Privacy & Data Protection

Data controller

Pontavivo Lda., Lisbon, Portugal. Contact: hello@pontavivo.com.

What we collect

• Name, email, phone, and delivery address for order fulfilment.
• Organisation and VAT/NIPC for B2B accounts and invoicing.
• Order history, batch records, and communication with support.
• Essential cookies for site operation; optional analytics with consent.

We do not sell personal data.

How we use it

• Process and deliver orders, issue invoices, and provide support.
• Maintain batch traceability required for medical consumable distribution.
• Improve our website and service with aggregated, non-identifying analytics.

Order lookup privacy

My Orders lookup by email masks sensitive fields (full address, phone, tracking references) in API responses and blurs them on screen until you choose to reveal.

Your GDPR rights

• Access, rectification, erasure, restriction, and portability where applicable.
• Object to processing based on legitimate interests.
• Lodge a complaint with your national data protection authority.

Contact hello@pontavivo.com with your request and Order ID if relevant.

Retention

Order and batch records are kept for the period required by EU medical device traceability and tax law, then securely deleted.