Murillo’s Academy SurfShop values the privacy of its customers and is committed to protecting their personal data. This Privacy Policy explains in a clear manner how we collect, use, store and safeguard the personal data of users of our website.
1. Data Controller
The entity responsible for the processing of personal data is:
Company: Tuti Fruti, Variedades e Afins, Unipessoal Lda
Tax Number (NIF): 507 559 347
Commercial brand: Murillo’s Academy SurfShop
Address: Largo das Antigas Serrações, R/C Esq – São Pedro de Moel, Marinha Grande, Leiria, Portugal
Email: surfshop@murillosacademy.com
Phone: (+351) 913 814 470
2. Personal Data Collected
Personal data is collected solely for legitimate purposes related to the operation of the online store. The data may include:
- Name, email address, phone number and postal address;
- Billing and shipping details;
- Order history and purchasing preferences;
- Website browsing data, including cookies and analytical data.
3. Purposes and Legal Basis for Processing
Personal data is processed for the following purposes:
- Order management and fulfilment, including billing and shipping (performance of a contract);
- Customer communication, including order updates and customer support (performance of a contract);
- Marketing or promotional communications, where the user has given explicit consent;
- Improvement of website navigation and performance, through the use of cookies (consent).
4. Sharing of Data with Third Parties
Murillo’s Academy SurfShop does not sell or disclose personal data to third parties, except where necessary for:
- Payment processing through banking institutions or secure payment platforms;
- Order shipment via carriers and postal services;
- Compliance with legal obligations or requests from competent authorities.
All third parties involved are required to comply with applicable data protection legislation.
5. Data Retention
Personal data is retained only for the period necessary to fulfil the purposes for which it was collected, or for longer periods when required to comply with legal, tax or accounting obligations.
6. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or improper destruction.
7. User Rights
In accordance with the General Data Protection Regulation (GDPR), users have the right to:
- Access their personal data;
- Request the rectification or updating of inaccurate data;
- Request the erasure of personal data, where legally applicable;
- Request restriction of or object to the processing of their data;
- Withdraw consent for marketing communications at any time;
- Request data portability, where applicable.
Users also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) if they believe their data protection rights have been violated.
8. Cookies
We use cookies to improve the browsing experience on our website. Users may manage or disable cookies through their browser settings. For more information, please consult our Cookies Policy.
9. Changes to This Privacy Policy
Murillo’s Academy SurfShop reserves the right to update this Privacy Policy whenever necessary. Any changes will be published on this page.
Last updated: 2026