Information
Privacy Policy
We explain what personal data we collect in the Micro Wire shops (microwire.pt, microwire.es, microwire.fr and microwire.eu) and in our physical store, what we use it for, who we share it with, how long we keep it and how you can exercise your rights under the GDPR (Regulation (EU) 2016/679) and Portuguese Law No. 58/2019.
1. Data controller
The controller of your data is Clouds and Roots Unipessoal, Lda., which operates the Micro Wire brand.
For any privacy question or to exercise your rights, email [email protected] with the subject "Privacy".
Given the size and nature of its business, Micro Wire is not required to appoint a Data Protection Officer. Requests are handled directly by management.
- Registered office
- Avenida Manuel Milheirão, Nr 148, 3070-767 Praia de Mira
- Store and lab
- Avenida Manuel Milheirão, Nr 117, 3070-767 Praia de Mira
- NIPC
- 516154940
- Registration
- Conservatória do Registo Comercial de Coimbra
- Share capital
- €5,000.00
2. What data we collect
We only collect what is needed for each purpose. Mandatory fields are marked on forms; without them we cannot process the order or request.
Identity and contact
- Name
- Tax number (when you ask for an invoice with your tax number)
- Email and phone
- Billing and delivery addresses
- Company and job title (business customers)
Account and orders
- Order and invoice history
- Returns and guarantee claims (RMA), including any photos you send us
- Wish lists
- Password (stored only in irreversible encrypted form — hash)
Repairs and support
- Device handed in, serial number/IMEI and fault description
- Messages exchanged by email, chat or phone
- Device content only to the extent strictly necessary to test the repair
Technical data
- IP address and access logs (security)
- Device, operating system and browser
- Browsing data, only with your consent — see the Cookie Policy
Payment data
Card details are entered directly on the payment provider's platform. Micro Wire neither sees nor stores card numbers; we only receive the confirmation and transaction reference.
Minors
Our shops are intended for people aged 18 and over. We do not knowingly collect data from minors; if we become aware that this has happened, we delete that data, except where the law requires us to keep it (e.g. invoices).
Before you hand in a device for repair
Back up your data and, wherever possible, sign out of your accounts. Our lab does not access photos, messages or other personal content, but may need to switch the device on and test functions to confirm the repair.
3. Why we use your data and on what legal basis
Performance of a contract · Article 6(1)(b) GDPR
Processing orders and payments, shipping and delivery, managing your account, repairs, returns and guarantees, and responding to your support requests.
Legal obligations · Article 6(1)(c) GDPR
Issuing and keeping invoices and reporting them to the Portuguese Tax and Customs Authority (Autoridade Tributária e Aduaneira), meeting accounting obligations, responding to authorities and handling complaints in the Livro de Reclamações (Portugal's official complaints book).
Legitimate interest · Article 6(1)(f) GDPR
Preventing fraud and misuse, keeping our platforms secure, defending rights in the event of a dispute and, for customers who have already bought from us, sending information about similar products — with an unsubscribe option in every message.
Consent · Article 6(1)(a) GDPR
Newsletter and promotional messages to non-customers, non-essential cookies and browsing analytics. You can withdraw your consent at any time, without affecting processing already carried out.
We do not make decisions based solely on automated processing that produce legal effects concerning you. Credit assessment for Klarna payment methods is carried out by Klarna itself, under its own policy.
4. Who we share data with
Micro Wire does not sell or rent personal data. We only share what is necessary with organisations that help us provide the service. When they act on our behalf (processors), they are contractually bound to process the data only on our instructions.
| Category | Recipients | Data shared |
|---|---|---|
| Shipping | CTT, GLS (and its delivery partners), DPD, Correos Express | Name, delivery address, phone, email, weight and dimensions |
| Payments | Banks, card processors and Multibanco/MB WAY reference processors | Amount, order reference, data needed for authentication |
| Instalment payments | Klarna (independent controller) | Checkout contact details and order details, for eligibility assessment |
| Hosting and email | Server and email providers | Data stored on the platforms and messages |
| Customer support | Chat platform and AI assistant | Messages you write in the chat; the assistant makes no decisions about you |
| Analytics | Google (Google Analytics), only with consent | Online identifiers and browsing data |
| Marketplaces | Platforms where you bought the item | We receive from them the data needed to ship your order |
| Authorities | Tax authority (Autoridade Tributária), courts, dispute resolution bodies | Only when required by law or needed to defend legal rights |
Transfers outside the European Economic Area
Your data is processed in the European Union wherever possible. If a provider processes it outside the EEA (e.g. in the US), the transfer only takes place with appropriate safeguards: a European Commission adequacy decision (including the EU-US Data Privacy Framework) or standard contractual clauses approved by the Commission. You can ask us for information about these safeguards.
5. How long we keep data
We keep data only for as long as it is needed for the purpose or required by law. Once the period ends, it is deleted or anonymised.
| Data | Period | Reason |
|---|---|---|
| Invoices and accounting records | 10 years | Tax obligation (Portuguese Corporate Income Tax and VAT Codes) |
| Orders, repairs and guarantees | Guarantee period + 2 years | Managing the guarantee and defence in any dispute |
| Customer account | Until you delete it or after 3 years of inactivity | Performance of the contract; we warn you before deleting an inactive account |
| Customer support messages | 3 years | History of requests and complaints |
| Newsletter and marketing | Until you withdraw consent | We keep only a record of your objection, so we don't contact you again |
| Technical access logs | 12 months | Security and abuse detection |
| Cookies | See Cookie Policy | Depends on each cookie |
6. Security
The entire Micro Wire platform — shop, ERP and integrations — is built and maintained by our own team, which gives us direct control over how data is handled. We apply technical and organisational measures appropriate to the risk:
- Encrypted connections (HTTPS/TLS) on every page
- Passwords stored only as a hash
- Data access restricted to those who need it, with access logging
- Regular backups and ongoing security updates
If an incident occurs
If a data breach poses a risk to your rights, we notify the CNPD (the Portuguese data protection authority) within 72 hours and, if the risk is high, we inform you directly, with the steps to take.
We will never ask for your password by email, phone or chat. If you receive a suspicious message claiming to be from Micro Wire, don't click any links and forward it to [email protected].
7. Your rights
Find out what data we hold about you and get a copy.
Correct inaccurate or out-of-date data.
Ask us to delete your data, except what the law requires us to keep.
Suspend processing while we look into a request from you.
Receive the data you gave us in a commonly used format.
Object to processing based on legitimate interest and, at any time, to direct marketing.
At any time, without affecting the lawfulness of earlier processing — for example via the unsubscribe link in every newsletter or in the cookie panel.
How to exercise them
By email or by letter to our registered office. We reply within 1 month (extendable by 2 more months for complex requests, with notice). It's free of charge. We may ask you for information to confirm your identity.
[email protected]You also have the right to lodge a complaint with the Portuguese supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD)
www.cnpd.pt
8. Changes to this policy
We may update this policy when we change services or providers, or because of legal changes. Significant changes are announced on the website and, if you have an account, by email.
Last updated: October 2026.