Privacy policy

Last updated: September 23, 2026

This Privacy Policy describes how SozDat ("we", "us", or "our") collects, uses, stores, and shares personal information when you visit our website, place an order, contact us, create a customer account, subscribe to marketing communications, or otherwise use our online store (the "Store").

The data controller responsible for your personal information is:

SOZDAT UNIPESSOAL LDA
Business address:
R. Francisco Lyon de Castro 27
1B
2725-397 MEM MARTINS
Portugal

Email: stamps@sozdat.com

Tel.: +351914045569

1. Personal Information We Collect

Depending on how you interact with our Store, we may collect the following categories of personal information:

Contact and identification information

This may include your name, billing address, shipping address, email address, telephone number, and other contact details you provide.

Order and transaction information

This may include products ordered, order history, order value, shipping information, payment status, refunds, returns, cancellations, correspondence relating to an order, and other transaction details.

Custom order information

Because many of our products are custom-made, we may receive information and files necessary to manufacture your order, including logos, artwork, text, names, signatures, dimensions, specifications, uploaded files, photographs, and other instructions provided by you.

Please avoid providing sensitive personal information in artwork, files, or messages unless it is genuinely necessary for your order.

Payment information

Payments are processed through Shopify and/or third-party payment service providers. Full payment card details are generally processed directly by those providers and are not made available to us. We may receive limited payment-related information such as payment status, payment method, transaction identifiers, and limited billing details.

Account information

If you create a customer account, we may process information associated with that account, including your login identifier, order history, saved addresses, and account preferences.

Communications

We collect information you provide when you contact us by email, through the Store, through customer support, or through other communication channels.

Device and usage information

When you visit the Store, certain technical information may be collected automatically, including your IP address, browser type, device type, operating system, pages viewed, referring pages, approximate location derived from your IP address, timestamps, cookie identifiers, and information about how you interact with the Store.

Marketing and preference information

If you subscribe to marketing communications or interact with advertising or marketing features, we may process your communication preferences and information about your interactions with those communications.

2. How We Collect Personal Information

We collect personal information:

directly from you when you place an order, upload artwork, create an account, contact us, or submit information to the Store;
automatically through cookies and similar technologies when you use the Store;
from Shopify, which hosts and operates our online store;
from payment processors;
from shipping, postal, fulfillment, and logistics providers;
from fraud-prevention and security providers;
from analytics, advertising, or marketing providers where such services are enabled and permitted by law; and
from other service providers necessary to operate our business.

3. How We Use Personal Information

We may use personal information to:

process, manufacture, and fulfill your order;
prepare custom products according to the files and specifications you provide;
process payments and refunds;
communicate with you about your order;
provide customer service;
arrange shipping, customs processing, and delivery;
manage returns, claims, replacements, and cancellations;
maintain customer accounts;
detect, investigate, and prevent fraud, misuse, security incidents, and unlawful activity;
maintain and improve the Store and our services;
comply with accounting, taxation, consumer protection, product safety, and other legal obligations;
establish, exercise, or defend legal claims;
send marketing communications where permitted by applicable law; and
measure and improve the performance of our Store, marketing, and advertising where permitted and, where required, with your consent.

4. Legal Bases for Processing – EEA Customers

Where the General Data Protection Regulation ("GDPR") applies, we process personal data only when we have a valid legal basis.

Performance of a contract

We process personal information when necessary to enter into or perform our contract with you. This includes processing orders, custom specifications, artwork, payment information, shipping information, customer communications, and after-sales service.

Legal obligations

We process and retain certain information where required to comply with Portuguese, EU, tax, accounting, consumer protection, customs, regulatory, or other applicable laws.

Legitimate interests

Where appropriate, we may process information for legitimate business interests, including:

protecting the Store and our business against fraud and misuse;
maintaining the security of our systems;
providing customer service;
improving our products, services, and business operations;
maintaining appropriate business records; and
establishing, exercising, or defending legal claims.

We rely on legitimate interests only where those interests are not overridden by your fundamental rights and freedoms.

Consent

Where required by law, we rely on your consent for activities such as non-essential cookies, certain analytics or advertising technologies, and certain marketing communications.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

For electronic marketing, we may also contact existing customers regarding similar products where permitted by applicable law, provided that an appropriate opportunity to opt out is offered.

5. Shopify

Our Store is hosted by Shopify.

Shopify processes personal information necessary to provide the ecommerce platform, checkout, customer accounts, security, analytics, and other services used to operate the Store.

In many circumstances Shopify acts as a service provider or data processor on our behalf. For certain Shopify services and features, Shopify may process information for its own purposes or act in another capacity as described in Shopify's applicable privacy documentation and contractual terms.

If Shopify Network Intelligence or other Enhanced Services are enabled, information about your interaction with our Store may also be processed by Shopify for permitted personalization, measurement, analytics, or advertising purposes, subject to applicable privacy choices and consent requirements.

You can learn more about Shopify's processing practices through Shopify's Consumer Privacy Policy and privacy portal.

6. How We Share Personal Information

We may disclose personal information where reasonably necessary to operate our Store and fulfill our obligations to you.

Recipients may include:

Shopify, which hosts and supports our Store;

payment processors and financial service providers, to process payments, refunds, and fraud checks;
shipping carriers, postal operators, customs agents, and logistics providers, to deliver orders;
our warehouse and fulfillment operations, including our warehouse in the United States where applicable to fulfillment;
IT, cloud hosting, security, and technical service providers;
analytics and marketing providers, where enabled and permitted by law;
accountants, tax advisers, legal advisers, insurers, and professional advisers;
government, tax, customs, regulatory, law-enforcement, or judicial authorities, where disclosure is legally required; and
a purchaser, successor, or other relevant party in connection with a merger, sale, restructuring, or transfer of all or part of our business, subject to applicable law.

We require service providers handling personal information on our behalf to process it only for appropriate purposes and subject to applicable contractual and legal safeguards.

7. Cookies and Similar Technologies

Our Store uses cookies and similar technologies.

Some cookies are necessary for the Store to function, including cookies used for checkout, security, fraud prevention, shopping carts, customer accounts, and basic website functionality.

Other cookies may be used for preferences, analytics, performance measurement, marketing, or advertising.

For visitors in the European Economic Area and other jurisdictions requiring consent, non-essential cookies and similar technologies are used only after appropriate consent where required by law.

You can manage your choices through the cookie banner or privacy settings available on the Store. You may withdraw or change your consent at any time through those settings.

Blocking certain cookies may affect some Store functions.

8. Marketing Communications

We may send promotional emails or other electronic marketing communications where permitted by applicable law.

Where consent is required, we will send such communications only after obtaining the required consent.

Where applicable law permits marketing to existing customers concerning similar products or services, we may rely on the applicable legal exception provided that you are given a clear opportunity to object.

You can unsubscribe from marketing communications at any time by using the unsubscribe option included in the communication or by contacting us.

Unsubscribing from marketing does not prevent us from sending transactional or service messages necessary to process or manage an existing order.

9. International Transfers of Personal Information

Because we use Shopify and other international service providers and maintain fulfillment operations in the United States, personal information may be processed outside Portugal or the European Economic Area.

Where GDPR applies and information is transferred to a country outside the EEA, we rely on an appropriate transfer mechanism where required, which may include:

an adequacy decision adopted by the European Commission;
participation by the recipient in an approved data-transfer framework where applicable;
European Commission Standard Contractual Clauses; or
another lawful transfer mechanism provided under the GDPR.

We take reasonable steps to ensure that international transfers are subject to appropriate safeguards required by applicable law.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, accounting, tax, contractual, warranty, dispute-resolution, and regulatory requirements.

In particular, transaction, invoice, accounting, and related supporting records may be retained for 10 years where required under Portuguese tax and accounting law.

Custom artwork, specifications, communications, and order-related files may be retained for as long as reasonably necessary to manufacture and support your order, assist with repeat orders where applicable, resolve disputes or claims, and comply with legal obligations.

Where there is no continuing legal or legitimate reason to retain personal information, it will be deleted, anonymized, or otherwise disposed of in accordance with applicable law and our technical capabilities.

11. Your Rights Under the GDPR

If you are located in the European Economic Area, you may have the following rights, subject to applicable conditions and exceptions:

Right of access – to obtain information about whether and how we process your personal data and receive a copy of it;
Right to rectification – to correct inaccurate or incomplete personal data;
Right to erasure – to request deletion of personal data in circumstances provided by law;
Right to restriction – to request restriction of certain processing;
Right to data portability – to receive certain personal data in a structured, commonly used, machine-readable format and, where technically feasible, transmit it to another controller;
Right to object – to object to processing based on legitimate interests and to object at any time to direct marketing;
Right to withdraw consent – where processing is based on consent; and
Rights relating to certain automated decision-making, where applicable.

These rights are not absolute. For example, we may need to retain transaction or invoice information to comply with legal obligations even after receiving a deletion request.

To exercise a privacy right, contact us at stamps@sozdat.com.

We may request information reasonably necessary to verify your identity before processing a request.

We will respond within the timeframe required by applicable law.

12. Complaints – European Union

If you are in the EEA and believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a competent data protection supervisory authority.

Our lead supervisory authority in Portugal is:

Comissão Nacional de Proteção de Dados (CNPD)
Lisbon, Portugal

You are not required to contact us before making a complaint, although we welcome the opportunity to address your concerns directly.

13. United States Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.

Depending on your state of residence and whether the relevant law applies to our business, these rights may include:

confirming whether we process your personal information;
accessing personal information we hold about you;
requesting correction of inaccurate personal information;
requesting deletion of personal information;
obtaining a portable copy of certain personal information;
obtaining information about categories of personal information collected, used, or disclosed;
opting out of the sale of personal information;
opting out of the sharing of personal information for cross-context behavioral advertising;
opting out of targeted advertising;
opting out of certain profiling activities producing legal or similarly significant effects;
limiting certain uses of sensitive personal information where applicable;
appealing our decision concerning a privacy request where applicable; and
exercising privacy rights without unlawful discrimination or retaliation.

Sale, Sharing and Targeted Advertising

We do not sell personal information for monetary consideration.

However, depending on the technologies enabled on our Store, disclosures of device information, cookie identifiers, or online activity to advertising or analytics providers may be defined as a "sale," "sharing," or "targeted advertising" under certain U.S. state privacy laws even where no money is exchanged.

California Residents

To the extent that the California Consumer Privacy Act, as amended ("CCPA"), applies to us, California residents may exercise the rights provided by the CCPA, including rights to know/access, correct, delete, opt out of sale or sharing, limit certain uses of sensitive personal information where applicable, and receive equal service and pricing when exercising privacy rights.

During the preceding 12 months, depending on how you interacted with our Store, we may have collected the categories described in this Policy, including:

identifiers and contact information;
customer and transaction records;
commercial information;
internet or electronic network activity;
approximate location derived from IP address;
account information;
communications and customer-service information; and
custom order content and files provided by you.

We collect these categories from the sources described in this Policy and use them for the business and commercial purposes described above.

We may disclose these categories to the service-provider and third-party categories described in Section 6.

We do not knowingly sell or share personal information of individuals we know to be under 16 years of age.

Exercising U.S. Privacy Rights

You may submit a privacy request by:

emailing stamps@sozdat.com; or
using the contact/privacy request function available through our Store.

Where applicable, you may designate an authorized agent to submit a request on your behalf. We may take reasonable steps to verify your identity and the authority of an agent.

If applicable state law provides a right to appeal a decision concerning your request, you may appeal by replying to our decision or contacting stamps@sozdat.com and stating that you wish to appeal.

14. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse.

No internet transmission or storage system can be guaranteed to be completely secure. You should therefore use appropriate care when submitting information online.

15. Children

Our Store is intended for a general adult audience and is not directed to children.

We do not knowingly collect personal information from children in circumstances requiring parental consent without obtaining the consent required by applicable law.

If you believe that a child has provided personal information to us unlawfully, please contact us so that we can review and, where appropriate, delete the information.

16. Third-Party Websites and Services

Our Store may contain links to third-party websites or services.

We are not responsible for the privacy practices of independent third parties. We encourage you to review their privacy policies before providing personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, technologies, legal requirements, or services.

The date at the top of this Policy shows when it was last updated.

Where required by law, we will provide additional notice of material changes.

18. Contact Us

If you have questions about this Privacy Policy, our processing of personal information, or wish to exercise your privacy rights, contact:

SOZDAT UNIPESSOAL LDA
Business address:
R. Francisco Lyon de Castro 27
1B
2725-397 MEM MARTINS
Portugal

Email: stamps@sozdat.com

Tel.: +351914045569