 years (tax obligation);
- order and delivery data: 3 years after delivery, matching the guarantee;
- complaints: 5 years after closure;
- panel access logs: 12 months;
- support email: 2 years.
Your rights
Access, rectification, erasure, restriction, portability and objection. Write to apoio@teklop.pt. You may also complain to the Portuguese data protection authority, the CNPD (www.cnpd.pt).
Automated decisions
No automated decisions with legal effect are made about buyers.
Optional first-party analytics
With consent, we process a pseudonymous session identifier, purchase-journey stages, SKU/category, language and an irreversible basket hash to measure conversion and abandonment. This record contains no IP, browser, email, name or full URL. Basis: consent. Retention: no more than 13 months, with deletion when consent is withdrawn.
