Privacy Policy – Purple Diffusion
Last updated: 18 March 2026
Purple Diffusion, Lda is committed to protecting the privacy of its users and clients. This Privacy Policy describes how we collect, use, process, and protect the personal data provided to us through our website www.purplediffusion.com and our services, in strict compliance with the General Data Protection Regulation (GDPR) [1] and applicable national legislation.
1. Identification of the Data Controller
Name: Purple Diffusion, Lda
Address: Rua Dr. Egídio Guimarães, nº 58, 7º esq. 4715-248 Braga, Portugal
Contact: comercial@purplediffusion.com
2. Personal Data Collected and Purposes
Purple Diffusion, Lda collects personal data strictly necessary for the purposes indicated below:
| Data Category | Source of Collection | Purpose of Processing | Lawful Basis (GDPR) |
|---|---|---|---|
| Contact Data (Name, E-mail, Mobile phone) | Contact Form on the website | Responding to requests for information, scheduling services, and pre-contractual communication. | Pre-contractual steps at the request of the data subject (Art. 6(1)(b) GDPR). |
| Communication Data (E-mail, mobile contact) | Contact Form on the website | Sending marketing communications, newsletters, and information about textile products. | Consent of the data subject (Art. 6(1)(a) GDPR) |
| Browsing Data (IP address, browser type, pages visited) | Cookies and tracking technologies | Improving user experience, statistical analysis, and website security. | Legitimate interest (Art. 6(1)(f) GDPR) or Consent (fornon-essential cookies). |
3. Consent
By filling out the contact form and selecting the acceptance box, the user expresses their explicit consent for the processing of their personal data, as described in this Policy. Consent may be withdrawn at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
4. Sharing of Personal Data
The personal data collected by Purple Diffusion, Lda is not sold or rented to third parties. However, we may share your data with:
Service Providers: These include entities that provide us with support services, such as web hosting, IT system maintenance, or digital marketing services. These entities are bound by contract to maintain confidentiality and to process the data only for the purposes defined by Purple Diffusion, Lda.
Legal Obligations: Public authorities, when required by law or regulation.
Purple Diffusion, Lda ensures that, whenever data is shared, all appropriate technical and organisational measures are taken to guarantee its protection.
5. International Data Transfers
Should Purple Diffusion, Lda use service providers located outside the European Economic Area (EEA), it will ensure that the transfer is carried out only to countries that offer an adequate level of protection, or through the application of appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.
6. Data Retention Period
Personal data will be retained only for the period strictly necessary to fulfil the purposes for which it was collected, or until the data subject requests its deletion or withdraws their consent, provided there are no legal obligations requiring its retention for a longer period.
Contact Data for responding to requests: Retained for the time necessary to process the request and for a period of 12 months after the last contact for follow-up purposes.
Data for Marketing/Newsletter: Retained until the data subject withdraws their consent (unsubscribe option).
7. Rights of the Data Subject (GDPR)
In accordance with the GDPR, the data subject has the freedom to exercise the following rights:
| Right | Description |
|---|---|
| Right of Access | Obtain confirmation as to whether or not their data is being processed and, where that is the case, access to the data. |
| Right to Rectification | Request the correction of inaccurate or incomplete personal data. |
| Right to Erasure (“Right to be forgotten”) | Request the deletion of their personal data, under certain circumstances. |
| Right to Restriction of Processing | Request the suspension of the processing of data in specific situations. |
| Right to Data Portability | Receive the personal data they have provided in a structured, commonly used and machine-readable format, and transmit it to another data controller. |
| Right to Object | Object to the processing of their data for direct marketing purposes or when the processing is based on legitimate interest. |
| Right to Withdraw Consent | Withdraw consent at any time, without affecting the lawfulness of prior processing. |
| Right to Lodge a Complaint | Lodge a complaint with the competent supervisory authority (in Portugal, the National Data Protection Commission – CNPD). |
To exercise any of these rights, the user must send a written request to: comercial@purplediffusion.com.
8. Security Measures
Purple Diffusion, Lda adopts appropriate technical and organisational security measures to protect personal data against unauthorised destruction, loss, alteration, disclosure, or access. These measures include the use of encryption, firewalls, and restricted access procedures.
9. Use of Cookies
The website www.purplediffusion.com uses cookies to improve performance and browsing experience. By accepting cookies, the user agrees to the use of cookies. The user can manage their cookie preferences at any time through their browser settings or the cookie management tools available on the website.
References
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR).
- National Data Protection Commission (CNPD) – Portuguese supervisory