Privacy policy

Aware of concerns regarding how we handle your Personal Data, at Peanut we recognize the importance of protecting your privacy.

We want our Customers to understand the general privacy rules and the terms of processing of the data we collect, in strict compliance with applicable law, namely Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (“General Data Protection Regulation” or “GDPR”), Law 67/98 – Personal Data Protection Law, which transposes Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 into Portuguese law, regarding the protection of individuals in relation to the processing of data, in everything not contrary to the GDPR and until a new legal framework is applied, and the guidelines issued by the National Data Protection Commission (CNPD).

As such, this Privacy Policy describes which of your Personal Data is collected, how it is used, why it is necessary, and how its collection and processing may benefit or be of interest to you. Should you have any questions, require clarification, or wish to exercise any of your rights, you may contact us here.

Personal Data

Under the General Data Protection Regulation, personal data (“Personal Data”) is understood as any information, of any nature and regardless of its medium, including sound and image, relating to an identified or identifiable natural person (“Data Subject” or “Subjects”). A person is considered identifiable if they can be identified directly or indirectly, in particular by reference to an identification number or to one or more elements specific to their physical, physiological, mental, economic, cultural, or social identity.

Which Personal Data is collected and processed

Through the use of our website, by contacting or requesting information about Peanut, or as a result of interactions you may have with our employees or customers, we may collect the following Personal Data:

  • Contact Personal Data, such as name, email address, postal address, phone numbers, professional category;

  • Financial Information, such as tax identification number or payment methods;

  • Technical Information, such as data about your visits to our website or regarding materials and communications sent by Peanut electronically;

  • Data provided for scheduling meetings or attending events, including accessibility requirements;

  • Browser information, pages accessed, access dates, location at time of access, as well as IP address;

  • Any other data you provide to us.

Additionally, Personal Data about your preferences or interests may be processed through your navigation on our Website. Such Personal Data will only be used to personalize the products offered and the commercial communications we may send, as described below.

How we obtain your Personal Data

Peanut collects and processes your Personal Data in various ways, namely through the use of our website and services, specifically:

  • In the context of acquiring a Peanut product;

  • Through our IT tools and applications, including our website and electronic communications sent by Peanut;

  • When you provide it to us or interact directly with us, for example through contacts with our employees;

  • Through other means and sources, such as publicly available information used to keep your Personal Data up to date.

How we use your Personal Data

We collect and process your Personal Data to provide you with a better online experience and to offer the highest quality customer service. In particular, we collect, process, store, and share your Personal Data for the following purposes:

  • To maintain the relationship with the Data Subjects;

  • To provide the information you request;

  • To authenticate the identity of people contacting Peanut via phone, electronic means, or other communication channels;

  • To understand and assess the interests, preferences, and changes in our Customers’ needs, our current products and services, and/or to develop new products and services;

  • To provide and improve our website, including auditing and monitoring its use;

  • For internal training and quality control;

  • To conduct opinion polls and market research;

  • In pursuit of our legal obligations.

Additionally, if you have provided your consent by checking the designated field on our website, we may also process your Personal Data for commercial purposes, namely:

  • Promoting our services and products via news, publications, newsletters, and event details;

  • Providing information or advertising on social media or third-party sites you are registered with, according to the legal terms and privacy policies you have accepted or your chosen privacy settings. We may share your Personal Data, including interests and preferences, with third parties to deliver targeted advertising.

Based on the consent mentioned above, it will be easier to ensure that the commercial information displayed to you matches exactly what you are looking for.

Please note that even without providing this consent, you may still encounter Peanut commercial information on social media or third-party websites, resulting from advertising space purchased on those platforms, without Peanut accessing your Personal Data.

If you are already a customer, Peanut may use your Personal Data for direct marketing of its own products or services similar to those purchased. You may opt out by checking the box:
[  ] I do not wish to receive promotional communications from Peanut.

You may also unsubscribe at any time by clicking the “unsubscribe” link at the bottom of our communications.

Use of the Peanut website

Certain features of our website invite you to submit your Personal Data. These will only be used for the purpose for which they were submitted.

Marketing and other emails

We collect and process your Personal Data to contact you and provide information about the products we sell and activities we participate in, through newsletters and other communications.

Newsletters
Peanut newsletters aim to share new products, news, and information about Peanut initiatives, although other more specific newsletters may also be created. Subscription is optional, free, and lasts for as long as the subscriber desires. Access to the website is not conditioned on newsletter subscription or processing of Personal Data.

Newsletter metrics track which subscribers open and click links within messages.

Events

We collect and process your Personal Data when you contact us directly or participate in events organized or co-organized by Peanut. Special categories of Personal Data, such as accessibility requirements, will only be processed to meet your needs and comply with legal or regulatory obligations.

Contact / Information Requests

Individuals seeking information about Peanut, our services, or products may share Personal Data via our website, phone, or email. Such Personal Data is used exclusively for the intended purpose.

Legal Basis for Processing

Peanut processes your Personal Data based on:

  • Your specific consent;

  • Pre-contractual measures or contract execution;

  • Compliance with legal and regulatory obligations;

  • Legitimate interests of Peanut;

  • Legitimate commercial purposes.

Retention Period

Peanut retains Personal Data based on the purposes for which it was collected, taking reasonable steps to ensure accuracy and relevance.

Legal obligations may require retention periods, such as 10 years for tax/accounting purposes and 7 years for anti-money laundering purposes.

Absent legal requirements, Personal Data is kept only as long as necessary for the purposes collected, in compliance with law and CNPD guidance.

For contractual relationships, Personal Data is retained while the relationship exists and may be kept longer based on consent, rights, or legitimate interests. CCTV recordings are retained for a maximum of 30 days.

Sharing Your Personal Data

We may share your Personal Data with third-party contractors, including:

  • Professional auditors;

  • Service providers for text processing, translation, document review;

  • IT service providers;

  • Marketing service providers;

  • Event co-organizers.

These entities process data according to Peanut’s instructions, with confidentiality obligations.

Where necessary, Personal Data may also be shared with regulatory authorities, courts, or official bodies. Reasonable efforts will be made to notify you unless legally prohibited.

We may share Personal Data with Peanut Group companies or third parties to optimize services, ensuring compliance with similar privacy standards.

We may also share Personal Data with social media or third-party websites to facilitate platform use and provide relevant Peanut information. Personal Data will not be added to our database without consent.

Personal Data is not sold, rented, or disclosed outside the purposes outlined here.

Protecting Your Personal Data

We use technical and organizational measures to protect your Personal Data from destruction, loss, alteration, disclosure, or unauthorized access, including access controls, firewalls, secure servers, and data encryption.

Website
Personal Data collected via the Peanut website is transmitted using SSL. Data is stored encrypted and backed up periodically.

In case of a security breach leading to unauthorized access, we will inform you by email and comply with all regulatory obligations.

Data Transfers

Peanut may transfer Personal Data outside Portugal or the EU/EEA, following legal safeguards:

  1. Standard Contractual Clauses approved by the European Commission; or

  2. Certifications proving compliance with GDPR standards.

We also share data with Shopify to operate our online store. See Shopify’s Privacy Policy: http://www.shopify.com/legal/privacy

Your Rights

Under applicable law, you have the following rights:

  1. Access and Rectification – confirm if data is processed and correct it if necessary.

  2. Data Portability – transfer, copy, or electronically transmit data when processing is based on consent or contract.

  3. Right to Erasure (“Right to be Forgotten”) – request deletion when data is no longer needed or consent is withdrawn.

  4. Right to Restrict Processing – limit processing in certain situations instead of deleting.

  5. Right to Object – object to processing at any time, including marketing.

  6. Right not to be subject to automated decisions – including profiling that significantly affects you.

Exercising Your Rights
Requests may be made in writing via email: info@peanut.pt with the subject “Privacy” or by registered mail. For newsletters, click “unsubscribe.”

Requests are generally free, except for manifestly unfounded or excessive requests. Responses are typically provided within 30 days, unless complex.

Complaints may also be filed with the CNPD.

Data Protection Officer

Peanut has appointed a Data Protection Officer (DPO):

Catarina Silva
◗ info@peanut.pt
◗ Rua Almirante Gago Coutinho n 8, 2640-487 Mafra

Contact Us

For questions, clarifications, suggestions, or complaints regarding this Privacy Policy or your Personal Data, please contact us via email, referencing “Privacy.”