No To Apathy
Privacy POlicy
Last time edited: 29/06/2026
1. Who Controls Your Data
NO TO APATHY, UNIPESSOAL LDA (No To Apathy) is the Data Controller responsible for your personal data. We are a single member private limited company registered in Portugal under company and tax number (NIPC) 519317068, with registered office at Avenida Narciso Ferreira, 220 loja 25, 4765-202 Riba de Ave, Vila Nova de Famalicão, Braga District, Portugal.
2. What Data We collect and why
3. Our Merchandise Shop Relies on Third-Party Processors
Because our merchandise shop is integrated into the Website and connected to several specialist providers, your data is shared with the following processor strictly to fulfil your order. Each act as a Data Processor on our behalf under their own data processing terms.
3.1 Shopify (E-commerce platform)
Data received: Names, email addresses, delivery addresses, IP addresses and payment details.
Purpose: To host the storefront, handle checkout, and prevent fraud. Data may be transferred internationally under Shopify's Data Processing Addendum
More Info: shopify.com/legal/privacy
3.2 InvoiceXpress (Invoicing Software)
Data received: Names, fiscal/tax numbers (NIF/VAT, if provided), billing addresses, and order contents.
Purpose: To legally generate and archive invoices, as required under Portuguese tax law.
More info: invoicexpress.com/data-processing-terms
3.3 Ship4You (Fulfilment & Logistics)
Data received: Names, shipping addresses, phone numbers, and email addresses.
Purpose: To pick, pack, and ship orders, and to coordinate transport and print delivery documents.
More info: ship4you.com/en/services/fulfillment
In addition to the shop, we also use Squarespace Inc for Website hosting and basic functionality- but the policy does not include the data collected etc by Squarespace- https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses.
4. Cookies
No To Apathy only uses cookies that are strictly necessary for the Website and our merchandise shop to function. We do not use cookies for analytics, advertising, or any form of tracking, and we do not build profiles of your behaviour, interests, or activity on our Website or elsewhere.
Because our merchandise shop is built into the same Website as our general content, and connected to third party providers (Shopify, InvoiceXpress and Ship4You), a small number of essential cookies are technically required to keep the Website and shop working correctly- for example, to keep the items in your basket while you browse, to complete checkout securely, and to help prevent fraudulent transactions.
The Cookies do not identify you personally beyond what is strictly needed to complete your visit or purchase. Because they are strictly necessary, EU and Portuguese Law (Lei n. º41/2004, transposing the ePrivacy Directive) does not require us to ask for your consent to use them. We strongly believe you should know exactly what they do and why they exist.
We do not use any non-essential Cookies. If this were ever to change, we would update this policy and ask for your consent first, in line with applicable law.
5. Your rights under gdpr
As a data subject under GDPR, you have the right to:
5.1. Access, request a copy of the personal data we hold about you.
5.2 Rectification, request correction of inaccurate or incomplete data.
5.3 Erasure, request deletion of your data (right to be forgotten), subject to legal retention obligations (for example, invoicing data must be kept for 10 years under Portuguese tax law).
5.4 Restriction, request that we limit how we use your data in certain circumstances.
5.5 Portability, request your data in a structured, machine-readable format.
5.6 Objection, object to processing based on legitimate interest, including direct marketing, at any time
5.7 Withdraw consent, withdraw consent for newsletter or survey participation at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact us at info@notoapathy.com. We will respond within one month, as required by GDPR; nevertheless we can add that this may be extended by two further months for complex or numerous requests.
You also have the right to lodge a complaint with the Portuguese data protection supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt, if you believe your data protection rights have been violated.
6. Children’s Data
Our Website and services are not directed at children under 16. We do not knowingly collect personal data from children under this age. If you believe a child has provided us with personal data, please contact us so we can delete it.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction, considering the nature of the data and the risks involved. This includes relying on reputable third-party providers (Shopify, InvoiceXpress, Ship4you, Squarespace, Google) who maintain their own industry-standard security certifications.
8. Institutional Partners and Prospect Data
When we contact universities, organisations or other potential partners, or when they contact us, we process limited professional contact data (such as name, role and work email) based on legitimate interest in pursuing civic and educational collaborations. You may object to this processing at any time by contacting us, and we will stop processing your data unless we have compelling legitimate grounds to continue or are required to retain it for legal reasons.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “last updated” date at the top of this page indicates when changes were last made. Significant changes will be communicated via the Website or, where appropriate, by email to subscribers.
10. Contact Us
For any questions about this Privacy Policy or how we handle your data, contact info@notoapathy.com.
NO TO APATHY, UNIPESSOAL LDA — Privacy Policy