Privacy policy

Last updated: 13 November 2026

Thank you for your interest in Evelyn Cork. Protecting your personal data is important to us.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with and what rights you have when you visit www.evelyn-cork.com or buy from us.

Evelyn Cork is operated from Portugal and sells to customers in Ireland. Orders are fulfilled and shipped by a fulfilment partner in China. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the applicable data protection laws of Portugal and Ireland.

1. Data controller

The data controller responsible for your personal data is:

Trader: João Alexandre Batista Cardoso de Andrade Silva
Trading Name: Evelyn Cork
Address: Praceta Vitorino Nemésio, N83 RC DT Traz, 4425-700 Porto, Portugal
Email: info@evelyn-cork.com
Phone: +351 936 367 526

2. Website visits and hosting

When you visit our website, some technical information is collected automatically, including:

• pages visited
• date and time of access
• referring website or URL
• browser type and version
• device and operating system information
• IP address

We use this information to operate and secure our website, prevent fraud, fix technical problems and improve the website. The legal basis is our legitimate interest in running a secure and functional online store (Article 6(1)(f) GDPR).

Our online store is hosted on Shopify. Information processed through our store is therefore also processed by Shopify on our behalf, in accordance with its privacy practices.

3. Cookies

Our website uses cookies and similar technologies, including:

• essential cookies needed for the shopping cart and checkout;
• functional cookies;
• analytics and performance cookies;
• advertising and marketing cookies.

Essential cookies are used because they are necessary for the website to work. Analytics, advertising and other non-essential cookies are only used after you have given your consent through our cookie banner. You can change or withdraw your consent at any time through the cookie settings, or restrict and delete cookies in your browser settings, although some website functions may then not work properly.

4. Contacting us

When you contact us by email, phone or our contact form, we process:

• your name
• email address
• phone number
• order number
• the content of your message

We use this information to answer your enquiry and provide customer service. The legal basis is the performance of a contract or steps taken before entering into a contract (Article 6(1)(b) GDPR), or our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR).

5. Orders and customer accounts

When you place an order or create a customer account, we process:

• your name
• billing and delivery address
• email address
• phone number
• order details
• account information
• transaction information

We use this information to process and deliver your order, send order updates, handle returns and refunds and provide customer service. The legal basis is the performance of our contract with you (Article 6(1)(b) GDPR). Providing this information is necessary to place an order; without it, we cannot process or deliver your purchase.

We also keep certain information to comply with accounting and tax obligations (Article 6(1)(c) GDPR).

6. Payments

Payments are processed securely by the payment providers shown at checkout. Depending on the payment method you choose, we share the following information with the relevant payment provider:

• name
• billing address
• payment information
• transaction amount
• order information

We do not store your full card details on our systems. Payment information is processed to complete your purchase (Article 6(1)(b) GDPR) and to prevent fraud (Article 6(1)(f) GDPR).

7. Shipping and delivery

Your order is prepared and shipped by our fulfilment partner in China and delivered in Ireland by carriers and delivery companies. To do this, we share the necessary information with them and, where required for import, with customs authorities:

• name
• delivery address
• phone number (where needed for delivery)
• email address (for delivery updates)
• order information

We only share the information reasonably needed to process, ship and deliver your order. The legal basis is the performance of our contract with you (Article 6(1)(b) GDPR) and, for customs formalities, compliance with legal obligations (Article 6(1)(c) GDPR).

8. Analytics, advertising and marketing

With your consent, we use analytics and advertising tools to understand how visitors use our website, measure the performance of our advertising and improve your shopping experience (Article 6(1)(a) GDPR).

These tools include Google services, such as Google Ads and Google Analytics. With your consent, they use cookies and similar technologies to collect information about your visit, such as pages viewed, products added to the cart, purchases and online identifiers, in order to measure our advertising and show you personalised ads. You can read how Google uses this information at https://policies.google.com/technologies/partner-sites.

We only send you marketing emails if you have subscribed or if otherwise permitted by law. You can unsubscribe at any time using the link in every email or by contacting us at info@evelyn-cork.com. Unsubscribing does not affect the processing needed for your existing orders.

9. Who we share your data with

We share personal data only where reasonably necessary to operate Evelyn Cork, with:

• e-commerce and hosting providers (Shopify)
• payment service providers
• our fulfilment partner in China
• carriers and delivery companies
• customs authorities, where required for import
• customer service tools
• fraud prevention and security providers
• analytics and advertising providers, such as Google (only with your consent)
• professional advisers, such as accountants
• public authorities, where required by law

We do not sell your personal data.

10. International transfers

Some of your personal data is processed outside the European Economic Area (EEA):

• China: the delivery information listed in section 7 is sent to our fulfilment partner in China so that your order can be prepared and shipped. China is not covered by a European Commission adequacy decision. For these transfers we rely on Standard Contractual Clauses approved by the European Commission where they are in place with the recipient or, otherwise, on the transfer being necessary to perform our contract with you (Article 49(1)(b) GDPR).
• Other countries: some technology providers, such as Shopify and Google, may process data in other countries outside the EEA, including the United States. These transfers are covered by European Commission adequacy decisions or Standard Contractual Clauses.

You can contact us for more information about these safeguards.

11. How long we keep your data

We keep personal data only for as long as necessary for the purpose for which it was collected:

• order and transaction data: for the period required by Portuguese tax and accounting law (currently 10 years);
• customer service messages: for as long as needed to handle your enquiry and any related claims;
• marketing data: until you unsubscribe;
• cookie data: for the period set out in our cookie banner.

When data is no longer needed, it is deleted or anonymised.

12. Your rights

Under the GDPR, you have the right to:

• access your personal data;
• correct inaccurate data;
• request deletion of your data;
• restrict the processing of your data;
• receive your data in a portable format;
• object to processing based on our legitimate interests;
• object to direct marketing at any time;
• withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, email info@evelyn-cork.com. We will respond within one month. We may ask you to verify your identity before completing your request.

You also have the right to lodge a complaint with a data protection authority:

• in Ireland: Data Protection Commission (www.dataprotection.ie);
• in Portugal: Comissão Nacional de Proteção de Dados (www.cnpd.pt).

13. Children

Our website is not intended for children under 16, and we do not knowingly collect their personal data.

14. Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. All data is transmitted over a secure, encrypted (SSL/TLS) connection. However, no method of transmission over the internet is completely secure.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version is always published on this page with the date of the last update shown at the top.

16. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Trader: João Alexandre Batista Cardoso de Andrade Silva

Trading Name: Evelyn Cork

Address: Praceta Vitorino Nemésio, N83 RC DT Traz, 4425-700 Porto, Portugal

Email: info@evelyn-cork.com

Phone: +351 936 367 526

Shipping and Returns: Orders are shipped from, and returns are sent to, our fulfilment partner in China. Products are not shipped from Portugal or Ireland.

Customer support hours (Irish time):
Monday to Friday: 9am–5pm
Saturday and Sunday: 11am–4pm