Legal
Privacy Policy
This page describes what this site does with your personal data. It describes the site as it actually works today, not a generic template.
Last updated: October 8, 2026
1. Data controller
The controller for the personal data collected on this site is Dualtrend - Representações de Moda, Lda, which you can contact by email at dualtrend@gmail.com.
Technical maintenance of the site is carried out by an external provider, who processes this data only on Dualtrend’s instructions and under a data-processing agreement. This policy covers what happens on this site; it does not cover data processing Dualtrend carries out elsewhere.
2. What we collect, and when
We collect only what each function needs, and at four distinct moments.
When you visit the public site. No account is created and we use no analytics, advertising or social-media tools. The server processes the request’s IP address to limit abuse of the forms; that address stays in memory for the counting window, at most 15 minutes, and is never written to the database or linked to you.
When you write to us through the contact form. We collect your name, email address, company if you give one, and the message you write. None of it is stored on this site: the message is sent by email to Dualtrend’s mailbox, and that is where it exists. No account is created and none is needed.
When you request client-area access. The registration form collects:
- the company name;
- the municipality (concelho);
- the Dualtrend portfolio brands you already carry and, if you choose to name them, other brands;
- the email address;
- the two consents you give on the form, with the date and time you gave them.
We do not ask for a tax number. The municipality is used to check brand-and-municipality exclusivity.
Once the account is approved and you use the client area. From then on we also store:
- the password you set, kept only as a cryptographic hash and never in readable form, which we cannot read;
- your signed-in session, through a technical cookie;
- your telephone number, if you add it to your profile;
- the showroom bookings you request: the day, the time and the booking’s history of changes;
- the brands you register interest in through the portal;
- the defects you report: the article reference, colour, size, season, quantity, order number, the description you write and up to 5 photographs.
Photographs are resized and re-encoded in your own browser before they leave your device.
4. The legal basis for each purpose
Each kind of processing has its basis in the General Data Protection Regulation:
- Consent: the registration request, which is only sent if you authorise the processing of the form’s data, and commercial communications, which are optional and independent of the account.
- Performance of a contract and pre-contractual steps: managing the account and everything you do in the client area: lookbooks, galleries, stock lookup, bookings and defect reports.
- Legitimate interest: keeping the site secure and available, limiting abuse of the forms, and keeping the commercial record of a defect after the case is closed.
- Pre-contractual steps and legitimate interest: replying to the messages you send us through the contact form, using the details you entered in it.
You can withdraw marketing consent at any time, in the client area or by writing to dualtrend@gmail.com. That does not affect your account or your access to the client area, and it does not call into question what was done earlier on the basis of that consent.
5. How long we keep it
The periods below are the ones the system applies automatically, not intentions.
The photographs and the description of each reported defect are kept for 12 months after the case is closed and are then anonymised; a draft that is never submitted is deleted after 30 days. When you delete your account, every defect and photograph is deleted immediately.
Anonymised, here, means the photographs and the description are deleted and the record is no longer linked to you: Dualtrend keeps the commercial history of the defect with the brand, without identifying you.
- Client account: for as long as the account exists.
- Bookings and brand interest: for as long as the account exists; they are deleted with it.
- Refused registration request: the form’s data is kept only for as long as it is needed to document the decision and to recognise a repeat request from the same company. You can ask for it to be deleted at any time.
- Signed-in session: the session cookie lasts 7 days.
- Contact form messages: they are not stored on this site. They stay in Dualtrend’s mailbox for as long as they are needed to reply and to follow the matter up.
Deleting the account also deletes the photographs held in file storage, not only the records in the database.
The site’s emails are sent through Scaleway, which deletes the content of each message right after it is sent. While the sending service is active, Scaleway keeps a record of each send: the recipient, the subject (which may include the company’s name or the name of whoever wrote), the date and time, and the delivery status.
6. Who has access
Within Dualtrend, your data is accessed by the team that runs the portal, through an administration panel with its own account and password. In the client area each retailer sees only their own data: their account, their bookings and their defects, never anyone else’s.
We do not sell, rent or share your data with third parties for advertising. Outside Dualtrend, the only parties in contact with it are the provider who maintains the site and the technical providers listed below.
7. Where the data is hosted
All processing takes place on servers in the European Union. We rely on two providers:
- netcup (Germany): the server and the database. A data-processing agreement under Article 28 GDPR is concluded with this provider.
- Scaleway (France): file storage: defect photographs, lookbooks, galleries and site imagery; and sending the site’s emails: account approval, password setup, bookings, defects, the messages you send us through the contact form, and the internal notifications these actions generate.
When you download a file in the client area, your browser connects directly to the storage in France through a temporary address.
None of these providers is established outside the European Economic Area, and the site loads no analytics, advertising or social-media tool that would send data outside it.
8. Your rights
You may at any time ask for access to your data and a copy of it, for anything wrong to be corrected, for your data and your account to be deleted, for a processing operation to be restricted or objected to, and for the portability of the data you gave us; and you may withdraw a consent you have given. To exercise any of these rights, write to dualtrend@gmail.com. We answer within the period the law provides, as a rule one month. If you believe your data is not being handled properly, you may complain to the Portuguese data-protection authority, the Comissão Nacional de Proteção de Dados, at www.cnpd.pt.
9. Security
Traffic between your browser and the site is encrypted, passwords are stored only as a cryptographic hash and never in readable form, the administration panel is restricted to the Dualtrend team, and each client can read only their own records. The site loads no third-party fonts, scripts or content.
10. Changes to this policy
This policy describes the site as it works today. If we change it, for example if we start using an analytics tool, we update this page and the date at the top. The version in force is always the one published here.
The conditions for using the site are in the Terms and Conditions.