Privacy Policy
1. Who is the data controller
Courage Narrative, Lda., tax ID 516 068 245, registered at Casa da Lucília Guedes, S/N Lamelas, Vila Nova Souto D'el Rei 5400-865 Lamego, Portugal ("ExMo", "we"), is the controller of the personal data collected through exmo.pt.
Privacy contact: [email protected].
2. What data we collect
Identification and contact data you provide directly: name, company, email, phone, shipping/billing address and, for B2B invoicing, tax ID.
Order and billing data required to process purchases and comply with tax obligations.
Minimal technical data: we only use a technical cookie to remember your chosen language (PT/ES/EN). We do not use third-party advertising or analytics cookies (Google Analytics, Meta Pixel or similar) on this site.
3. Purposes and legal basis
Processing and managing orders, deliveries and invoicing — performance of a contract.
Responding to contact, quote or technical support requests — legitimate interest in handling your request, or consent where the form indicates so.
Complying with tax and accounting obligations — legal obligation.
4. Who we share data with
Payment processor (easypay), to process order payments.
Carrier (CTT Expresso), to physically deliver orders.
Hosting/technical infrastructure providers required to operate the site.
We do not sell or share your data with third parties for marketing purposes.
5. Retention period
Order and billing data is kept for the period legally required for tax and accounting obligations in Portugal (generally 10 years). General contact data is kept only as long as needed to respond to your request, unless a longer legal retention obligation applies.
6. Your rights
You may exercise your rights of access, rectification, erasure, restriction of processing, portability and objection at any time, and withdraw consent where processing is based on it.
To exercise these rights, write to [email protected].
If you believe our processing of your data does not comply with the law, you have the right to lodge a complaint with the Portuguese data protection authority (CNPD) — www.cnpd.pt.
7. Changes to this policy
We may update this policy to reflect legal or operational changes. The date of the last update is shown at the bottom of the page.
This document is provided for information purposes and does not replace legal advice. We recommend a lawyer reviews it before treating it as legally binding.
Last updated: 05/09/2026