Privacy Policy

Last updated: February 12, 2026

This Privacy Policy aims to inform users and customers of the Across Algae online store about how personal data is collected, processed, and protected, in accordance with the General Data Protection Regulation (GDPR) and other applicable legislation in Portugal.

By using the online store and making purchases, the user acknowledges and accepts the processing of their personal data as described in this document.

 

1. Data Controller

The entity responsible for processing personal data collected through this online store is:

  • Trade Name: ACROSS ALGAE

  • Legal Name: NUNO FILIPE ROSA, UNIPESSOAL LDA

  • Tax Identification Number (NIF): 519177940

  • Contact Email: apoio.cliente@acrossalgae.pt

 

2. Personal Data Collected

For the operation of the online store and the provision of contracted services, the following categories of personal data are collected:

  • Identification Data: Full name and Tax Identification Number (optional).

  • Contact Data: Email address, phone number, shipping address, and billing address.

  • Payment and Financial Data: Information necessary for processing payments and refunds (e.g., IBAN). It should be noted that sensitive credit/debit card data is processed directly by secure payment gateways and is not stored in Across Algae's databases.

  • Browsing and Device Data: IP address, device type, browser, approximate geographical location, and interactions with the website (collected via Cookies).

 

3. Google User Data Policy (Google Login)

In order to comply with the Google API Services User Data Policy, we specifically detail data processing when the user chooses to log in/register through their Google account:

  • Data Accessed: When using Google login, our application only accesses basic profile information authorized by the user: Full Name, Email Address, and Profile Picture.

  • Data Usage: This data is strictly used to create your customer account at Across Algae, authenticate your identity, and allow access to your customer area without the need to create an additional password. The email is used for transactional communications (orders) and, if consented, for marketing.

  • Data Sharing: Data received through Google APIs is not shared with third parties for advertising purposes, nor sold to data brokers. It is only transferred to our technical subcontractors strictly necessary for the operation of the store (e.g., hosting and billing system), as described in section 5.

  • Data Storage & Protection: Data from Google is stored in our secure database, protected by SSL/HTTPS encryption and restricted access controls, ensuring the same level of security applied to other personal data.

  • Data Retention & Deletion: This data is kept as long as the user maintains an active account in the store. The user can revoke our application's access through their Google account security settings (https://myaccount.google.com/permissions) or request the complete deletion of their data by sending an email to apoio.cliente@acrossalgae.pt.

 

4. Purpose and Legal Basis for General Processing

The personal data collected are intended for the following purposes:

  • Order Processing: Management of the contractual relationship, dispatch of orders, and delivery status notifications. (Basis: Contract performance).

  • Billing and Legal Compliance: Issuance of invoices and fulfillment of tax and accounting obligations. (Basis: Compliance with legal obligation).

  • Customer Support: Responding to requests for information, questions, or complaints. (Basis: Legitimate interest or pre-contractual steps).

  • Marketing: Sending newsletters, promotional communications, or SMS, if the user has given their express consent. (Basis: Consent).

  • Statistical Analysis and Service Improvement: Analysis of website usage to improve browsing experience and commercial offerings. (Basis: Legitimate interest or consent).

 

4. Data Sharing with Third Parties

To ensure the provision of the service, personal data may be transmitted to outsourced third parties acting on behalf of Across Algae, namely:

  • Payment Processing: Easypay and Revolut.

  • Logistics and Transport: CTT.

  • Billing Services: TOConline.

  • Analytics and Digital Marketing: Google Analytics and Meta/Facebook.

These entities only have access to the data strictly necessary for the performance of their functions and are obliged to process the data in accordance with the GDPR.

 

5. Data Retention Periods

Personal data will be retained only for the period necessary for the purposes for which they were collected:

  • Billing and Transaction Data: Retained for a period of 10 years, in compliance with the legal deadlines established by the Commercial Code and tax legislation.

  • Marketing Data: Retained until the user withdraws their consent or requests to unsubscribe.

  • Other Data: Retained as long as the contractual relationship or registration in the online store is maintained, being deleted or anonymized after the end of this relationship, unless there is a legal obligation to retain them.

 

6. Cookie Policy

The online store uses cookies to improve the user experience.

  • Essential Cookies: Necessary for the website to function (e.g., keeping products in the cart, session management).

  • Analytical and Advertising Cookies: Used to collect statistical data and display relevant advertising (Google Analytics, Facebook/Meta Pixel).

The user can, at any time, configure their browser to refuse cookies, however, it should be noted that this may limit some functionalities of the online store.

 

7. Rights of Data Subjects

Under the terms of the GDPR, the user has the right, at any time, to:

  • Request access  to personal data;

  • Request the rectification of incorrect or incomplete data;

  • Request the erasure of data ("right to be forgotten"), except when compliance with legal obligations prevents it;

  • Request the restriction of processing;

  • Object to processing (opposition);

  • Request the portability of data.

To exercise any of these rights, the user must send a written request to the email: apoio.cliente@acrossalgae.pt.

 

8. Data Security

Across Algae implements appropriate technical and organizational measures to protect personal data against destruction, loss, alteration, unauthorized disclosure, or access. Communication between the user's device and the online store is encrypted using a secure protocol (SSL/HTTPS).

 

9. Changes to the Privacy Policy

Across Algae reserves the right to update or change this Privacy Policy at any time, and these changes will be published on this page. Regular review of this document is recommended.