Privacy Policy

1. Introduction

This Privacy Policy explains how Aldeia de Lobos, Turismo Rural LDA ("we", "us", "our") collects and processes personal data when you use FindMyNemo. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws, including the California Consumer Privacy Act (CCPA).

2. Data Controller

The data controller is Aldeia de Lobos, Turismo Rural LDA, VAT PT518287360, [Registered office - update in src/lib/legal.ts]. You can contact us at tang@findmynemo.com.

3. Data We Collect

Account data: name, email address and password (stored as a hash).

Profile data: phone number, address and postal code (if you provide them).

Usage data: aquariums, water parameters, compatibility checks and other activity within the Service.

Store data: if you publish a store, the details you provide (name, address, opening hours, stock).

Payment data: processed by Stripe. We do not store full card numbers.

Technical data: IP address, browser information, device data and logs.

4. Purposes and Legal Bases (GDPR Art. 6)

To provide and maintain the Service, and to manage your account (Art. 6(1)(b) — performance of a contract).

To process payments and subscriptions (Art. 6(1)(b) — contract; payment data is processed by Stripe).

To send service-related communications (Art. 6(1)(b) / Art. 6(1)(f) — legitimate interest).

To comply with legal, tax and accounting obligations (Art. 6(1)(c)).

With your consent, to send marketing communications (Art. 6(1)(a)). You may withdraw consent at any time.

5. Sharing and Disclosure

We share personal data with trusted providers: Stripe (payment processing), hosting and infrastructure providers, and email delivery providers. These providers act on our instructions and may only process data for the purposes we specify.

We do not sell your personal data, and we do not disclose it to third parties for their own marketing purposes.

6. International Transfers

Some providers may process data outside the European Economic Area (for example, in the United States). Where this happens, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

7. Data Retention

We retain personal data for as long as your account is active and for a reasonable period afterwards, or for as long as required to comply with legal, tax and accounting obligations.

8. Your Rights (GDPR)

You have the right to access, rectify and erase your personal data, to restrict or object to processing, and to data portability. To exercise these rights, contact us at tang@findmynemo.com. You also have the right to lodge a complaint with your local supervisory authority (in Portugal, the CNPD — Comissão Nacional de Proteção de Dados).

9. California Residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, use and disclose; to request deletion; and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioural advertising. To exercise these rights, contact us at tang@findmynemo.com.

10. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

11. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration.

12. Children

The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated in advance where required by law.

14. Contact

For questions about this Privacy Policy or to exercise your rights, contact us at tang@findmynemo.com.