Privacy Policy

This Privacy Policy explains how DragonLayers ('we', 'us') collects, uses, and protects your personal data when you visit or buy from our online store, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Portuguese law. Our full company identification is shown at the end of this page.

1. Data we collect

• Identity and contact details you provide (name, email, phone, billing and shipping address).
• Order and payment information needed to process and invoice your purchase.
• Messages you send us (for example, via the contact form or email).
• Technical and usage data (IP address, device and browser information, cookies) collected automatically.

2. How and why we use your data

• To process, deliver, and invoice your orders — legal basis: performance of a contract.
• To provide customer support and answer enquiries — legal basis: performance of a contract or our legitimate interest.
• To meet tax, accounting, and consumer-protection obligations — legal basis: legal obligation.
• To send marketing updates where you have opted in — legal basis: your consent, which you may withdraw at any time.

3. Sharing your data

We share personal data only as needed with service providers acting on our behalf, including payment processors, shipping and logistics partners, and our invoicing/accounting provider (Moloni). These providers process data under appropriate agreements. We do not sell your personal data.

4. International transfers

Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. Data retention

We keep personal data only for as long as necessary for the purposes above, including the legal retention periods for invoicing and tax records required under Portuguese law.

6. Cookies

Our store uses cookies and similar technologies that are necessary for the site to work and, with your consent, for analytics and marketing. You can manage cookies through your browser settings.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. To exercise these rights, contact us using the details below.

8. Complaints

If you believe your data-protection rights have been infringed, you may lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD — www.cnpd.pt).

9. Contact

For any privacy request, contact us using the company details shown below.