Legal
Privacy Policy
This page describes what this site does with your personal data. It describes the site as it actually works today — not a generic template.
Last updated: September 7, 2026
1. Data controller
The controller for the personal data collected on this site is Dualtrend — Representações de Moda, Lda, tax number PT 505 011 336, registered at Rua de Brito Capelo 1147, 4450-078 Matosinhos, telephone +351 225 101 245, email dualtrend@gmail.com.
Technical maintenance of the site is carried out by an external provider, who processes this data only on DualTrend's instructions and under a data-processing agreement. This policy covers what happens on this site; it does not cover data processing DualTrend carries out elsewhere.
2. What we collect, and when
We collect only what each function needs, and at four distinct moments.
When you visit the public site. No account is created and we use no analytics, advertising or social-media tools. The server processes the request's IP address to limit abuse of the forms; that address stays in memory for the counting window — at most 15 minutes — and is never written to the database or linked to you.
When you write to us through the contact form. We collect your name, email address, company — if you give one — and the message you write. None of it is stored on this site: the message is sent by email to DualTrend's mailbox, and that is where it exists. No account is created and none is needed.
When you request client-area access. The registration form collects:
- the company name;
- the municipality (concelho);
- the DualTrend portfolio brands you already carry and, if you choose to name them, other brands;
- the email address;
- the two consents you give on the form, with the date and time you gave them.
We do not ask for a tax number or a telephone number. The municipality is stored for a specific reason: DualTrend works on a brand-and-city exclusivity basis, and this comparison is what tells us whether a brand is already represented in your area.
Once the account is approved and you use the client area. From then on we also store:
- the password you set, kept only as a cryptographic hash — never in readable form, and we cannot read it;
- your signed-in session, through a technical cookie;
- the showroom bookings you request: the day, the time and the booking's history of changes;
- the brands you register interest in through the portal;
- the defects you report: the article reference, colour, size, season, quantity, order number, the description you write and up to 5 photographs.
Photographs are resized and re-encoded in your own browser before they leave your device. What reaches us is a new JPEG, without the original image's metadata — no GPS location and no device identifier.
4. The legal basis for each purpose
Each kind of processing has its basis in the General Data Protection Regulation:
- Consent — the registration request, which is only sent if you authorise the processing of the form's data, and commercial communications, which are optional and independent of the account.
- Performance of a contract and pre-contractual steps — managing the account and everything you do in the client area: lookbooks, galleries, stock lookup, bookings and defect reports.
- Legitimate interest — keeping the site secure and available, limiting abuse of the forms, and keeping the commercial record of a defect after the case is closed.
- Pre-contractual steps and legitimate interest — replying to the messages you send us through the contact form, using the details you entered in it.
You can withdraw marketing consent at any time by writing to dualtrend@gmail.com. That does not affect your account or your access to the client area, and it does not call into question what was done earlier on the basis of that consent.
5. How long we keep it
The periods below are the ones the system applies automatically, not intentions.
The photographs and the description of each reported defect are kept for 12 months after the case is closed and are then anonymised; a draft that is never submitted is deleted after 30 days. When you delete your account, every defect and photograph is deleted immediately.
Anonymised, here, means the photographs and the description are deleted and the record is no longer linked to you: DualTrend keeps the commercial history of the defect with the brand, without identifying you.
- Client account — for as long as the account exists.
- Bookings and brand interest — for as long as the account exists; they are deleted with it.
- Refused registration request — the form's data is kept only for as long as it is needed to document the decision and to recognise a repeat request from the same company. You can ask for it to be deleted at any time.
- Signed-in session — the session cookie lasts 7 days.
- Contact form messages — they are not stored on this site. They stay in DualTrend's mailbox for as long as they are needed to reply and to follow the matter up.
Deleting the account also deletes the photographs held in file storage, not only the records in the database.
6. Who has access
Within DualTrend, your data is accessed by the team that runs the portal, through an administration panel with its own account and password. In the client area each retailer sees only their own data: their account, their bookings and their defects — never anyone else's.
We do not sell, rent or share your data with third parties for advertising. Outside DualTrend, the only parties in contact with it are the provider who maintains the site and the technical providers listed below.
7. Where the data is hosted
All processing takes place on servers in the European Union. We rely on three providers:
- netcup (Germany) — the server and the database. A data-processing agreement under Article 28 GDPR is concluded with this provider.
- Scaleway (France) — file storage: defect photographs, lookbooks, galleries and site imagery.
- Brevo (France) — sending the automatic emails: account approval, password setup, bookings and defects.
When you download a file in the client area, your browser connects directly to the storage in France through a temporary address. That is why you will see a second domain at that moment.
None of these providers is established outside the European Economic Area, and the site loads no analytics, advertising or social-media tool that would send data outside it.
One note about those emails: Brevo records when they are opened and rewrites the links they contain, in order to count them. We neither asked for nor use those statistics.
8. Your rights
As the data subject, you may at any time:
- find out what data we hold about you and obtain a copy;
- correct data that is wrong or incomplete;
- ask for your data and your account to be deleted;
- object to a processing operation or ask for it to be restricted;
- withdraw a consent you have given;
- receive the data you gave us in a transferable format.
To exercise any of these rights, write to dualtrend@gmail.com or to Rua de Brito Capelo 1147, 4450-078 Matosinhos. We answer within the period the law provides — as a rule, one month.
We take no automated decisions and carry out no profiling: a registration request is approved by a person at DualTrend.
If you believe your data is not being handled properly, you may complain to the Portuguese data-protection authority, the Comissão Nacional de Proteção de Dados, at www.cnpd.pt.
9. Security
The measures in place include:
- all traffic between your browser and the site is encrypted (HTTPS);
- passwords are stored as a cryptographic hash, never in readable form;
- the administration panel is restricted to the DualTrend team, and each client can read only their own records;
- the site loads no third-party fonts, scripts or content — a rule enforced by the server itself, not merely a coding choice.
10. Changes to this policy
This policy describes the site as it works today. If we change it — for example, if we start using an analytics tool — we update this page and the date at the top. The version in force is always the one published here.
The conditions for using the site are in the Terms and Conditions.