Introduction

Oazis values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect the information you provide through our website.

Data Controller

For any questions regarding the protection of your personal data, you can contact us through the means indicated above.

Personal Data Collected

We collect different types of information when you use our website:

Purpose of Data Processing

Your personal data is used to:

• Respond to your requests and questions
• Provide personalized quotes
• Manage your customer account: signing in, resetting the password and seeing your orders
• Process, deliver and invoice furniture orders, and handle returns and warranties
• Follow up on a partially completed quote request where continued contact was authorised
• Manage the history of your request and our communications with you through our internal customer management system (CRM)
• Improve the browsing experience on the website
• Analyze user behavior to optimize content
• Measure the effectiveness of our advertising campaigns (when you arrive at the website through an ad)
• Send communications related to our services (when authorized)
• Comply with legal and regulatory obligations

Legal Basis

The processing of your personal data is based on:

• Consent: when you continue or submit a form, or accept cookies
• Legitimate interests: statistical analysis and website improvement
• Contract execution: when you request quotes or services
• Legal obligations: compliance with tax and accounting requirements

Data Sharing with Third Parties

We use third-party services that may have access to your data:

• Google AnalyticsPrivacy Policy →Website traffic and behavior analysis
• Google Ads and Google Tag ManagerPrivacy Policy →Advertising campaign and conversion management
• Microsoft ClarityPrivacy Policy →User experience analysis and heat maps
• Meta/Facebook PixelPrivacy Policy →Measurement and optimization of Instagram and Facebook advertising campaigns
• ResendPrivacy Policy →Sending the emails for forms, orders and your account (email confirmation and new password)
• Cloudflare TurnstilePrivacy Policy →Verifying that forms are filled out by people, not automated programs
• MedusaPrivacy Policy →The shop platform: keeps the cart, orders and customer accounts

These services have their own privacy policies and may collect additional data. We do not sell or share your personal data for purposes unrelated to the services mentioned above.

Data Retention Period

Your personal data is retained only for as long as necessary:

• Complete or partially completed form and CRM data: up to 2 years after the last contact
• Advertising campaign identifiers (UTM, Click ID): 30 days after the first visit
• Analytics data: anonymized after 26 months (Google Analytics)
• Cookies: as defined in each cookie's settings (maximum 2 years)
• Customer account: as long as you keep it; you can ask us to delete it at any time
• Orders and invoices: 10 years, as tax law requires

Your Rights

According to the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: know what personal data we process about you
• Right of rectification: correct incorrect or outdated data
• Right to erasure: request the deletion of your data ('right to be forgotten')
• Right to restriction of processing: restrict the use of your data
• Right to data portability: receive your data in a structured format
• Right to object: object to the processing of your data for specific purposes
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within a maximum of 30 days.

Cookie Policy

Our website uses cookies to improve your experience. Cookies are small text files stored on your device.

You can reopen this notice using the Cookie notice link in the footer. To block or delete cookies, use your browser settings.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction. These include SSL/TLS encryption, firewalls, access controls and regular security audits.

Changes to Privacy Policy

We reserve the right to update this Privacy Policy periodically. Any changes will be posted on this page with the revised update date. We recommend that you review this policy regularly.

Contact

If you have questions about this Privacy Policy or about the processing of your personal data, contact us:

Supervisory Authority

You have the right to lodge a complaint with the National Data Protection Commission (CNPD) if you believe that the processing of your personal data violates the GDPR.

Introduction

Oazis values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect the information you provide through our website.

Data Controller

For any questions regarding the protection of your personal data, you can contact us through the means indicated above.

Personal Data Collected

We collect different types of information when you use our website:

Purpose of Data Processing

Your personal data is used to:

• Respond to your requests and questions
• Provide personalized quotes
• Manage your customer account: signing in, resetting the password and seeing your orders
• Process, deliver and invoice furniture orders, and handle returns and warranties
• Follow up on a partially completed quote request where continued contact was authorised
• Manage the history of your request and our communications with you through our internal customer management system (CRM)
• Improve the browsing experience on the website
• Analyze user behavior to optimize content
• Measure the effectiveness of our advertising campaigns (when you arrive at the website through an ad)
• Send communications related to our services (when authorized)
• Comply with legal and regulatory obligations

Legal Basis

The processing of your personal data is based on:

• Consent: when you continue or submit a form, or accept cookies
• Legitimate interests: statistical analysis and website improvement
• Contract execution: when you request quotes or services
• Legal obligations: compliance with tax and accounting requirements

Data Sharing with Third Parties

We use third-party services that may have access to your data:

• Google AnalyticsPrivacy Policy →Website traffic and behavior analysis
• Google Ads and Google Tag ManagerPrivacy Policy →Advertising campaign and conversion management
• Microsoft ClarityPrivacy Policy →User experience analysis and heat maps
• Meta/Facebook PixelPrivacy Policy →Measurement and optimization of Instagram and Facebook advertising campaigns
• ResendPrivacy Policy →Sending the emails for forms, orders and your account (email confirmation and new password)
• Cloudflare TurnstilePrivacy Policy →Verifying that forms are filled out by people, not automated programs
• MedusaPrivacy Policy →The shop platform: keeps the cart, orders and customer accounts

These services have their own privacy policies and may collect additional data. We do not sell or share your personal data for purposes unrelated to the services mentioned above.

Data Retention Period

Your personal data is retained only for as long as necessary:

• Complete or partially completed form and CRM data: up to 2 years after the last contact
• Advertising campaign identifiers (UTM, Click ID): 30 days after the first visit
• Analytics data: anonymized after 26 months (Google Analytics)
• Cookies: as defined in each cookie's settings (maximum 2 years)
• Customer account: as long as you keep it; you can ask us to delete it at any time
• Orders and invoices: 10 years, as tax law requires

Your Rights

According to the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: know what personal data we process about you
• Right of rectification: correct incorrect or outdated data
• Right to erasure: request the deletion of your data ('right to be forgotten')
• Right to restriction of processing: restrict the use of your data
• Right to data portability: receive your data in a structured format
• Right to object: object to the processing of your data for specific purposes
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within a maximum of 30 days.

Cookie Policy

Our website uses cookies to improve your experience. Cookies are small text files stored on your device.

You can reopen this notice using the Cookie notice link in the footer. To block or delete cookies, use your browser settings.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction. These include SSL/TLS encryption, firewalls, access controls and regular security audits.

Changes to Privacy Policy

We reserve the right to update this Privacy Policy periodically. Any changes will be posted on this page with the revised update date. We recommend that you review this policy regularly.

Contact

If you have questions about this Privacy Policy or about the processing of your personal data, contact us:

Supervisory Authority

You have the right to lodge a complaint with the National Data Protection Commission (CNPD) if you believe that the processing of your personal data violates the GDPR.