Privacy policy
This policy explains in plain language how New Express collects, uses, shares, protects and retains personal data when you browse, create an account, shop, contact us or use our artificial-intelligence features.
Updated 29 October 2026
1. Who handles your data and the scope of this policy
The operator identified in the contact block at the end of this page is responsible for processing carried out by New Express. This policy covers the website, customer account, checkout, support, newsletter, shopping assistant and virtual try-on.
When an offer clearly marked as an affiliate offer takes you to another website, that partner handles data collected there under its own privacy policy. New Express does not control checkout, payment or accounts created on the partner website, so please read its documents before buying.
2. Data you provide
We may receive your name, email address, phone number, delivery and billing address, tax identifier where required, language preference, order details and information submitted through contact forms. We also process support messages, newsletter subscriptions, consent choices and information needed for cancellations, returns or refunds.
Provide only accurate and necessary information. Do not place passwords, card security codes, complete identity documents or sensitive data in free-text fields, chat or support messages unless we request it through a secure channel for a legitimate need.
3. Account and Google sign-in
If you choose Google sign-in, Google confirms your identity and may share your name, email address, email-verification status and profile picture. New Express never receives your Google password.
We retain the account identifier, session and technical authorisation data required for access. OAuth tokens received are stored in encrypted form. You can sign out at any time and manage the connection through your Google Account settings.
4. Data collected as you browse
We receive technical data needed to operate and secure the service, such as IP address, browser and device type, language, date and time, pages or routes accessed, session identifiers, error logs and abuse-prevention signals. For clicks to affiliate partners, we may also record the product, language, referral source and technical click data for attribution and security.
Your basket may be saved in your browser's local storage. This information keeps your choices available between pages, remembers language, diagnoses faults, combats fraud and measures the store's essential operation.
5. Why we use data and our lawful grounds
We process data to create and protect accounts; answer pre-purchase questions; form, charge for and perform a contract; deliver orders; provide support; handle cancellations and refunds; meet tax, accounting, regulatory and judicial duties; prevent fraud; establish or defend legal claims; and maintain and improve the service.
Depending on the applicable law, we rely on performance of a contract or steps you request, compliance with legal obligations, legitimate interests assessed against your rights, the establishment or defence of rights, or your consent. Where consent applies — such as a newsletter or uploading a virtual try-on photo — you may withdraw it for future use without affecting earlier lawful processing.
6. Payments, orders and delivery
Payment providers handle full card numbers and security codes in their own environments. New Express receives information such as the method chosen, transaction status, payment identifier and amount, but does not store the full card number or security code.
Depending on the country and the option shown at checkout, payment may be processed by PayPal, Stripe, Mercado Pago or Asaas. To prepare and deliver a direct purchase, we may share with external suppliers, logistics operators or carriers only the data needed — such as the recipient, contact details, address, items and tax identifier where required. Direct dispatch does not change the seller identified at checkout or reduce your rights.
7. Curation, recommendations and reviews
Our curation uses catalogue and commercial information such as price, availability, supplier reputation, review volume and average, apparent quality and relevance to customers. Rankings and recommendations are intended to make products easier to discover. We do not use sensitive data for this purpose or make decisions from them that produce significant legal effects for you.
Some ratings and comments may come from source suppliers or marketplaces and may be translated. Where displayed, we aim to identify their source and distinguish them from reviews submitted directly to New Express. Author details published by a third party remain subject to the source and applicable rules.
8. AI shopping assistant
When you use the assistant, recent messages and the catalogue context needed to answer are sent to OpenAI. New Express does not save the conversation content in its database and configures the request not to create persistent API conversation history; the provider may still process technical and safety records under its rules and the service configuration.
Use chat only for product guidance. Never submit passwords, card data, complete documents, health information or other sensitive data. Responses can be inaccurate and should be checked against the product page and checkout.
9. AI virtual try-on
Virtual try-on is optional and processes a photo only after you consent when uploading it. The photo and product reference are transmitted to OpenAI to generate the simulation. New Express does not use the image to identify you, include it in advertising, or save the uploaded or generated image in its database or permanent storage; the result is returned to your browser for viewing and download.
We retain only image-free technical metadata, such as the operation identifier, product, language, status, timestamps and any error code, for security, usage limits and diagnostics. You can close the preview or clear site data in your browser. Completed processing cannot be undone, but you can withdraw consent for future use by not submitting another photo.
10. Cookies, local storage and communications
We currently use cookies and equivalent technologies that are essential for sessions, language, security and administration. The basket may be stored locally on your device. If we later introduce optional advertising or analytics cookies that require permission, we will offer appropriate choices before activating them and update this policy.
We send transactional messages needed for accounts, orders, delivery, security and support. Marketing is sent only where a valid lawful ground exists, including consent where required. You may opt out through the mechanism in a message or ask us through the contact channel.
11. Who receives data
We may share strictly necessary data with providers of hosting and databases, authentication, payment, fraud prevention, support, email, sourcing, delivery, artificial intelligence and technical services. We may also disclose it to authorities or other parties where law requires, to protect rights and safety, or in a business reorganisation subject to confidentiality duties.
We do not sell personal data. An affiliate commission results from a partner attributing a visit or purchase and does not permit New Express to trade your identity. Each provider receives access appropriate to its role and is subject to compatible contractual, technical or legal safeguards.
12. International transfers
Because the store uses technology providers, suppliers and carriers in different countries, data may be processed outside the country where you are located. This may happen to authenticate an account, process payment, generate an AI feature or deliver an international order.
Where required, we use mechanisms recognised by applicable law, contractual clauses, provider assessments and security controls to provide compatible protection. You may request information about categories of recipients and safeguards relevant to your case.
13. How long we retain data
We keep each category only for as long as needed for its stated purpose. Account and session records remain while needed for access; contacts, orders, payments and tax documents follow operational and statutory periods; security and affiliate records remain for a proportionate period for abuse prevention, attribution, audit and legal claims.
When no longer needed, data is deleted, anonymised or isolated pending secure deletion unless a legal duty, investigation, dispute or exercise of rights requires retention. Backups follow separate cycles and are removed from ordinary use.
14. Security and incident response
We use access controls, encryption where appropriate, logging, environment separation, updates and other measures proportionate to risk. No internet-connected service is completely immune, so we also monitor failures and restrict internal access to what each role needs.
If an incident presents a relevant risk, we will contain, investigate and correct it and notify authorities and affected individuals where and when applicable law requires.
15. Your rights
Depending on your location and circumstances, you may request confirmation, access, correction, portability, anonymisation, restriction, objection, review of automated decisions, information about disclosures and deletion of data processed with consent. You may also withdraw consent and complain to the competent data-protection authority. Legal duties, fraud prevention or the need to preserve transaction evidence may limit some requests.
We will reply through the stated channel within the applicable period and will not discriminate against you for exercising a right. We may verify identity, and if we cannot fulfil all or part of a request, we will explain why when the law requires.
16. Children and young people
New Express is not directed at children and does not knowingly seek their data without a parent or guardian where the law requires one. Anyone without legal capacity to contract must use the store with the authorisation and supervision of a parent or legal guardian.
If you believe we have improperly received a child's or young person's data, contact us so that we can assess and take appropriate action.
17. Updates and language versions
We may update this policy when services, providers or legal requirements change. The date at the top identifies the current version; significant changes may be highlighted on the site or communicated through another suitable method.
The Portuguese, English, Spanish, Italian, French and Arabic versions were drafted to convey the same legal meaning naturally in each language. If interpretation is uncertain, contact us: no translation is used to remove mandatory rights available under your local law.
Contact and privacy requests
To ask a question or exercise a data right, write to the email address below and describe your request clearly. We may request only the additional information needed to verify your identity and protect your account.
New Express · admnew@newexpress.shop