Privacy policy
SOLARISFLUX Unipessoal Lda is the controller of the personal data processed on arianleather.co. This policy says what we collect, why, for how long, who sees it and what you can do about it, as the GDPR and Portuguese Law 58/2019 require.
Controller
SOLARISFLUX Unipessoal Lda, Rua Dom Afonso Henriques 132, 4950-854 Monção, Portugal, NIPC 518 304 426. Privacy requests: support@arianleather.co. We are not required to appoint a data protection officer.
What we process, why, and for how long
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Name, delivery and billing address, email, phone, order history, account login | Fulfil and deliver orders, customer service, your account | Performance of the contract | 10 years from the order, as Portuguese accounting and tax law requires |
| Payment method, last four digits, payment status (full card data stays with the payment provider) | Take payment, prevent fraud, refunds | Contract; legitimate interest in preventing fraud | 10 years with the accounting records |
| Custom-order data: measurements, chosen options, embroidery artwork and wording, notes, spec sheets, stitch previews | Make your piece, handle guarantee claims | Contract | Until the legal guarantee has run out, then deleted; artwork files are deleted 12 months after delivery |
| Emails, chat messages, complaint records | Support, claims, legal obligations such as the Livro de Reclamações | Contract; legal obligation | 3 years after the last contact, or longer where the law requires |
| Newsletter email address and preferences | Send news and offers you asked for | Consent, withdrawn by unsubscribing | Until you unsubscribe |
| Not applicable: the site does not collect or show reviews | No processing | Consent | No data kept |
| IP address, device, browser, pages viewed | Run and secure the site, measure and improve it | Legitimate interest for security; consent for analytics and marketing cookies | See the cookie policy |
Who receives your data
- Shopify International Limited, Ireland, which hosts the shop, the checkout and your account; Shopify stores data in the EU, the United States and Canada under its EU standard contractual clauses and the EU-US Data Privacy Framework.
- Payment providers: Shopify Payments, PayPal (Europe) and Klarna Bank AB, each a controller for the payment itself.
- Carriers UPS, DHL and FedEx, who receive your name, address, phone and email to deliver and notify you, and for custom pieces the customs data the import requires.
- Shopify Email for newsletters, and Google Analytics and Google Ads for measurement, as described in the cookie policy.
- Our manufacturing partner, True Trade Corporation in Sialkot, Pakistan, which receives the spec sheet of a made-to-order piece: measurements, chosen options and embroidery artwork, identified by order number only, never your name or address. Pakistan has no EU adequacy decision; the transfer rests on the standard contractual clauses in our manufacturing agreement.
- Our accountant and, where the law requires, tax and consumer authorities.
We do not sell personal data and we do not share it for other companies' marketing.
Your rights
You may ask for access to your data, a copy of it in a portable format, correction, deletion, restriction, and you may object to processing based on legitimate interest. You may withdraw consent at any time without affecting what was done before. Write to support@arianleather.co; we answer within one month. You may also complain to the Comissão Nacional de Proteção de Dados, cnpd.pt, or to the data protection authority of the country where you live.
Automated decisions
We make no decisions about you by automated means alone. Payment providers screen orders for fraud; if an order is refused on that basis you can ask us for a human review.
Children
The shop is for adults. We do not knowingly collect data from anyone under 16.
Security
The site and checkout use TLS encryption. Access to order data is limited to the people who need it to serve you. Custom-order files are stored in Shopify Files and in our Microsoft 365 storage with access control.
Changes
We update this policy when our processing changes and show the date of the current version at the top of the page. Version: 4 October 2026.