Privacy Policy

Last updated: 20 July 2026

1. Introduction

This Privacy Policy explains how AniWays collects, uses, stores, shares and protects personal data when users:

• Visit the AniWays website;

• Create or manage a customer account;

• Place an order or pre-order;

• Contact customer support;

• Request a return, refund or statutory guarantee;

• Subscribe to marketing communications;

• Interact with AniWays through email, social media or other communication channels.

This Privacy Policy is governed by Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), Portuguese Law no. 58/2019 and other applicable privacy and electronic communications legislation.

This Policy should be read together with the AniWays Terms and Conditions and Cookie Policy.

2. Data Controller

The controller responsible for the processing of personal data is:

Legal name: Guilherme Maneiras
Commercial name: AniWays
Legal form: Sole trader — Empresário em Nome Individual
Portuguese Tax Identification Number — NIF: 251152170
Address: Rua da Senhora do Rosário, 5, Cabrito, 2205-063 Abrantes, Portugal
Telephone: +351 923 223 155
Privacy email: customer@anixways.com
Alternative email: business@anixways.com
Website: anixways.com

For privacy-related questions or requests, customers should preferably contact:

customer@anixways.com

3. Scope of This Policy

This Privacy Policy applies to personal data processed by AniWays in connection with the operation of the online store and its commercial activities.

It does not apply to third-party websites, platforms or services that operate independently from AniWays and maintain their own privacy policies.

4. Personal Data We Collect

Depending on how a customer or visitor interacts with AniWays, we may collect the following categories of personal data.

4.1 Identification and Contact Data

• First and last name;

• Email address;

• Telephone number;

• Customer account identifier;

• Social media username, where the customer contacts AniWays through social media.

4.2 Billing and Delivery Data

• Billing address;

• Delivery address;

• City;

• Postal code;

• Country;

• Portuguese or foreign tax identification number, where provided or required;

• Company name, where applicable;

• Information necessary to issue an invoice or deliver an order.

4.3 Customer Account Data

Where a customer creates an account, we may process:

• Customer account identifier;

• Securely hashed authentication credentials;

• Account preferences;

• Saved addresses;

• Order history;

• Wishlist or saved products, where available;

• Account activity;

• Login and security records.

AniWays does not have access to customers’ passwords in readable form.

4.4 Order and Pre-Order Data

• Products ordered;

• Quantities;

• Order value;

• Order date;

• Payment status;

• Shipping method;

• Tracking information;

• Pre-order status;

• Deposit and outstanding balance information;

• Order history;

• Promotional codes or customer benefits used.

4.5 Payment Data

Payments are processed through specialized payment service providers.

AniWays does not normally collect or store complete payment card numbers, card security codes or online banking credentials.

Depending on the payment method, AniWays may receive:

• Payment confirmation;

• Transaction identifier;

• Payment method;

• Amount paid;

• Payment date;

• Payment status;

• Limited card information, such as the final digits, where provided by the payment processor;

• Information concerning refunds, chargebacks or disputed payments.

4.6 Customer Support and Communications

We may collect personal data contained in communications concerning:

• General questions;

• Orders and deliveries;

• Product availability;

• Returns and refunds;

• Exercise of the right of withdrawal;

• Complaints;

• Warranty or conformity claims;

• Payment issues;

• Account management;

• Privacy requests.

Communications may include emails, telephone contacts, social media messages or contact form submissions.

4.7 Returns, Complaints and Guarantee Data

Where a customer reports a defective, damaged, incorrect or missing product, we may collect:

• Description of the issue;

• Photographs or videos;

• Photographs of the product and packaging;

• Shipping box and label information;

• Product serial number, where applicable;

• Return tracking information;

• Communications concerning inspection, replacement, repair or refund.

Customers should avoid including unrelated people, documents or sensitive information in photographs and videos sent to AniWays.

4.8 Marketing Data

Where applicable, we may process:

• Newsletter subscription status;

• Email marketing preferences;

• Consent records;

• Date and method of consent;

• Unsubscribe requests;

• Marketing interactions;

• Products or categories of interest;

• Referral or promotional campaign information.

4.9 Device and Usage Data

When visitors use the website, certain information may be collected automatically, including:

• IP address;

• Browser type and version;

• Device type;

• Operating system;

• Language settings;

• Approximate location derived from the IP address;

• Date and time of access;

• Pages viewed;

• Clicks and interactions;

• Referring website or source;

• Session information;

• Shopping cart activity;

• Login records;

• Technical error and security logs.

The collection of non-essential analytics or advertising information is subject to the user’s cookie choices where legally required.

4.10 Fraud Prevention and Security Data

AniWays and its payment or security providers may process information necessary to:

• Detect suspicious orders;

• Prevent unauthorized payments;

• Identify account abuse;

• Protect the website;

• Investigate security incidents;

• Respond to chargebacks or fraudulent activity.

This information may include IP addresses, order patterns, failed payment attempts, login activity and technical indicators.

4.11 Sensitive Personal Data

AniWays does not intentionally request or collect special categories of personal data, such as information concerning health, political opinions, religion, ethnicity or sexual orientation.

Customers should not provide this type of information unless it is strictly necessary for a specific lawful request.

5. Sources of Personal Data

AniWays may obtain personal data:

• Directly from the customer;

• Through the website and customer account;

• Through the checkout process;

• Through emails, contact forms or telephone calls;

• Through social media communications;

• From payment providers;

• From shipping and logistics providers;

• From fraud prevention and website security providers;

• From another person who places an order on behalf of the recipient;

• From publicly available sources, where legally permitted and necessary.

Where an order is placed for another recipient, the person placing the order must ensure that they are authorized to provide the recipient’s name, address and contact details.

6. Purposes and Legal Bases for Processing

AniWays processes personal data only where there is a valid legal basis.

6.1 Processing Orders and Pre-Orders

Personal data is processed to:

• Receive and confirm orders;

• Manage product availability;

• Manage pre-orders and deposits;

• Process payments;

• Issue invoices;

• Prepare and dispatch products;

• Provide tracking information;

• Communicate delivery updates;

• Handle cancellations, returns and refunds.

Legal basis: performance of a contract or steps taken at the customer’s request before entering into a contract.

6.2 Customer Accounts

Personal data is processed to:

• Create and maintain customer accounts;

• Authenticate users;

• Save customer preferences;

• Provide access to order history;

• Facilitate future purchases.

Legal basis: performance of a contract and AniWays’ legitimate interest in providing account functionality.

6.3 Customer Support

Personal data is processed to:

• Answer questions;

• Resolve order or delivery problems;

• Handle complaints;

• Process returns;

• Manage withdrawal requests;

• Assess statutory guarantee or conformity claims.

Legal basis: performance of a contract, compliance with legal obligations and AniWays’ legitimate interest in providing customer support and defending legal rights.

6.4 Invoicing, Accounting and Tax Compliance

Personal data is processed to:

• Issue invoices and tax documents;

• Keep accounting records;

• Comply with reporting and record-keeping obligations;

• Respond to requests from competent authorities.

Legal basis: compliance with legal obligations.

6.5 Website Operation and Security

Personal data is processed to:

• Operate the shopping cart and checkout;

• Maintain website sessions;

• Authenticate users;

• Prevent unauthorized access;

• Diagnose technical problems;

• Secure customer accounts;

• Detect malicious or fraudulent activity.

Legal basis: performance of a contract, compliance with legal obligations and AniWays’ legitimate interests in maintaining a secure and functional website.

6.6 Fraud Prevention and Legal Claims

Personal data may be processed to:

• Prevent fraud and payment abuse;

• Investigate suspicious transactions;

• Respond to chargebacks;

• Establish, exercise or defend legal claims;

• Protect AniWays, its customers and third parties.

Legal basis: AniWays’ legitimate interests and, where applicable, compliance with legal obligations.

6.7 Marketing Communications

AniWays may send newsletters, promotions, stock announcements or other marketing communications:

• Where the person has given prior consent;

• Where another lawful basis allows communication with an existing customer concerning similar products, subject to the applicable right to object.

Marketing communications will include a clear and accessible method to unsubscribe.

Legal basis: consent or, where legally permitted, AniWays’ legitimate interest arising from an existing customer relationship.

Withdrawing consent or objecting to marketing does not affect the customer’s ability to place orders.

6.8 Analytics and Website Improvement

Subject to the visitor’s cookie choices, AniWays may process data to:

• Measure website traffic;

• Understand how visitors use the website;

• Identify errors or usability problems;

• Improve website performance;

• Assess the effectiveness of marketing campaigns.

Legal basis: consent where non-essential cookies or similar technologies are used.

6.9 Compliance with Legal Requests

Personal data may be processed or disclosed where necessary to:

• Comply with a legal obligation;

• Respond to a court order;

• Cooperate with regulatory, tax, police or judicial authorities;

• Protect the rights and safety of AniWays, its customers or third parties.

Legal basis: compliance with legal obligations and, where applicable, legitimate interests.

7. Mandatory and Optional Data

Certain information is necessary to process an order, including:

• Customer name;

• Contact details;

• Billing information;

• Delivery address;

• Selected products;

• Payment confirmation.

Where this information is not provided, AniWays may be unable to:

• Accept or process the order;

• Issue an invoice;

• Receive payment;

• Deliver the products;

• Provide customer support;

• Process a return or refund.

Information used exclusively for newsletters, personalized advertising or non-essential analytics is optional.

Refusing or withdrawing consent for optional processing does not prevent the customer from making purchases.

Mandatory fields are normally identified during account registration, checkout or submission of a relevant request.

8. Cookies and Similar Technologies

AniWays uses cookies and similar technologies to operate and improve the website.

8.1 Strictly Necessary Cookies

Strictly necessary cookies may be used without marketing consent where they are required to:

• Operate the shopping cart;

• Maintain user sessions;

• Process checkout;

• Authenticate accounts;

• Prevent fraud;

• Maintain website security;

• Remember essential privacy preferences.

Disabling these cookies through the browser may prevent parts of the website from functioning correctly.

8.2 Functional Cookies

Functional cookies may be used to remember non-essential preferences or provide additional features.

Where required by law, these cookies will only be activated after consent.

8.3 Analytics Cookies

Analytics cookies may be used to understand website traffic and performance.

Non-essential analytics cookies will not be activated before the required consent has been obtained.

8.4 Advertising and Personalization Cookies

Advertising or personalization cookies may be used to:

• Measure marketing campaigns;

• Display relevant advertising;

• Limit repeated advertisements;

• Understand interactions with marketing content.

These technologies will only be used where the required consent has been obtained.

8.5 Managing Cookie Preferences

Visitors may:

• Accept non-essential cookies;

• Reject non-essential cookies;

• Select individual cookie categories;

• Change or withdraw consent at any time.

Cookie choices may be changed through the Cookie Preferences option available on the website.

Further information concerning specific cookies, providers, purposes and durations is available in the separate Cookie Policy.

9. Marketing Communications

AniWays may send marketing communications by email or another permitted electronic channel.

Where consent is required, AniWays will not send such communications unless valid consent has been obtained.

Where marketing is permitted based on an existing customer relationship, the communication will relate to products or services similar to those previously purchased and the customer will be given an opportunity to object.

Every electronic marketing message will include a free and easy method to unsubscribe or object.

Customers may also withdraw consent or object by contacting:

customer@anixways.com

AniWays may retain a minimal suppression record after an unsubscribe request to ensure that the email address is not added to future marketing campaigns without a new lawful basis.

Transactional communications, such as order confirmations, payment notices and delivery updates, are not marketing communications and may still be sent where necessary to fulfil the contract.

10. Recipients of Personal Data

AniWays only shares personal data where necessary for the purposes described in this Policy.

Recipients may include the following categories.

10.1 Website and Hosting Providers

Personal data may be processed through:

• Hostinger;

• WordPress;

• WooCommerce;

• Cloudflare;

• Website maintenance, security and technical service providers.

10.2 Payment Providers

Depending on the payment method selected, data may be shared with:

• WooPayments;

• Stripe;

• PayPal;

• The provider used to process MB WAY payments;

• Banks or financial institutions involved in bank transfers;

• Fraud prevention or payment authentication providers.

Payment providers may process certain information as independent data controllers under their own privacy policies.

10.3 Shipping and Logistics Providers

Delivery information may be shared with the carrier selected for the order, which may include:

• CTT;

• UPS;

• InPost;

• DHL;

• FedEx;

• Other carriers displayed during checkout.

Only the information reasonably necessary to perform delivery and tracking will be shared.

10.4 Email and Communication Providers

Data may be processed by providers used for:

• Transactional emails;

• Customer support;

• Newsletters;

• Website contact forms;

• SMS communications, where applicable.

10.5 Analytics and Advertising Providers

Where activated and subject to the applicable consent requirements, data may be shared with analytics, advertising or social media providers.

10.6 Accounting and Professional Advisers

Data may be shared with:

• Accountants;

• Invoicing service providers;

• Auditors;

• Legal advisers;

• Insurance providers;

• Other professional advisers where necessary.

10.7 Public Authorities

Data may be disclosed to:

• Autoridade Tributária e Aduaneira;

• Courts;

• Police or criminal investigation authorities;

• Consumer protection authorities;

• Regulatory authorities;

• Other public bodies where disclosure is legally required.

AniWays does not sell personal data.

11. Data Processors and Independent Controllers

Some service providers process personal data solely on AniWays’ instructions and act as processors.

Other providers, particularly payment providers, banks, carriers or public authorities, may determine their own processing purposes and act as independent controllers.

Where required, AniWays enters into appropriate data processing arrangements with service providers and requires them to apply adequate security and confidentiality measures.

12. International Data Transfers

Some service providers may process personal data outside Portugal or outside the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area, AniWays will rely on an appropriate lawful transfer mechanism, such as:

• An adequacy decision adopted by the European Commission;

• Standard Contractual Clauses approved by the European Commission;

• Supplementary technical or organizational safeguards;

• Another transfer mechanism permitted under the GDPR.

Customers may contact AniWays for additional information concerning the safeguards applicable to a relevant international transfer.

13. Data Retention

AniWays retains personal data only for as long as necessary for the relevant purpose or for the period required by law.

The main retention periods or criteria are as follows.

13.1 Orders, Invoices and Accounting Records

Order, invoicing, accounting and tax records will generally be retained for 10 years, or for a longer period where required by a specific legal obligation.

13.2 Customer Accounts

Customer account data is retained while the account remains active.

Where the customer requests account deletion, account information will be deleted or anonymized, except for data that must be retained for:

• Tax or accounting purposes;

• Existing orders;

• Returns or guarantees;

• Fraud prevention;

• Legal claims;

• Other legal obligations.

13.3 Customer Support and Complaints

Support communications, complaints, return requests and guarantee claims will be retained for the period necessary to:

• Resolve the request;

• Comply with consumer protection obligations;

• Establish, exercise or defend legal claims.

13.4 Marketing Data

Marketing data is retained until:

• Consent is withdrawn;

• The customer unsubscribes;

• The customer successfully objects;

• The data is no longer necessary for marketing purposes.

A minimal suppression record may be retained to respect the unsubscribe or objection request.

13.5 Payment Information

AniWays retains payment confirmation and transaction records for the period necessary for:

• Accounting;

• Refunds;

• Chargebacks;

• Fraud prevention;

• Legal obligations.

Complete payment card data is retained by the payment provider in accordance with its own retention rules.

13.6 Cookie and Analytics Data

Cookie and analytics information is retained for the periods described in the Cookie Policy and cookie preference panel.

13.7 Security Logs

Security and technical logs are retained for a period proportionate to the purpose for which they were collected.

Logs may be retained for longer where necessary to:

• Investigate a security incident;

• Detect fraud;

• Protect the website;

• Respond to legal claims;

• Comply with a legal obligation.

When personal data is no longer necessary, it will be deleted, anonymized or securely restricted.

14. Data Subject Rights

Subject to the applicable legal conditions, individuals may exercise the following rights.

14.1 Right of Access

The right to confirm whether AniWays processes personal data and to obtain access to that data and related information.

14.2 Right to Rectification

The right to correct inaccurate personal data and complete incomplete information.

14.3 Right to Erasure

The right to request deletion of personal data where:

• The data is no longer necessary;

• Consent is withdrawn and there is no other lawful basis;

• The individual successfully objects;

• The data has been unlawfully processed;

• Deletion is required by law.

The right to erasure does not apply where retention is necessary for legal obligations or legal claims.

14.4 Right to Restriction

The right to request that processing be temporarily restricted in the circumstances provided by the GDPR.

14.5 Right to Data Portability

Where processing is based on consent or a contract and carried out by automated means, the individual may request their data in a structured, commonly used and machine-readable format.

Where technically feasible, the individual may request that the data be transmitted directly to another controller.

14.6 Right to Object

The individual may object to processing based on AniWays’ legitimate interests.

AniWays will stop processing unless it demonstrates compelling legitimate grounds that override the individual’s rights or the processing is necessary for legal claims.

Individuals may object to direct marketing at any time. Where an objection to direct marketing is made, AniWays will stop using the relevant data for that purpose.

14.7 Right to Withdraw Consent

Where processing is based on consent, consent may be withdrawn at any time.

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

14.8 Rights Concerning Automated Decisions

Individuals have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, except in the situations permitted by law and subject to the required safeguards.

14.9 Right to Lodge a Complaint

Individuals may lodge a complaint with the Portuguese supervisory authority or another competent European supervisory authority.

15. Exercising Data Protection Rights

Requests may be submitted to:

Email: customer@anixways.com
Postal address: Rua da Senhora do Rosário, 5, Cabrito, 2205-063 Abrantes, Portugal

The request should clearly identify:

• The person making the request;

• The right they wish to exercise;

• The personal data or processing concerned;

• Relevant account or order information, where applicable.

Requests are generally free of charge.

AniWays may request additional information reasonably necessary to confirm the identity of the person making the request.

AniWays will respond without undue delay and normally within one month after receiving the request.

Where necessary due to the complexity or number of requests, this period may be extended by up to two additional months. The individual will be informed of the extension and reasons within the initial one-month period.

Where a request is manifestly unfounded or excessive, particularly because it is repetitive, AniWays may charge a reasonable administrative fee or refuse the request, as permitted by law.

16. Customer Account Deletion

Customers may request closure and deletion of their AniWays account by contacting:

customer@anixways.com

Deleting an account does not necessarily result in the immediate deletion of all information.

AniWays may continue to retain information concerning:

• Orders;

• Invoices;

• Payments;

• Refunds;

• Complaints;

• Returns;

• Guarantees;

• Fraud prevention;

• Legal claims;

where retention is required or permitted by law.

17. Automated Decision-Making and Profiling

AniWays does not currently make decisions that produce legal or similarly significant effects concerning customers based solely on automated processing.

Automated systems may be used to assist with:

• Payment security;

• Fraud detection;

• Website security;

• Product recommendations;

• Marketing measurement;

• Technical website operation.

These systems do not independently remove the customer’s statutory or contractual rights.

Payment providers may conduct their own automated fraud, authentication or risk assessments under their respective policies.

AniWays does not currently personalize product prices based on automated profiling of individual customers.

Where AniWays introduces significant automated decision-making in the future, this Policy will be updated with information concerning:

• The logic involved;

• The importance of the processing;

• The expected consequences;

• The available safeguards.

18. Children’s Privacy

The AniWays website and online store are primarily intended for adults and individuals with the legal capacity to enter into purchase contracts.

Purchases made by minors must be authorized and supervised by a parent or legal representative.

AniWays does not knowingly rely on consent provided by a child under the age of 13 for the direct provision of information society services.

Where consent is required in relation to a child under 13, it must be provided or authorized by the child’s legal representative.

Where AniWays becomes aware that personal data relating to a child has been collected unlawfully, it will take appropriate measures to delete or restrict that data.

19. Data Security

AniWays applies appropriate technical and organizational measures designed to protect personal data against:

• Unauthorized access;

• Unlawful use;

• Accidental loss;

• Destruction;

• Alteration;

• Unauthorized disclosure;

• Fraud;

• Cyberattacks.

Measures may include:

• Encrypted website connections;

• Access controls;

• Strong authentication procedures;

• Secure password hashing;

• Website security monitoring;

• Software updates;

• Backups;

• Malware protection;

• Access restrictions;

• Secure payment providers;

• Confidentiality obligations;

• Limitation of staff and provider access to necessary information.

Although AniWays takes reasonable precautions, no online system or method of transmission can be guaranteed to be completely secure.

Customers should protect their passwords and immediately report suspected unauthorized account access.

20. Personal Data Breaches

AniWays maintains procedures to identify, assess, document and respond to personal data breaches.

Where a personal data breach is likely to result in a risk to the rights and freedoms of individuals, AniWays will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours after becoming aware of the breach.

Where a breach is likely to result in a high risk to affected individuals, AniWays will also communicate the breach to those individuals without undue delay, unless a legal exception applies.

AniWays documents personal data breaches even where notification to the supervisory authority is not legally required.

21. Third-Party Links and Services

The website may contain links to third-party websites, social media platforms or external services.

AniWays is not responsible for the independent privacy practices, security or content of those third parties.

Users should review the privacy policy of each external service before providing personal data.

22. Business Transfers

Where AniWays undergoes a restructuring, merger, sale, transfer or acquisition, personal data may be transferred as part of that transaction.

Any transfer will be carried out in accordance with applicable data protection law and subject to appropriate confidentiality and security measures.

Where required, affected individuals will be informed of any material change concerning the controller or use of their personal data.

23. Changes to This Privacy Policy

AniWays may update this Privacy Policy to reflect changes in:

• Applicable law;

• Website functionality;

• Payment or delivery providers;

• Business operations;

• Data processing practices;

• Security measures;

• Regulatory guidance.

The latest version will be published on this page and identified by the “Last updated” date.

Where changes materially affect the rights or expectations of individuals, AniWays will provide an appropriate notice.

24. Supervisory Authority

Individuals have the right to lodge a complaint with:

CNPD — Comissão Nacional de Proteção de Dados
Avenida D. Carlos I, 134, 1.º
1200-651 Lisboa
Portugal

Telephone: +351 213 928 400
Email: geral@cnpd.pt

Individuals may contact AniWays before submitting a complaint so that the matter can be assessed directly. This does not limit the right to contact the CNPD. (Comissão Nacional de Proteção de Dados)

25. Contact Information

For privacy-related questions, requests or complaints, contact:

AniWays
Legal name: Guilherme Maneiras
NIF: 251152170
Address: Rua da Senhora do Rosário, 5, Cabrito, 2205-063 Abrantes, Portugal
Telephone: +351 923 223 155
Email: customer@anixways.com
Alternative email: business@anixways.com