Last updated: 19 October 2026.
VIRIATTO provides this online store through Shopify. This page explains, in Portuguese, how the personal data of those who visit or purchase from the store is used. For privacy-related questions, write to business@boxeup.com.
Data we may process
Name, email address, phone number, delivery and billing addresses, order and payment data, purchase history, information shared in messages, and technical browsing data, including IP address, device, and cookies, as used on the website. Payment data is also processed by payment service providers.
Purposes and legal basis
We process the data necessary to manage orders, payments, invoices, deliveries, returns, and customer support (performance of the contract and legal obligations). We may also use it to prevent fraud, ensure security, and improve the store, within the limits of applicable legitimate interests, and to send news and commercial communications, where there is consent or another legal basis.
Who we share data with
The necessary data may be shared with Shopify, payment, shipping, hosting, support, and commercial communication service providers, as well as authorities when there is a legal obligation. Shopify also processes some data for its own services and features, as explained in the Shopify privacy policy.
Cookies
The website may use strictly necessary cookies and, depending on applicable preferences and rules, analytics or advertising cookies. You can manage cookies using the options available on the website and in your browser settings.
Transfers and retention
Some providers may process data outside the European Economic Area. When necessary, recognized protection mechanisms are used, such as adequacy decisions or standard contractual clauses. Data is retained for the period necessary for the stated purposes and for legal invoicing, accounting, or dispute resolution obligations.
Your rights
Under the GDPR, you can request access, rectification, erasure, restriction, and portability of your data, as well as object to certain processing activities, where applicable. You can also withdraw consent without affecting the lawfulness of previous processing. Send your request to business@boxeup.com. You can also consult the Shopify Privacy Portal.
Security, minors, and external links
We adopt appropriate protection measures, but no security system is absolute. The store is not intended for independent purchases by minors. Links to other websites may lead to their own privacy policies.
Complaints and changes
If you believe that your personal data rights have not been respected, you can contact the National Data Protection Commission (CNPD). This information may be updated to reflect legal or technical changes to the store.
Privacy contact: business@boxeup.com.