Privacy policy

Privacy Policy

Last updated: August 22, 2026

This Privacy Policy explains how David Soares, trading as MDORA (“MDORA”, “we”, “us” or “our”) collects, uses, discloses and protects personal information when you visit mdora.store, purchase a product, create or use a customer account, contact us or otherwise interact with our services.

Our online store is powered by Shopify.

1. Personal Information We Collect

Depending on how you interact with MDORA, we may collect or process information including:

  • Contact information such as your name, email address, telephone number, billing address and shipping address.
  • Order information including products viewed, added to cart, purchased, returned or cancelled.
  • Transaction and payment-related information necessary to process purchases.
  • Customer account information and preferences.
  • Communications you send to customer support.
  • Device and technical information such as IP address, browser, device and network information.
  • Website activity and interaction information.
  • Marketing preferences and interactions with promotional communications.

Payment information may be processed directly by Shopify, PayPal, card networks, banks or other payment providers rather than being stored directly by MDORA.

2. How We Collect Information

We may collect information:

  • Directly from you.
  • Automatically through our website and technologies such as cookies.
  • From Shopify.
  • From payment providers.
  • From suppliers, fulfilment providers and carriers where needed to fulfil orders.
  • From analytics, advertising or technology providers where permitted by applicable law.
  • From other partners where you have authorised the interaction or where collection is legally permitted.

3. How We Use Personal Information

We may use personal information to:

  • Process purchases and payments.
  • Fulfil and ship orders.
  • Provide order confirmations and tracking.
  • Process returns, refunds and cancellations.
  • Create and manage customer accounts.
  • Provide customer support.
  • Detect and prevent fraud or misuse.
  • Maintain website and account security.
  • Improve our products, website and customer experience.
  • Perform analytics.
  • Comply with accounting, tax, regulatory and legal obligations.
  • Send marketing communications where permitted.
  • Provide or measure advertising where permitted.

4. Legal Bases Where European Data Protection Law Applies

Because MDORA is operated from Portugal, European data protection requirements may apply to certain processing activities.

Where required, we may rely on:

Performance of a contract, where processing is necessary to process an order, payment, delivery, return or other service requested by you.

Legitimate interests, where reasonably necessary to operate, secure and improve our business, provided those interests are not overridden by your rights.

Consent, including for certain marketing, advertising or tracking technologies where consent is required.

Legal obligation, where information must be processed or retained to comply with tax, accounting, regulatory or other legal requirements.

You may withdraw consent where processing is based on consent.

5. Cookies and Similar Technologies

MDORA and our service providers may use cookies and similar technologies for:

  • Essential store functionality.
  • Security.
  • Customer preferences.
  • Checkout and account functionality.
  • Analytics.
  • Marketing and advertising where permitted.

Where required, non-essential technologies will be controlled through the privacy or cookie choices made available on our website.

6. Advertising, Sale, Sharing and Targeted Advertising

MDORA does not sell personal information for monetary payment.

However, depending on the advertising, analytics or technology services enabled on our store, certain disclosures of identifiers or online activity information may be legally classified as a “sale”, “sharing” or use for targeted advertising under certain U.S. state privacy laws.

Where such laws apply, eligible customers may have the right to opt out.

Where available, you may exercise this choice through the privacy or data-sharing opt-out controls provided on mdora.store or by contacting support@mdora.store.

We will respect legally recognised browser-based opt-out preference signals where required by applicable law and supported by our systems.

7. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to operate MDORA, including to:

  • Shopify, which hosts and powers our store.
  • Payment providers such as Shopify Payments and PayPal.
  • Suppliers and fulfilment partners.
  • Shipping and logistics companies.
  • IT and cloud service providers.
  • Customer-support providers.
  • Security and fraud-prevention providers.
  • Analytics providers.
  • Advertising and marketing partners where permitted.
  • Professional advisers.
  • Government authorities, regulators or law-enforcement agencies where legally required.
  • Parties involved in a legitimate sale, restructuring or transfer of our business.

Service providers receive information only as necessary for their functions or as otherwise permitted by applicable law.

8. Shopify

Our store is hosted and powered by Shopify.

Information submitted through MDORA may be processed by Shopify in order to provide ecommerce, checkout, security, analytics, personalisation and related services.

Shopify and its service providers may process information in countries other than the country where you live.

Shopify maintains its own consumer privacy information and privacy portal.

9. International Fulfilment and Data Transfers

Because MDORA operates internationally and uses third-party technology, payment and fulfilment providers, personal information may be processed in countries other than your country of residence.

For example, shipping information may be shared with suppliers, fulfilment providers and carriers where necessary to deliver your order.

Where European data protection law requires safeguards for international transfers, we will rely on recognised mechanisms such as adequacy decisions, contractual safeguards or other lawful transfer mechanisms where applicable.

10. Data Retention

We retain personal information only for as long as reasonably necessary for purposes including:

  • Processing orders and transactions.
  • Maintaining customer accounts.
  • Providing customer support.
  • Handling returns and disputes.
  • Meeting tax and accounting obligations.
  • Preventing fraud.
  • Enforcing our agreements.
  • Complying with applicable law.

Retention periods vary depending on the type of information and the reason for processing it.

11. Security

We use reasonable organisational and technical measures designed to protect personal information.

However, no internet transmission or electronic storage method can be guaranteed to be completely secure.

12. U.S. State Privacy Rights

Depending on your state of residence and whether the relevant law applies to MDORA, you may have rights including:

  • The right to know or access personal information.
  • The right to request correction.
  • The right to request deletion.
  • The right to obtain a portable copy of certain information.
  • The right to opt out of the sale or sharing of personal information where applicable.
  • The right to opt out of targeted advertising where applicable.
  • The right to limit certain uses of sensitive personal information where applicable.
  • The right to appeal certain privacy-request decisions where applicable.
  • The right not to receive unlawful discriminatory treatment for exercising applicable privacy rights.

These rights are subject to applicable exemptions and eligibility requirements.

13. European Privacy Rights

Where European data protection law applies, you may have rights including access, correction, deletion, restriction, objection, portability and withdrawal of consent.

You may also have the right to lodge a complaint with an applicable data protection supervisory authority.

14. Exercising Your Privacy Rights

To submit a privacy request, contact:

support@mdora.store

Please identify your request clearly.

We may need to verify your identity before fulfilling certain requests.

Where applicable, an authorised agent may submit a request on your behalf, subject to verification requirements.

We will respond within the period required by applicable law.

15. Marketing Communications

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in the message.

Opting out of marketing does not prevent us from sending transactional communications necessary to manage your orders, account, shipping, returns or security.

16. Children's Privacy

MDORA is not intended for children under 13 years of age.

We do not knowingly collect personal information directly from children under 13.

If you believe a child has provided personal information to us, please contact support@mdora.store so that we can review and, where appropriate, delete the information.

17. Third-Party Websites

Our website may contain links to websites, social networks or other third-party services that MDORA does not control.

Their privacy practices are governed by their own policies.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, technologies, business practices or legal requirements.

When we update it, we will change the Last updated date shown above and provide additional notice where required.

19. Contact Us

For questions about privacy or your personal information:

MDORA
David Soares, trading as MDORA
Email: support@mdora.store
Website: mdora.store
Address: Bloco Mirandela, 1, Barreiro, 2830-560 Setúbal, Portugal

For applicable European data protection purposes, David Soares, trading as MDORA, is the data controller for personal information processed by MDORA.