Privacy Policy

Statement on the protection of personal data

Lusitanna, operated by MY17 LTD, respects and protects your privacy. This statement describes the processing of data provided or collected through our digital platforms, which allow visitors to access our website and use our services.

These privacy principles comply with the EU General Data Protection Regulation (GDPR), the UK GDPR and the UK Data Protection Act 2018, and applicable Portuguese law, whenever the Customer is resident in the European Union.

Data Controller:
MY17 LTD, a company registered in England and Wales, Company Number: 16946674, with registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
Contact email: info@lusitanna.com

Legal basis for data processing

The legal basis for the use of personal data in the process of concluding a contract, or a possible contract, is that personal data is necessary for the execution of a commercial contract with the Customer, or prior to the conclusion of such a contract.

Where the legal basis for data processing is the Customer's consent, the Customer has the right to withdraw their consent at any time, without affecting the lawfulness of the processing carried out by MY17 LTD during the period prior to the withdrawal of consent.

Whenever we are legally obliged to provide personal information to law enforcement agencies or other governmental entities, we will do so in compliance with that legal obligation.

Reason and purpose of personal data collection

The main categories of data collected by Lusitanna and the main purposes of collection are described below:

As part of general business processes
We collect personal information about website visitors, buyers and suppliers (including third-party service providers). This information may include the individual's name, contact information, and other information necessary to do business with you or your organization.

To respond to your requests
By contacting us by phone, email, mail, through our digital platforms or other communication channels, you may choose to consent to the transmission of personal information, including your name, email address or other contact information. This information allows us to respond to your requests, prepare the appropriate steps regarding product purchase offers and adequately respond to warranty or other requests.

Buyers and potential buyers
We collect personal data from customers and potential customers, including name, contact information, purchasing habits and payment data, to the extent necessary for the execution of the contract. Data may be shared with logistics partners so that they can process the order, including product delivery. Automatic data collection in digital tools allows us to ensure the security of our users.

Business development
The personal information you entrust to us, or which is automatically collected by our digital tools, is used to improve our knowledge about the users of our products and will form the basis for relevant communications and offers. Personal data may be used to improve products, processes and the website itself.

Commercial communications
With your permission, where necessary, we may use your personal information to inform you about Lusitanna products and services. If you do not want MY17 LTD to use your personal information in this way, or no longer wish to receive newsletters, you can unsubscribe at any time. At the end of various communication channels, you will find an unsubscribe link, or you can contact us by email. We will delete your information from our systems within two months of receiving the unsubscribe request, unless we store and process your information based on a different legal basis than consent.

Surveys for visitors and buyers
Personal information of our website visitors may be collected as part of surveys on Lusitanna services and products.

Consideration of visitor and customer preferences
Personal data of visitors or customers of our website may be collected for the provision of specific products and consideration of their interests.

Compliance with legislation
We may collect personal information as required or permitted by law. The personal and non-personal information we collect is treated as confidential and will not be sold or transferred to third parties, except for the exceptions mentioned in this statement and with certain service providers, such as payment gateways and other transaction processors, who have their own privacy policies regarding the information we are required to provide about transactions related to purchases.

For these suppliers, we recommend reading their respective privacy policies, so that you can understand how your personal information will be used by them.

Please note that certain suppliers may be located or have facilities in jurisdictions other than yours or ours. Therefore, if you proceed with a transaction involving a third-party service provider, your information may become subject to the laws of the jurisdiction(s) where that provider or its facilities are located. Whenever you leave our store's website or are redirected to a third-party website, you will be governed by that website's Privacy Policy or Terms of Service.

How we collect your data

We collect information you provide to us when you contact us about products, services or information, when you register on our web pages, participate in public forums or other activities on our digital tools, respond to customer surveys, or communicate with us in any other way. Data is also collected through various technologies, such as cookies — see the section on Cookies below.

We will not transfer your personal information to third parties, except in the following circumstances:

  • When affiliated companies or third parties provide services on our behalf — for example, responding to requests, delivering orders or providing customer support. These companies are prohibited from using your personal information for purposes other than those required by our company or by law.
  • When we share personal information internally or with third parties to ensure the safety and security of our customers, protect our rights and property in accordance with legal procedures, or when we believe in good faith that disclosure is required by law.

Your control and your decisions

In accordance with applicable legislation, you have the following rights regarding the collection, use and sharing of your data:

  • Change your subscription and decision about receiving news and notifications;
  • Decide whether you wish to receive marketing messages about products and services that we believe may be of interest to you;
  • Choose whether to receive information resulting from targeted marketing, from marketing networks, from data exchange and market analysis providers, or from other services;
  • Request access to your personal data, correct inaccurate or incomplete information and, in certain circumstances, request the deletion of such information from our records.

You can exercise these rights or request access to your personal information by contacting us in writing at info@lusitanna.com and following the instructions given to you.

Please note that if you do not allow us to collect your personal data, we may not be able to provide certain products and services. If you have questions about specific personal information that we process or store, please contact us in writing. We will respond to your request within one month, with the option to extend the period by another month; should this happen, we will notify you of the matter within the first month of receiving your request.

Security, integrity and data storage

The security, integrity and confidentiality of your data are extremely important to us. In order to protect data against unauthorized access, disclosure, use and modification, we apply technical, administrative and physical security measures, which we review periodically to keep up with the latest technologies and methods. Despite our best efforts, no precautionary measure is completely foolproof.

We will retain your personal information for as long as necessary for the purposes stated in this policy, unless a longer retention period is required or permitted by law.

Changes to this privacy policy

We may, from time to time, amend this statement to adapt it to newer technologies, industry practices, regulatory requirements, or other purposes. The current version will always be published on our digital platforms. We advise you to consult this Policy regularly. Whenever required by applicable law, we will obtain your consent before amending it.

Your rights as a data subject

You have the right to request from MY17 LTD, as the controller, at any time:

  • Access to your personal data and information about: the purposes of processing; the categories of personal data concerned; the recipients or categories of recipients to whom the data have been or will be disclosed, in particular recipients in third countries or international organizations; the envisaged retention period or, if not possible, the criteria used to determine it; the existence of automated decision-making, including profiling, and the underlying logic;
  • A free copy of your personal data, in a format specified by you (when the request is made by electronic means, the copy will be provided in electronic format, unless otherwise indicated); we may charge a reasonable fee for additional copies;
  • The rectification of inaccurate personal data;
  • The restriction of the processing of your personal data, when: the accuracy of the data is contested, for the period necessary to verify its accuracy; the processing is unlawful and the data subject opposes the erasure of the data and requests instead the restriction of their use; MY17 LTD no longer needs the data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; or the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject;
  • The erasure of personal data ("right to be forgotten"), when the conditions provided for in Article 17 of the GDPR are met, namely when you withdraw the consent on which the processing is based;
  • The portability of personal data, in a structured, commonly used and machine-readable format, with the right to transmit those data to another controller;
  • Objection to the use of your personal data for direct marketing purposes, including profiling;
  • Not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, in accordance with Article 22 of the GDPR;
  • Lodge a complaint with the competent supervisory authority if you consider that the processing of your personal data violates the GDPR or the UK GDPR.

Procedure for exercising rights

All requests related to the exercise of rights regarding personal data can be addressed, in writing, to the controller, via email: info@lusitanna.com

For the purposes of secure identification in exercising these rights, we may request additional information, and may only refuse to act if we cannot identify the data subject with reasonable certainty.

Complaints and supervisory authority

If you are not satisfied with how we handle your personal information, you can submit a complaint directly to us, via email info@lusitanna.com, providing your contact details. We will consider your complaint and respond within 30 days.

If you are a resident of the United Kingdom and believe that MY17 LTD has not adequately resolved your complaint, you can contact the Information Commissioner's Office (ICO), the UK data protection authority: https://ico.org.uk

If you are a resident of Portugal or another European Union country, you can contact the Comissão Nacional de Proteção de Dados (CNPD), in Portugal: https://www.cnpd.pt, or the data protection authority of your usual country of residence.

Cookies

The personal data of our users is an area to which we pay close attention. We ensure that all legal requirements are met and, where possible, exceeded.

In accordance with applicable personal data protection legislation, MY17 LTD, as the controller of the Lusitanna online store, is obliged to protect the personal data of its users.

For business needs, Lusitanna collects the following user data:

  • First and last name;
  • Delivery address(es);
  • Company name or legal entity (if the user is a legal person);
  • Tax identification number of the legal entity (if the user is a legal person);
  • Email address (username);
  • Password, in encrypted format;
  • Contact phone number;
  • Country of residence;
  • Other data that the user voluntarily shares in the online store forms or subsequently adds to their profile.

Lusitanna is not responsible for the accuracy, completeness, and timeliness of the data entered by users.

For security reasons, we collect users' IP addresses when they access the site. At the beginning of each visit, the user receives a session cookie, used to identify and monitor the shopping cart. Other cookies may also be stored, such as: the user's ID in encrypted format (for identification in future visits); records of evaluated products; and Google Analytics cookies, for analyzing website visits.

All the above data, except cookies, are permanently stored on our servers. Session cookies are stored in the server's memory during the visit and deleted after one hour of inactivity. Persistent cookies are stored on the visitor's device.

What are cookies and what are they for: a cookie is a small text file that the website sends to your browser when you visit it. This way, it is recognized by the website, which remembers information about your visit and provides a simpler and more personalized web experience.

Disabling cookies: you can control and change your cookie settings in your browser at any time. If you change or delete cookies from your browser, update your browser, or change devices, you may need to repeat this process. You can also disable Google Analytics tracking through: https://marketingplatform.google.com/about/

Order-related notifications

We reserve the right to notify you of the status of your order, via the phone number or email address provided. If products are not collected for more than 5 days (in cases of pickup at a physical location), we reserve the right to contact you as a reminder.

After receiving the order, our team may contact you to verify your satisfaction with the purchase. If you wish, you may also be notified about other benefits available for future purchases, including promotions by email or SMS. You can cancel this consent at any time by sending an email to info@lusitanna.com or through the unsubscribe link present in the communications.

Last updated: July 2026.