PRIVACY POLICY

Last updated: August 20, 2026

This Privacy Policy explains how ColorVanta collects, uses, stores, shares, and protects personal data when you visit ColorVanta.com, use the ColorVanta EU Store or US Store, create an account, place an Order, contact us, or subscribe to marketing communications.

This Policy should be read together with our Cookies Policy and Terms of Service.

Nothing in this Policy limits any privacy or data-protection right that cannot lawfully be excluded or restricted.

1. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal data processed in connection with:

the institutional Website at https://colorvanta.com/;
the EU Store at https://colorvanta.com/eu/;
the US Store at https://colorvanta.com/us/;
customer accounts;
Orders, payments, production, shipping, and customer support;
newsletter subscriptions and other marketing communications;
cookies, analytics, security, and other Website-related technologies.

In this Policy, “ColorVanta,” “we,” “us,” or “our” refers to the data controller identified in Section 2.

This Policy applies to personal data relating to identifiable individuals. It does not apply to information that is genuinely anonymous and can no longer be linked to an identifiable person.

2. DATA CONTROLLER

ColorVanta is a trading name operated by the company identified below. That company is the controller of personal data processed for the purposes described in this Privacy Policy, except where another organization acts as an independent controller for its own processing activities.

Trading name: ColorVanta
Data controller: ANTÓNIO TRIGO MARQUÊS, UNIPESSOAL LDA
Registered office: Estação Ferroviária de Foros de Amora, Loja 16, 2845-612 Amora, Portugal
Company registration number: 515851558
Website: https://colorvanta.com/
Email: support@colorvanta.com

Privacy and data-protection requests may be sent to the email address above.

3. PERSONAL DATA WE COLLECT

We collect personal data in several ways: directly from you, automatically when you use the Website, and from service providers involved in transactions or Website operation.

3.1 DATA YOU PROVIDE

Depending on how you use the Website, you may provide:

name;
email address;
telephone number, where provided;
billing address;
shipping address;
account details and login-related information;
Order details, including Products purchased and Order number;
information you provide in emails, forms, support requests, or other communications;
newsletter and marketing preferences;
any other information you choose to provide when communicating with us.

Please avoid sending sensitive personal data unless it is necessary for a specific request.

3.2 PAYMENT AND TRANSACTION DATA

When you place an Order, we may process transaction-related information such as:

amount paid;
currency;
payment status;
payment method;
transaction or payment-provider identifiers;
billing information required for the transaction or accounting records.

Payment card details are processed by payment providers. ColorVanta does not normally receive or store complete payment card numbers where those details are entered directly into a payment provider’s secure system.

3.3 DATA COLLECTED AUTOMATICALLY

When you use the Website, certain technical and usage information may be collected automatically, including:

IP address;
browser type and version;
device type and operating system;
approximate location derived from technical information such as IP address;
pages viewed and interactions with the Website;
referral source;
date and time of visits;
session, cookie, and similar identifiers;
security, diagnostic, and server-log information.

The precise data collected depends on the technologies in use and your cookie choices where consent is required.

3.4 DATA RECEIVED FROM THIRD PARTIES

We may receive limited personal data from service providers involved in an Order or Website operation, such as:

payment confirmation or fraud-prevention information from payment providers;
production and fulfillment status;
shipping, tracking, and delivery updates from logistics providers;
technical, security, or analytics information from Website service providers.

4. HOW AND WHY WE USE PERSONAL DATA

We process personal data only for specific purposes connected with operating ColorVanta, serving customers, complying with legal obligations, and protecting the Website and our business.

These purposes may include:

operating and maintaining the Website and Stores;
creating and managing customer accounts;
processing and confirming Orders;
processing payments and receiving payment confirmation;
producing, fulfilling, shipping, and tracking Orders;
communicating about Orders, delivery, refunds, withdrawals, or Product issues;
responding to questions and customer-support requests;
issuing invoices and maintaining accounting and tax records;
detecting, preventing, and investigating fraud, abuse, security incidents, or unlawful activity;
protecting our legal rights and handling disputes;
improving Website performance, functionality, content, and user experience;
measuring Website usage and performance through analytics, where permitted;
sending newsletters or other marketing communications where a lawful basis exists;
recording and respecting marketing and cookie preferences;
complying with legal, regulatory, court, or public-authority requirements.

We do not use personal data for purposes that are incompatible with the purpose for which it was collected unless permitted or required by law.

5. LEGAL BASES FOR PROCESSING

Where the General Data Protection Regulation or similar legislation requires a legal basis, we rely on one or more of the following, depending on the processing activity.

5.1 CONTRACT

We process personal data where it is necessary to enter into or perform a contract with you, including to:

process an Order;
arrange payment;
produce and deliver Products;
communicate about the Order;
provide contractual refunds, replacements, or other customer-service measures.

5.2 LEGAL OBLIGATION

We process personal data where necessary to comply with legal obligations, including obligations relating to:

accounting and taxation;
invoicing;
consumer protection;
regulatory requests;
establishment, exercise, or defence of legal claims where required by law.

5.3 LEGITIMATE INTERESTS

Where permitted by law, we may process personal data where necessary for legitimate interests pursued by ColorVanta or a third party, provided those interests are not overridden by your rights and freedoms.

These interests may include:

securing the Website and Stores;
preventing fraud and misuse;
maintaining business and transaction records;
improving Website performance and customer experience;
managing customer communications;
establishing, exercising, or defending legal claims.

Where we rely on legitimate interests, we consider the nature of the processing, its necessity, and its potential impact on individuals.

Where consent is required, we rely on your consent for specific processing activities, which may include:

non-essential cookies and analytics;
newsletter subscriptions;
certain marketing communications.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. ORDERS, PAYMENTS, AND FULFILLMENT

When you place an Order, we process the information necessary to complete the transaction and deliver the Product.

This may include your name, contact details, billing and shipping addresses, Order details, payment status, and information needed for production and delivery.

We may share the minimum personal data reasonably necessary with:

payment processors;
production and fulfillment providers;
shipping carriers and logistics providers;
providers supporting order management, security, or technical operation.

Payment services may be provided by third parties such as Stripe and PayPal. Depending on the service and transaction, a payment provider may process personal data under its own privacy terms and legal responsibilities.

Production, fulfillment, and delivery providers receive only the information reasonably necessary for the services they perform.

7. ACCOUNTS, CONTACTS, AND CUSTOMER SUPPORT

If you create a customer account, we process account information to provide and secure the account and to maintain information associated with your Orders.

If you contact ColorVanta, we may retain the communication and related information so that we can:

respond to your request;
provide customer support;
investigate an Order, delivery, refund, or Product issue;
maintain an appropriate record of the communication;
protect legal rights or comply with legal obligations.

Please provide only the personal data reasonably necessary for your request.

If you subscribe to the ColorVanta newsletter or otherwise request marketing communications, we may process information such as:

your email address;
subscription status;
consent or preference records;
information about delivery, opening, or interaction with communications where permitted and enabled.

Marketing communications may be sent through an email-service provider acting on behalf of ColorVanta.

Where consent is the legal basis, you may withdraw it at any time.

You may unsubscribe from marketing emails by using the unsubscribe link included in the communication or by contacting support@colorvanta.com.

Unsubscribing from marketing does not prevent us from sending transactional or service communications that are necessary for an Order, account, customer-support request, or legal obligation.

9. COOKIES AND ANALYTICS

ColorVanta uses cookies and similar technologies for purposes such as:

operating essential Website and Store functionality;
maintaining cart, checkout, login, and security functions;
remembering preferences where applicable;
understanding Website usage and performance;
analytics and Website improvement.

We may use analytics services such as Google Analytics.

Where required by law, non-essential cookies and similar technologies are used only after the required consent has been obtained.

You can manage available cookie choices through the Website’s cookie-consent tool and, where applicable, through your browser settings.

For more information about the categories of cookies and technologies used, please see our Cookies Policy.

We use service providers to operate the Website, process Orders, communicate with customers, and provide supporting services.

Depending on the circumstances, personal data may be disclosed to categories of recipients such as:

payment processors;
production and fulfillment providers;
shipping carriers and logistics providers;
website hosting and infrastructure providers;
security, backup, and technical-support providers;
analytics providers;
email and newsletter providers;
professional advisers such as accountants, legal advisers, or auditors where necessary;
public authorities, courts, regulators, or law-enforcement bodies where disclosure is required or permitted by law.

Service providers acting as processors are expected to process personal data under appropriate contractual and confidentiality obligations.

Some third parties, such as certain payment providers, may act as independent controllers for particular processing activities and apply their own privacy policies.

We do not disclose personal data to third parties merely for their unrelated purposes without an appropriate legal basis.

11. INTERNATIONAL DATA TRANSFERS

Some service providers may process or store personal data in countries outside the country in which you live.

For personal data protected by the GDPR, transfers outside the European Economic Area are made only where permitted by applicable data-protection law.

Depending on the destination and provider, safeguards may include:

an adequacy decision adopted by the European Commission;
Standard Contractual Clauses approved by the European Commission;
another lawful transfer mechanism or derogation available under applicable law.

Where required, additional safeguards may be applied to protect transferred personal data.

You may contact us for further information about the safeguards relevant to a particular transfer where you have a legal right to receive that information.

12. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for any additional period required or permitted by law.

The retention period depends on the type of information and the reason for processing. For example:

Order, payment, invoicing, and accounting records may be retained for the periods required by tax, accounting, consumer-protection, or other applicable laws;
account information may be retained while the account remains active and for a reasonable period afterward where necessary;
customer-support and correspondence records may be retained for as long as reasonably necessary to resolve the matter, maintain records, or protect legal rights;
marketing data may be retained until you unsubscribe, withdraw consent, object where applicable, or the data is no longer needed;
consent and preference records may be retained for as long as necessary to demonstrate and respect your choices;
analytics, security, and technical logs are retained according to the settings and operational needs of the relevant systems, subject to applicable law.

When personal data is no longer required, it is deleted, anonymized, or otherwise handled in accordance with applicable law and appropriate technical procedures.

13. DATA SECURITY

We use appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.

Measures may include, as appropriate:

access controls and account-security measures;
secure connections and encryption in transit;
security monitoring and malware protection;
backups and recovery measures;
restricted access to administrative systems;
use of reputable service providers with appropriate security measures.

No website, transmission method, or storage system can be guaranteed to be completely secure.

If a personal-data breach occurs, we will assess and respond to it in accordance with applicable data-protection law, including notification to supervisory authorities or affected individuals where legally required.

14. YOUR PRIVACY RIGHTS

Depending on where you live and the law applicable to the processing, you may have rights concerning your personal data.

For individuals protected by the GDPR, these may include the right to:

obtain confirmation as to whether personal data concerning you is being processed;
access your personal data and receive information about its processing;
request correction of inaccurate or incomplete personal data;
request erasure of personal data in circumstances provided by law;
request restriction of processing in circumstances provided by law;
receive certain personal data in a structured, commonly used, machine-readable format and, where applicable, have it transmitted to another controller;
object to processing based on legitimate interests;
object at any time to processing for direct marketing;
withdraw consent at any time where processing is based on consent;
lodge a complaint with a competent data-protection supervisory authority.

These rights are subject to the conditions, exceptions, and limitations provided by applicable law.

Other jurisdictions, including jurisdictions in the United States and Canada, may grant similar or additional privacy rights where the relevant law applies to ColorVanta and to the processing concerned.

14.1 HOW TO EXERCISE YOUR RIGHTS

To make a privacy request, contact support@colorvanta.com.

Please provide enough information for us to identify the request and the personal data concerned.

We may need to request reasonable additional information to verify your identity before fulfilling a request. Any identity-verification process will be proportionate to the nature of the request and the data involved.

Where applicable law provides a time limit for responding, we will respond within that period.

14.2 COMPLAINTS

If you are in the European Union, you have the right to lodge a complaint with the data-protection supervisory authority competent for you.

ColorVanta is established in Portugal. The Portuguese supervisory authority is:

Comissão Nacional de Proteção de Dados (CNPD)
Website: https://www.cnpd.pt/

You may also have the right to complain to another competent supervisory authority, including the authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement, as provided by applicable law.

We encourage you to contact us first if you have a privacy concern so that we can try to address it.

15. CHILDREN’S PRIVACY

The Website and Stores are not specifically directed to children.

We do not knowingly seek to collect personal data from children in circumstances where parental or guardian authorization is legally required and has not been provided.

Where applicable law requires parental or guardian authorization for a minor to place an Order or provide consent, the relevant activity should only take place with that authorization.

If you believe that a child has provided personal data without required authorization, please contact support@colorvanta.com so that we can review the matter.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in:

our services or Website;
the technologies or service providers we use;
our data-processing practices;
applicable law or regulatory guidance.

The revised version will be published on this page with an updated “Last updated” date.

Where a change materially affects how personal data is processed, we will provide any additional notice or obtain any consent required by applicable law.

17. CONTACT AND PRIVACY REQUESTS

For questions about this Privacy Policy, the processing of your personal data, or the exercise of privacy rights, contact:

Email: support@colorvanta.com
Contact page: https://colorvanta.com/contact-us/

The data controller is identified in Section 2.

Please include a clear description of your request.

Do not send unnecessary sensitive identification documents unless we specifically request information that is reasonably necessary to verify your identity.

↑ BACK TO TABLE OF CONTENTS