We may collect personal data from a variety of sources. This includes personal data you give us directly or personal data you provide from other sources.
The data we collect may include following personal information:

• Name;
• Phone number;
• E-mail address;
• Address;
• Social network personal pages.

Personal data is used, with your prior and revocable consent, to manage Marketing operations, sample products distribution or customers orders and/or offer services. 

For marketing, promotional and publicity purposes, including to carry out direct marketing, as well as to carry out surveys, research or market statistics, via e-mail, SMS, push notifications, pop-up banners, instant messaging.

Personal data, such as e-mail, phone number and the Customers name is processes to solve service or trade issues and for customer service to help the Customer.

IP address or other network identifications are used for information society services and web usage statistics.

We will process your data when we have to perform a contract, and we will be processing your data as long as the contractual relationship with you is in force and during the five years following the end of said relationship.

This results in us having to process your data for purposes of providing you with both the Services, as well as to perform our obligations under the Services Terms and Conditions.



ubject to obtaining your consent, and as long as you do not withdraw any such consent, we may also process your data for the following purposes:



a) To send you electronic commercial communications (if you subscribe to a newsletter) or to answer the requests you may address us when contacting us;



b) To process information obtained through cookies, as described in more detail in the Cookie Policy, and subject to the terms set forth therein;



c) If you opt to sign in by means of a third party social media platform, we may obtain ID confirmation and other information from that third party, as mentioned in each case;

d) For profiling purposes based on your behavior and how you browse the Site and use the Services, which pages you have visited, and to build audiences. Please note that we may profile users by means of cookies. In those cases, your acceptance of the installation and use of cookies results in a data processing for profiling purposes, as described in this paragraph.

e) We may enrich the data we have about you by obtaining information from a select third party for data enrichment purposes, provided that you have given us prior permission. Enriching data allows us to analyze a deeper subset of data from which we may present personalized content.

When we have to comply with a legal obligation applicable to us from time to time, such as those set forth in tax and anti-money laundering laws and regulations (such as Act no. 58/2003, dated December 17, on Taxes; Act no. 27/2014, dated November 27, on corporate taxes; Act no. 10/2010, dated April 28, for the prevention of money laundering and financing or terrorism; or Organic Act no. 10/1995, dated November 23, on Criminal Code). In any such cases, the data will be processed only during the periods set forth by said laws, being deleted thereafter.

Finally, we may also process your data to protect our legitimate interests, as long as said data is strictly necessary to fulfil the goals set forth below, namely:



a) To review, monitor, investigate, and analyze how to improve the Services and/or the Site, as well as to keep our Services and the Site secure and operational and prevent abusive activity (e.g. fraud, spam, phishing activities, etc.). This may include sending you typeforms to assess any problems in the service or know how to improve your user experience. The interests at stake are ensuring a correct and safe environment for both other users and us, taking those interests prevalence over your legitimate interests (we need to create and maintain an environment which is in accordance with the law, the legitimate interests of other parties, what other users may expect from our end, and to protect other users’ security when accessing the Site and using the Services);

b) Besides any commercial electronic and non-electronic commercial communication sent when we have obtained your consent as mentioned above, we may also send you those kind of communications when you are our client. In this last case, we will only send you information belonging to us and concerning services and/or products identical or similar to the ones you have contracted with us. In these cases, we have a legitimate interest in processing your contact information to keep you informed about any of our products and services, prevailing this interest over your right to personal data given the non-sensitive nature of the data in question and the fact that the contractual relationship built with our clients results in those clients expecting these kinds of communications; 


c) Upon dissociating the data we have so as to be impossible to be associated to you or any other person, to perform statistical and other analysis on information we collect (technical and metadata) to analyze and measure user behavior and trends, to understand how people use our services, in order to improve and optimize our performance of such services.

We share your information with our service providers who help us to provide the Services to you, in which case those third parties are required to comply with our internal standards, policies, and technical and organizational measures that ensure that your data is protected and kept confidential at all times, and only in accordance with and to the extent authorized by this Privacy Policy.

When you authorize us to do so, we may also share your data with other companies so that they can process the data for other purposes, as explained more in detail when we request your prior consent.

In addition, if you provide consent for the installation of cookies, your data may be processed by third companies for the purposes and in the territories mentioned in the Cookie Policy.

We may also share your information with competent courts and authorities, when we are legally required to do so (for instance, to allow such bodies to investigate, prevent, or take action against illegal activities), or we have to take action to protect our rights or any third party rights.

With your express consent, we may also share your name, city-level location, shipping address, age and gender, social media IDs such as Facebook ID, email address, phone number, and information on your participation in any campaigns, offers and newsletter subscriptions with any current Partners at their request.

In addition, we may send your Personal Information to other companies or people under any of the following circumstances:
when we have your consent to share the information; or
we need to send the information to companies who work on our behalf (who are not Partners) to provide a product or service to you In such cases we enter into data protection agreements with our service providers to ensure that your personal data is protected to the same level of protection we offer. We will only provide those companies the information they need to deliver the service, and they are prohibited from using that information for any other purpose.

Finally, please note that you may opt for creating a typeform in which the results are displayed not in an aggregated manner but by providing the particular answers provided by respondents. In those cases, if you opt to create a typeform having this functionality, the results will be shared with those third parties you opt to share them with. Please bear in mind that, depending on what you intend to do with your data, you may be required to inform or comply with further legal requirements vis-à-vis respondents.

Personal data will be stored in servers which are located in European Union Member States or the European Economic Area. Personal data may be sent to countries, where the level of data protection has been evaluated adequate by the European Commission and to United States of America companies, that have joined the Privacy Shield framework.

Access to personal data is allowed only to the companies’ employees, who use the Customers personal data to solve technical issues and offer customer support.

The company implements appropriate organizational and information security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorized access and disclosure.

The transfer of personal data to data processors is allowed only when there are appropriate contracts that regulate the data transfer and processing between the controller and processor. Data processors are required to use appropriate technical and organizational measures to ensure the security of the personal data.

If the data processing is done through consent, the Customer has the right to withdraw their consent at any time, notifying their actions to the customer support via e-mail at privacy@gallicantus.co.uk

How long we keep the personal information we collect depends on the type of information, the purpose for which it is used, how sensitive it is, and similar factors. In general, we will retain your personal information for the length of time reasonably needed to fulfill the purposes outlined in this privacy policy (including for as long as need to provide you or our customer with products and services), unless a longer retention period is required or permitted by law. We will also retain and use your information for as long as necessary to resolve disputes and/or enforce our rights and agreements. Aggregated information may be stored indefinitely. 

To delete personal data, contact customer support by e-mail privacy@gallicantus.co.uk . The request for deletion will be answered no later than a month and the deadline for the deletion of the data will be specified.

An application for transfer of personal data submitted by e-mail will be answered no later than within a month. Customer Support identifies your identity and informs you about the transfer of personal data.

If you expressed an interest in Gallicantus promoted products or services, you could receive an email, text or phone call from us for similar products or services. You could also receive marketing material from us or from third part service provider via post or through personalised social media advertising.

For marketing purposes, we collect and process the following contact information about you: your name, address, company (where relevant), telephone numbers and email address. We also process your marketing preferences.

The Gallicantus Ltd Supervisor authority is: 

The Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
CHESHIRE
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

We are registered with the Information Commissioner’s Office under registration number ZA757706 and you can view our registration in full here.