Privacy policy

1. Introduction

LAMS Woodcrafts, the trade name of LAMS Concept, Lda. (hereinafter "LAMS Woodcrafts", "we", "us" or "our"), with registered office at Rua 25 de Novembro de 1975, n.º 2, 2º A, 1495-156 Miraflores - Algés, Portugal, and NIF 518223922, is committed to protecting the privacy of its customers and users of the website www.lamswoodcrafts.com (hereinafter the "Site"). This Privacy and Data Protection Policy (hereinafter the "Privacy Policy") describes how we collect, use, share, protect and process your personal data, in strict compliance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016) and with Law no. 58/2019, of 8 August, which ensures the implementation of the GDPR in Portugal.

We recommend that you read this Privacy Policy carefully to understand our practices regarding your personal data.

2. Data Controller

The controller responsible for the processing of personal data is LAMS Concept, Lda., legal entity no. 518223922, with registered office at Rua 25 de Novembro de 1975, nº2, 2º A, 1495-156 Miraflores – Algés, Portugal.

For any question related to the processing of your personal data or to exercise your rights, you may contact LAMS Woodcrafts through the following channels:

  • Email: info@lamswoodcrafts.com
  • Phone: +351 919 522 623
  • Postal address: Attn. Data Protection Officer, LAMS Concept, Lda., Rua 25 de Novembro de 1975, n.º 2, 2º A, 1495-156 Miraflores - Algés, Portugal.

3.  Personal Data Collected

In connection with our business and your use of the Site, we may collect and process the following categories of personal data:

  • Identification Data: Full name, tax identification number (NIF).
  • Contact Data: Billing and delivery address, email address, phone/mobile number.
  • Payment Data: Information relating to the payment methods used (for example, partial credit/debit card details, payment references). Please note that full payment data is processed directly by secure, certified payment service providers and is not stored in full by LAMS Woodcrafts.
  • Browsing and Site Usage Data: IP (Internet Protocol) address, device and browser type used, approximate geographic location (based on IP), date and time of access, pages visited, time spent on the Site, search terms used, and information collected through cookies and similar technologies (see our Cookie Policy for more details).
  • Purchase History and Interactions: Record of your purchases, products viewed or added to the cart, preferences, and the history of communications with our customer support service (emails, call records, where applicable).
  • Data provided voluntarily: Any other information you provide to us directly, for example when filling in contact forms, taking part in surveys or competitions, or submitting product reviews.

 

4. Legal Basis for the Processing of Personal Data

LAMS Woodcrafts' processing of your personal data is based on the following legal bases, under the GDPR:

  • Performance of a contract: Where processing is necessary for the conclusion, performance or management of a contract to which the data subject is party, or for pre-contractual steps taken at the data subject's request. This includes processing your order, delivering the products, invoicing, and managing the business relationship.
  • Consent: Where the data subject has given free, specific, informed and unambiguous consent to the processing of their personal data for one or more specific purposes. For example, for sending marketing communications (newsletters, promotions), or for the use of certain types of cookies.
  • Legitimate interest: Where processing is necessary for the purposes of the legitimate interests pursued by LAMS Woodcrafts or by third parties, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Examples include improving our products and services, fraud prevention, ensuring the security of our networks and information, and statistical analysis of Site usage.
  • Compliance with a legal obligation: Where processing is necessary for compliance with a legal obligation to which LAMS Woodcrafts is subject. For example, tax or accounting obligations, or responses to judicial or administrative authorities.

5. Purpose of Data Processing

Your personal data is processed by LAMS Woodcrafts for the following purposes:

  • Order and Sales Management: Processing, invoicing, shipping and delivery of your orders; management of payments and returns. (Basis: Performance of a contract; Legal obligation).
  • Customer Support: Responding to your questions, requests for information, suggestions or complaints. (Basis: Performance of a contract; Legitimate interest).
  • Service-Related Communications: Sending information about the status of your orders, changes to our Terms and Conditions or to this Privacy Policy. (Basis: Performance of a contract; Legal obligation).
  • Marketing and Promotional Communications (with consent): Sending newsletters, information about new products, special offers, promotions, events or other marketing communications that may be of interest to you, by email or other electronic means, where you have given your consent. (Basis: Consent).
  • Improving the Site and Our Services: Analysing Site usage to optimise its functionality, usability and user experience; developing new products and services based on customer preferences and feedback. (Basis: Legitimate interest).
  • Statistical and Performance Analysis: Producing aggregated, anonymised statistical reports on business activity and Site usage. (Basis: Legitimate interest).
  • Fraud Prevention and Detection: Monitoring transactions and activity to prevent and detect fraudulent or abusive use of the Site and our services. (Basis: Legitimate interest; Legal obligation).
  • Compliance with Legal Obligations: Compliance with legal, tax, accounting or regulatory requirements, or court orders. (Basis: Legal obligation).

6. Data Retention Period

Your personal data will be kept by LAMS Woodcrafts only for the period strictly necessary to fulfil the purposes for which it was collected, or for the period required by applicable law.

The specific retention periods are as follows:

  • Customer data for invoicing and management of business transactions: For 10 years after the last transaction, in order to comply with tax and accounting obligations.
  • Data for marketing purposes (with consent): Until the data subject withdraws their consent, or for a maximum period defined internally in the absence of interaction.
  • Browsing and cookie data: As detailed in our Cookie Policy (generally up to 12-24 months, depending on the type of cookie).
  • Data relating to customer support contacts: For the period necessary to resolve the matter and for evidentiary purposes, generally up to 3 years after resolution.
  • Data for the management of complaints or the exercise of legal rights: For the period necessary to resolve the complaint or until the court decision becomes final, plus the applicable legal limitation periods.

Once the applicable retention period has elapsed, your personal data will be securely deleted or anonymised, so that it can no longer be associated with you, unless there is a legal obligation requiring its retention for a longer period.

7. Data Sharing

LAMS Woodcrafts may share your personal data with the following categories of third-party entities, only when necessary for the purposes described in this Policy and under the applicable legal bases:

  • Shipping and Logistics Service Providers: To enable delivery of your orders (e.g. carrier companies).
  • Payment Service Providers: To process your payments securely (e.g. electronic payment providers, banks).
  • Technology and IT Service Providers: Companies that provide us with website hosting, system maintenance, data analysis, database management, email marketing platforms (for sending communications with your consent), and other technology support services.
  • Public, Judicial or Regulatory Authorities: Where required by law, to comply with legal obligations, or in response to court orders or requests from competent authorities (e.g. the tax authority, courts).
  • Professional Advisers: Lawyers, auditors, accountants, in connection with the provision of their professional services to LAMS Woodcrafts.

LAMS Woodcrafts ensures that, when sharing data with third parties, they are contractually required to implement appropriate technical and organisational measures to protect your personal data and to process it only for the agreed purposes and in accordance with our instructions and applicable law.

LAMS Woodcrafts does not sell, rent or transfer your personal data to third parties for those third parties' own commercial or marketing purposes without your explicit consent.

8. International Transfers of Personal Data

Some of the service providers with whom we share your personal data may be located outside the European Economic Area (EEA). In such cases, LAMS Woodcrafts will ensure that any international transfer of personal data is carried out in accordance with the GDPR and other applicable legislation, adopting appropriate safeguards, such as:

  • Transfer to countries that have been the subject of an adequacy decision by the European Commission, recognising that the country in question ensures a level of data protection equivalent to that of the EEA.
  • Use of standard contractual clauses approved by the European Commission.
  • Adoption of Binding Corporate Rules applicable to companies, where applicable.
  • Other legally provided mechanisms that guarantee an adequate level of protection for your data.

9. Rights of the Data Subject

Under the GDPR and applicable law, the data subject has the right to exercise, at any time, the following rights in relation to their personal data processed by LAMS Woodcrafts:

  • Right of Access: To obtain confirmation as to whether or not your personal data is being processed and, if so, the right to access your data and detailed information about the processing.
  • Right to Rectification: To obtain the rectification of inaccurate personal data concerning you, or to request that incomplete data be completed.
  • Right to Erasure ("Right to be Forgotten"): To request the erasure of your personal data, in certain circumstances (for example, if the data is no longer necessary for the purpose for which it was collected, if you withdraw the consent on which the processing is based, or if the data has been processed unlawfully).
  • Right to Restriction of Processing: To request the restriction of the processing of your personal data, in certain situations (for example, if you contest the accuracy of the data, for a period enabling LAMS Woodcrafts to verify its accuracy).
  • Right to Data Portability: To receive the personal data concerning you that you have provided to LAMS Woodcrafts, in a structured, commonly used and machine-readable format, and the right to transmit that data to another controller, where the processing is based on consent or on a contract and is carried out by automated means.
  • Right to Object: To object, at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on LAMS Woodcrafts' legitimate interest. LAMS Woodcrafts will stop processing the data unless it demonstrates compelling legitimate grounds that override your interests, rights and freedoms, or for the exercise or defence of legal claims.
  • Right to Object to Direct Marketing: To object at any time to the processing of your data for direct marketing purposes, including profiling to the extent that it relates to such marketing.
  • Right Not to be Subject to Automated Decisions: The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except for the legally provided exceptions.
  • Right to Withdraw Consent: If the processing of your personal data is based on your consent, you have the right to withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent given before its withdrawal.

To exercise any of these rights, you should contact LAMS Woodcrafts in writing through the channels indicated in Point 2 of this Privacy Policy. We may request additional information to verify your identity before acting on your request.

You also have the right to lodge a complaint with the competent data protection supervisory authority. In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD) – Rua de São Bento, n.º 148, 3º, 1200-821 Lisbon – Tel: +351 213928400 – Fax: +351 213976832 – Email: geral@cnpd.pt – Website: www.cnpd.pt.

10. Security of Personal Data

LAMS Woodcrafts implements appropriate technical and organisational measures, which are continuously reviewed, to protect your personal data against destruction, loss, alteration, unauthorised access, disclosure or any other form of accidental or unlawful processing. These measures include, among others:

  • Encryption of sensitive data during transmission (for example, through SSL/TLS protocols).
  • Restricted access controls on personal data, based on the need-to-know principle.
  • Regular monitoring of our systems to detect and respond to vulnerabilities and threats.
  • Training and awareness-raising for our staff on data protection and information security.
  • Implementation of internal security policies and personal data breach response plans.

Despite all our efforts, please note that no security measure is infallible. The transmission of information over the Internet always carries some risk. We ask for your cooperation in protecting your data, in particular by using strong passwords, not sharing your access credentials, and keeping your software and antivirus up to date.

11. Use of Cookies

Our Site uses cookies and similar technologies to improve your browsing experience, analyse traffic, personalise content and advertisements, and provide social media features. For detailed information about the cookies we use, their purposes and how you can manage your preferences, please see our Cookie Policy, available on the Site.

12. Changes to this Privacy Policy

LAMS Woodcrafts reserves the right to update or amend this Privacy Policy at any time to reflect changes in legislation, in our data processing practices or in our services. Any significant change will be communicated through a notice on our Site or, where appropriate, by email (if we have your contact details and consent to do so).

The date of the last update will always appear at the beginning of this Policy. We recommend checking this Privacy Policy regularly to stay informed about how we protect your personal data.

13. Contact

If you have any question, query or concern regarding this Privacy Policy or the processing of your personal data by LAMS Woodcrafts, or if you wish to exercise your rights, please contact us through the channels indicated in Point 2 of this Policy.