PRIVACY POLICY – Lusobox

Privacy Policy

Last updated: August 10, 2026

Espinhas Audaciosas Unipessoal Lda (hereinafter “LUSOBOX”) is committed to ensuring that the collection and processing of your data comply with the General Data Protection Regulation (GDPR).

1. Data Controller

Identity: Espinhas Audaciosas Unipessoal Lda
Registered office: RUA DO PARAISO N 195 1 ESQ, 4000-377, Porto, Portugal
Email: contact@lusobox.com

2. Data Collected

We collect information when you use our website, particularly after scanning a LUSOBOX QR Code:

  • Identification data: Last name, first name
  • Contact details: Email address, telephone number
  • Delivery details: Full postal address
  • Browsing data: IP address, session cookies

Professional data (B2B customers): As part of our services for businesses (seminars, events, corporate gifts), we also collect: company name, intra-community VAT number, registered office address, and the name and email address of the business contact.

3. Purposes of Processing

The processing of your data is necessary for:

  • Contract performance: Processing, invoicing, and shipping your order
  • Logistics: Transmitting delivery information to our partner SmartLo (Portugal)
  • Legal obligations: Maintaining accounting records and declaring VAT (OSS system)
  • Your consent: If you choose to subscribe to our newsletter
  • Legitimate interest: Securing payments and improving our service

B2B orders: Processing quotations, professional invoicing, customizing gift boxes, and coordinating logistics for grouped business deliveries.

4. Legal Basis

Processing is based on the contract (to process your order), your consent (if you choose to subscribe to our newsletter), and legitimate interest (to secure payments).

5. Recipients and Data Sharing

LUSOBOX never sells your data. It is shared exclusively with:

  • SmartLo (Portugal): Our logistics provider that prepares your parcels
  • Transport companies (e.g., DPD, DHL, UPS) to deliver your box
  • Payment service providers (e.g., Stripe, PayPal, MBWay, Shopify Payments)
  • Tax authorities: For remitting VAT (OSS system)

6. Data Retention

Your data is retained for as long as necessary to perform the contract and in accordance with applicable legal obligations (generally 5 to 10 years for accounting data).

Your data is retained for as long as necessary to perform the contract and in accordance with applicable legal obligations: 10 years for accounting data (individuals and professionals), in accordance with Portuguese law.

7. Your Rights

Under the GDPR, you have the following rights: access, rectification, erasure, objection, restriction, and portability of your data. To exercise these rights, contact us at contact@lusobox.com.

8. Cookies

Our website uses cookies necessary for its proper functioning (session, shopping cart) and analytical cookies. Only functional cookies are used.
You can manage your preferences via the cookie banner.