A Tasteology - Creative Studio, Lda. (hereinafter “Tasteology”) values the trust you place in us.

In this Policy, we clearly explain how we process your personal data, for what purposes we use it, and how we ensure its security.

Who is the Data Controller?

The entity responsible for the collection and processing of your data is:

• Name: Tasteology - Creative Studio, Lda.

• National Information Processing Center 517111420

• Headquarters Manuel Augusto da Costa Maia Street 64, 4470-784 Vila Nova da Telha

• Contact: coffee@tasteology.pt

2. What data do we collect and why?

We collect your data only when necessary for the following purposes:

Tasteology does not store credit card data.

• External Processing: Card or digital account payments are securely processed by Stripe, PayPal or Ifthenpay.

• Direct Payments: In the case of MBWay, we will have access to your mobile number. In case of Bank Transfer, We will have access to your account number (IBAN) and account holder's name for payment verification.

4. Who do we share your data with?

For our operation to function, we share strictly necessary data with trusted partners:

• Logistics: MRW and CTT or another logistics/transport service (for the package to reach you).

• Pick-up Points: If you choose to pick up your order at one of our partner locations, your identification details (name, mobile number, and order number) will be provided to the establishment's manager so they can verify the recipient's identity and ensure the correct and secure delivery of your products.

• Billing Moloni and Cegid (in compliance with tax obligations).

• Online Box Office: Ticketing partners (e.g., 3cket) for event management.

• Marketing and Technology: Brevo (communications), Google, Meta, and our technical hosting and maintenance providers (for troubleshooting purposes only and under a duty of confidentiality).

• Event Partners: In events co-organized or sponsored, your personal data will only be shared with these entities if, at the time of registration, you give your explicit and separate consent for this purpose (through a checkbox dedicated). We will never share your data for partner marketing purposes without your direct authorization.

5. How long do we keep your data?

We don't store data forever. We apply the following time limits:

• Billing Data 10 years (mandatory legal term in Portugal).

• Marketing (Brevo): Until consent is withdrawn or after 1 year of inactivity.

• Support and Contacts: 5 years after the last interaction.

• Recruitment: 1 year after receipt, or immediate deletion upon the candidate's request.

• Comments: Until the user requests its removal or the content is removed.

6. Transfers outside the European Union

When using services like Google, Meta, or Brevo, data may be processed in the USA. We ensure that these partners operate under the Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

7. Your Rights

The user is entitled to:

1. Access to your data.

2. Rectify Incorrect information.

3. Delete your data (Right to be forgotten), except for any that we are legally obligated to keep.

4. To oppose or limit treatment (e.g., stop receiving newsletters).

5. Portability of the data.

To exercise any of these rights, simply send an email to coffee@tasteology.pt.

8. Supervisory Authority

If you consider that your data is not being processed correctly, you have the right to submit a complaint to the CNPD – National Data Protection Commission (www.cnpd.pt).

Last updated: May 14, 2026.