Privacy policy
Privacy Policy
1. Introduction
This Privacy Policy explains how Ortocare 360 collects, uses, stores, shares and protects personal data when customers, visitors or users access our website, browse our online store, place an order, contact us or interact with our services.
Ortocare 360 values the privacy and protection of personal data. We are committed to processing personal data in a transparent, lawful, fair and secure manner, in accordance with applicable data protection laws, including the General Data Protection Regulation, where applicable. The European Commission describes the GDPR as the EU legal framework governing personal data protection rights and obligations. (European Commission)
By using our website, placing an order or contacting us, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.
2. Entity Identification
Commercial name: Ortocare 360
Tax Identification Number / NIF: 2900368484
Address: Passeio Parque da Cidade, Loja BD, 2670-331 Loures, Portugal
Email: ortocare360.official@gmail.com
Phone: +351 923 277 8874
For any questions related to privacy or personal data, you may contact us at:
ortocare360.official@gmail.com
3. Scope of This Privacy Policy
This Privacy Policy applies to personal data processed through:
our website;
our online store;
orders placed by customers;
customer support communications;
contact forms;
email communications;
shipping and delivery processes;
payment and order management systems;
marketing communications, where applicable;
cookies and similar technologies.
This Privacy Policy does not apply to third-party websites, platforms or services that may be linked from our website.
4. Shopify and Automated Privacy Policy Settings
The Ortocare 360 website may be operated through Shopify or another e-commerce platform.
If Shopify is used, certain privacy-related settings, customer data, order data, payment data, analytics tools, cookies, checkout functions and third-party integrations may be managed through the Shopify platform.
Shopify may provide automated policy tools and templates to help merchants create and update legal pages. These tools are intended to help create a privacy policy adapted to the store’s configuration, but the final content should always reflect the real practices of the business, the apps used, the countries served and the data actually collected. (Shopify)
Where available, Ortocare 360 may use automated Shopify privacy policy tools to help keep the content of this Privacy Policy aligned with store settings and updated Shopify templates.
However, this Privacy Policy should still be reviewed and adapted whenever necessary to reflect our actual business operations, legal obligations and data processing practices.
5. Personal Data We May Collect
Depending on how you interact with our website, we may collect the following categories of personal data:
identification data, such as name and surname;
contact data, such as email address, phone number and billing or shipping address;
order data, such as purchased products, order number, order value and purchase history;
payment-related data, such as payment status, payment method and transaction references;
delivery data, such as shipping address, delivery instructions and tracking information;
communication data, such as messages sent by email, contact forms or customer support channels;
technical data, such as IP address, browser type, device information, operating system and website usage data;
cookie data, such as preferences, analytics identifiers and browsing behaviour, where applicable;
marketing preferences, such as consent to receive promotional emails, where applicable.
We do not intentionally collect more personal data than necessary for the purposes described in this Privacy Policy.
6. How We Collect Personal Data
We may collect personal data directly from you when you:
visit our website;
place an order;
create an account, where available;
subscribe to communications;
contact customer support;
fill in forms on the website;
request information about products or services;
submit a complaint, return or refund request;
interact with cookies or consent banners.
We may also receive certain personal data from third-party service providers involved in the operation of the store, such as payment providers, delivery partners, Shopify, analytics tools or customer support tools.
7. Purposes of Processing Personal Data
Ortocare 360 may process personal data for the following purposes:
to operate and manage the website;
to process and fulfil orders;
to confirm payments;
to arrange shipping and delivery;
to provide customer support;
to respond to questions, requests and complaints;
to manage returns, exchanges and refunds;
to send order confirmations and delivery updates;
to prevent fraud, abuse or misuse of the website;
to comply with legal, tax, accounting and consumer protection obligations;
to improve the website, products and services;
to analyse website performance and user experience;
to send marketing communications, where consent or another valid legal basis applies;
to manage cookie preferences and website functionality.
8. Legal Bases for Processing
Where the GDPR or similar data protection laws apply, we process personal data based on one or more of the following legal bases:
performance of a contract, when processing is necessary to manage purchases, payments, deliveries, returns or customer support related to an order;
legal obligation, when processing is necessary to comply with tax, accounting, consumer protection, invoicing or other legal obligations;
legitimate interests, when processing is necessary to protect our business, prevent fraud, improve services, respond to non-contractual requests or ensure website security;
consent, when required for marketing communications, certain cookies or other processing activities that depend on prior consent.
The applicable legal basis may vary depending on the specific processing activity.
9. Order and Payment Processing
When you place an order, we process the personal data necessary to manage the purchase, confirm payment, prepare the order, communicate with the customer and arrange delivery.
Payment information may be processed by external payment providers. Ortocare 360 does not necessarily store full payment card details, as these may be handled securely by payment processors or the e-commerce platform used by the store.
Payment providers may process your personal data according to their own privacy policies and legal obligations.
10. Shipping, Delivery and Dropshipping
Ortocare 360 operates under a dropshipping model, which means that some or all products may be shipped directly by suppliers, manufacturers, logistics partners or distribution centres.
To fulfil an order, we may need to share necessary personal data with suppliers or logistics partners, including:
customer name;
shipping address;
phone number, where required for delivery;
email address, where required for tracking or delivery updates;
order details;
delivery instructions.
These data are shared only to the extent necessary to process, ship and deliver the order.
Because some suppliers or logistics partners may be located outside Portugal or outside the European Union, personal data may be transferred internationally where necessary for order fulfilment.
11. International Data Transfers
Where necessary, personal data may be transferred to countries outside Portugal, outside the European Union or outside the European Economic Area.
This may happen when:
we use international suppliers;
orders are shipped from international warehouses;
we use global e-commerce, payment, analytics or logistics providers;
technical service providers store or process data internationally.
When international transfers are subject to data protection laws, we seek to rely on appropriate safeguards or legal mechanisms where required.
The European Commission notes that the EU has rules and international data protection arrangements intended to protect EU citizens’ personal data when transferred outside the EU. (European Commission)
12. Sharing Personal Data with Third Parties
We may share personal data with third parties when necessary for the operation of our business and the provision of our services.
These third parties may include:
e-commerce platforms, such as Shopify, where applicable;
payment processors;
shipping companies and logistics providers;
dropshipping suppliers and manufacturers;
IT hosting and website service providers;
analytics providers;
email and communication service providers;
professional advisers, such as accountants, lawyers or consultants;
public authorities, courts, regulators or law enforcement bodies, where legally required.
We do not sell personal data to third parties.
13. Cookies and Similar Technologies
Our website may use cookies and similar technologies to ensure website functionality, improve user experience, analyse traffic, remember preferences and support marketing activities, where applicable.
Cookies may include:
strictly necessary cookies, required for the website and checkout to function;
performance or analytics cookies, used to understand how visitors use the website;
functionality cookies, used to remember preferences;
marketing cookies, used to personalise advertising or measure campaign performance, where applicable.
Where required by law, non-essential cookies will only be used with the user’s consent.
For more information, please consult our Cookies Policy.
14. Marketing Communications
Where permitted by law, Ortocare 360 may send marketing communications about products, offers, news or updates.
Marketing communications may be sent when:
the user has given consent;
there is another valid legal basis under applicable law;
the communication relates to similar products or services and the user has not objected, where permitted.
The user may unsubscribe from marketing communications at any time by using the unsubscribe link provided in the communication or by contacting us at:
ortocare360.official@gmail.com
15. Data Retention
We keep personal data only for as long as necessary for the purposes for which it was collected, including to fulfil orders, provide support, comply with legal obligations, resolve disputes and maintain business records.
Retention periods may vary depending on:
the type of data;
the purpose of processing;
legal, tax or accounting obligations;
contractual obligations;
the need to establish, exercise or defend legal claims.
When personal data is no longer needed, we will delete, anonymise or securely restrict access to it, where appropriate.
16. Data Security
Ortocare 360 seeks to protect personal data through appropriate technical and organisational measures.
These measures may include:
restricted access to personal data;
use of secure platforms and service providers;
password protection;
secure payment processing through third-party providers;
monitoring of suspicious activity;
data minimisation practices;
internal confidentiality practices.
However, no website, online store, email system or digital platform can guarantee absolute security. Users should also take appropriate precautions, such as protecting their login credentials and using secure devices.
17. Your Data Protection Rights
Where applicable under data protection laws, including the GDPR, you may have the following rights:
right of access, to know whether we process your personal data and receive a copy of it;
right to rectification, to correct inaccurate or incomplete personal data;
right to erasure, also known as the right to be forgotten, where legally applicable;
right to restriction of processing, in certain circumstances;
right to data portability, where legally applicable;
right to object, including to certain processing based on legitimate interests or direct marketing;
right to withdraw consent, where processing is based on consent;
right to lodge a complaint with a competent data protection authority.
The GDPR includes rights such as access, rectification, erasure, restriction, portability and objection for data subjects. (Regulamento de Proteção de Dados)
18. How to Exercise Your Rights
To exercise your data protection rights, you may contact us at:
ortocare360.official@gmail.com
Your request should include enough information for us to identify you and understand your request.
For security reasons, we may ask for additional information to verify your identity before responding to certain requests.
We will respond to requests within the legally applicable timeframe.
19. Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully or that your data protection rights have not been respected, you may lodge a complaint with the competent data protection authority.
In Portugal, the competent authority is generally:
CNPD — Comissão Nacional de Proteção de Dados
Website: www.cnpd.pt
You may also contact the data protection authority in your country of residence, where applicable.
20. Children’s Privacy
Our website and products are not intended for use by children without the supervision of a parent or legal guardian.
We do not knowingly collect personal data from children in a manner that is not permitted by law.
If a parent or guardian believes that a child has provided personal data to us without proper consent, they should contact us at:
ortocare360.official@gmail.com
21. Third-Party Links
Our website may contain links to third-party websites, tools, platforms or services.
Ortocare 360 is not responsible for the privacy practices, content, security or policies of third-party websites.
Users should read the privacy policies of any third-party websites or services they access.
22. Automated Decision-Making
Ortocare 360 does not intend to make decisions based solely on automated processing that produce legal effects or similarly significant effects on users.
However, certain third-party tools, fraud prevention systems, payment providers, advertising tools or e-commerce platforms may use automated processes to support security, risk analysis, payment approval, analytics or service personalisation.
Where required by law, users may request more information about automated processing affecting them.
23. Changes to This Privacy Policy
Ortocare 360 reserves the right to change, update or correct this Privacy Policy whenever necessary.
Changes may occur to reflect:
legal or regulatory updates;
changes in Shopify settings or platform policies, where applicable;
changes in our store operations;
new apps, integrations or service providers;
changes in payment, shipping or dropshipping processes;
updates to our internal privacy practices.
Any changes will take effect from the date of publication on the website.
Users should review this page regularly.
24. Contact Details
For any privacy-related question, request or complaint, you may contact:
Ortocare 360
NIF: 2900368484
Email: ortocare360.official@gmail.com
Phone: +351 923 277 8874
Address: Passeio Parque da Cidade, Loja BD, 2670-331 Loures, Portugal
25. Notice Regarding Legal Templates
This Privacy Policy has been prepared based on an informational template and does not constitute legal advice.
If Ortocare 360 uses Shopify’s automated policy tools, the content should be reviewed to ensure that it remains aligned with the actual store settings, apps, integrations, suppliers, payment providers, shipping processes and legal obligations.
Ortocare 360 recommends that this Privacy Policy be reviewed by a lawyer, solicitor or qualified professional before final publication on the website.
Last updated: 05/05/2026