Privacy Policy

Last Updated: March 2026

At IndigoRevelation Unipessoal Lda. (hereinafter, "the Company"), we take data protection and professional integrity with the utmost seriousness. This Privacy Policy outlines how we collect, process, and safeguard your personal and corporate data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Portuguese data protection laws.

1. Data Controller

The entity responsible for processing your data is:

Company Name: IndigoRevelation Unipessoal Lda.

Tax ID (NIF): PT 518637212

Registered Office: Rua Visconde, Nº 2013, Lj CM, 3700-265 São João da Madeira, Portugal.

Contact Email: privacy@indigorevelation.com

2. Information We Collect

We collect data necessary for the execution of commercial transactions and the provision of technical support:

Identity Data: Full name, job title, and company representation details.

Contact Data: Business address, email, and telephone numbers.

Financial & Transactional Data: VAT numbers (NIF/NIPC), bank account details for payments, and purchase history.

Technical Data: IP addresses, login data for the B2B portal, and cookies for website optimization.

3. Purpose of Data Processing

Your data is processed based on the following legal grounds:

Contractual Necessity: To manage orders, logistics, and hardware distribution.

Legal Obligation: To comply with tax regulations, invoicing laws, and warranty (RMA) tracking.

Legitimate Interest: To provide technical updates on hardware and improve our B2B services.

Consent: For marketing communications (only if explicitly authorized by the user).

4. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements (typically 10 years for fiscal documents under Portuguese law).

5. International Data Transfers & Third Parties

IndigoRevelation does not sell your data. We only share information with:

Logistics Partners: To ensure the delivery of high-volume hardware.

Manufacturers: For warranty (RMA) registration and technical support.

Regulatory Authorities: When required by Portuguese or EU law.

6. Your Rights (GDPR Compliance)

Under the GDPR, you have the following rights:

Access and Rectification: Request a copy of your data or correct inaccuracies.

Erasure (Right to be Forgotten): Request deletion of data when it is no longer necessary.

Restriction of Processing: Limit how we use your data in specific circumstances.

Data Portability: Receive your data in a structured, machine-readable format.

Right to Object: Oppose the processing of data for marketing purposes.

To exercise these rights, please contact us at privacy@indigorevelation.com.

7. Security Measures

We implement advanced technical and organizational security measures, including encryption and secure servers, to prevent unauthorized access, alteration, or disclosure of your sensitive IT hardware procurement data.

8. Supervisory Authority

If you believe your data has been mishandled, you have the right to lodge a complaint with the Portuguese Data Protection Authority: CNPD – Comissão Nacional de Proteção de Dados (www.cnpd.pt).