Privacy Policy

The data controller for your personal data is Modo Experto School ("Modonautic", "we"), operating in Viana do Castelo, Portugal. Tax ID: [TO BE COMPLETED]. Address: [TO BE COMPLETED, Viana do Castelo, Portugal].

For any question about this policy or your data, contact us at geral@modonautic.com.

We collect the data you give us directly: name, email, phone number, and delivery address (if you buy a physical product in the shop).

If you create a shop account, we also store your order history and any addresses you save.

If you book a lesson, we collect your name and phone number to prefill the WhatsApp message — the booking is then arranged directly with you by the school, via WhatsApp.

Payment data (card, Multibanco, MB Way) is processed directly by Stripe — we never see or store your card details.

We also collect basic usage data (IP address, browser type) through strictly necessary cookies — see our Cookie Policy.

Processing shop orders and payments, and managing your customer account — necessary to perform the purchase/account contract.

Processing lesson booking requests and contacting you about them — necessary for the service you requested.

Replying to messages sent through the contact form — legitimate interest in responding to enquiries.

Sending you news, promotions or marketing content by email — only if you give explicit consent (you can withdraw it at any time, without affecting the rest of your account).

Complying with legal obligations (e.g. tax/accounting records of sales) — legal obligation.

We do not sell your data to third parties. We only share it with service providers (processors) that help us run the site:

• Supabase (database, authentication and image storage) — hosted in the European Union (Ireland).

• Stripe (payment processing) — Stripe Payments Europe, Ltd.

• Vercel (site hosting).

• Resend (sending emails from the contact form), when configured.

• Upstash (request rate limiting/abuse protection, no personally identifiable data).

Some of these providers may process data outside the European Economic Area (e.g. the US). When that happens, we ensure appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission.

We keep your account data for as long as your account is active, and order data for the period required by law for tax/accounting purposes.

If you request account deletion, we delete your personal data (profile, addresses), except information we are legally required to retain (e.g. a record of a paid order), which we keep anonymized whenever possible.

You have the right to: access your data, correct it, request its deletion, request a copy in a portable format, object to certain processing, and withdraw marketing consent at any time.

You can exercise these rights directly at /conta (delete account, export data), or by contacting us at geral@modonautic.com.

You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) — www.cnpd.pt.

We only use cookies strictly necessary for the site to function (login session, shopping cart, language preference) — we do not use third-party advertising or analytics cookies.

See our Cookie Policy for more details.

We apply appropriate technical and organizational measures to protect your data, including role-based access control (admin/staff vs. customer), encryption in transit (HTTPS), and database access restrictions.

We may update this policy from time to time. The last updated date is always shown at the top of the page.